We understand that your privacy is not something to be taken lightly. This document clearly explains how surga22 manages, protects, and respects the personal information of every member.
Surga22 takes the personal data privacy of its members with the utmost seriousness. We understand that when you entrust us with your information, you expect it to be handled with full integrity, transparency, and security. That trust is not something we take lightly.
This Privacy Policy applies to all users who access surga22.vu, use the surga22 mobile app or interact with any of the services we offer. It describes the types of data we collect, why it is collected, how it is used, and the rights you hold regarding that data.
We operate on a "privacy by design" principle — meaning data protection is built into every system and process we develop from the ground up, not added as an afterthought. This is the foundation of trust we build with every surga22 member.
Surga22 only collects data that is strictly necessary to provide quality, secure services and to comply with legal requirements. Below are the categories of data we may collect:
In certain situations, we may receive information about you from payment service providers, identity verification agencies or partner platforms working with surga22 solely for verification and security purposes.
Collected data is used solely for legitimate and transparent purposes. Surga22 does not use your data for any purpose beyond the scope stated below without first obtaining additional consent from you.
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Account management and verification | Name, email, date of birth | Contract performance |
| Deposit and withdrawal processing | Bank details, transaction records | Contract performance |
| Identity verification (KYC/AML) | ID documents, address | Legal obligation |
| Security and fraud prevention | IP address, device data, login patterns | Legitimate interests |
| Customer Support | Email, phone number, account history | Contract performance |
| Promotional communications (with consent) | Email, phone number | Consent |
| Platform improvement and analytics | Anonymous usage data | Legitimate interests |
Specifically regarding marketing communications, you may opt out of receiving promotional emails at any time via the "unsubscribe" link in any email or by updating your communication preferences in your surga22 account settings.
Surga22 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share certain information to enable us to deliver our services properly:
We work with carefully selected third-party service providers to help operate the platform, including payment processors, KYC service providers, cloud computing companies, and gaming software providers. All parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.
Surga22 may be required to disclose information to government authorities or law enforcement agencies when mandated by law, court order, or to comply with valid legal proceedings. We will always endeavour to notify you of such disclosures where permitted by law.
In situations where there is a serious threat to the safety of other users or the integrity of the platform, relevant information may be shared with appropriate parties for prevention or investigation purposes.
Protecting your data is one of the most significant investments surga22 makes. We implement multiple layers of technical and organisational security to ensure your data is always protected against unauthorised access, loss, or misuse.
Access to member personal data within the surga22 system is strictly limited to staff who require it to perform their duties. All access is logged and monitored. All staff undergo regular data protection training and are bound by binding confidentiality agreements.
Surga22 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how our platform is used. Below is an explanation of the types of cookies we use:
These cookies are required for core platform functions such as login session authentication, security, and language preferences. The platform will not function properly without these cookies and they cannot be disabled.
We use analytics tools to understand overall platform usage patterns for improvement purposes. This data is collected in aggregate and anonymised — it does not identify you personally.
These cookies remember your preferences such as language, display currency, and interface settings so you do not need to reselect them on every visit.
You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the surga22 platform.
Under Malaysia's PDPA and international data protection best practices, you have the following rights regarding your personal data held by surga22. We are committed to facilitating the exercise of these rights at no unreasonable cost:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
If your data is inaccurate or incomplete, you may request a correction through your account settings or by contacting our support team.
In certain circumstances, you may request the deletion of your personal data, subject to legal retention obligations.
You may request that we restrict the processing of your data in certain circumstances while a dispute is being resolved.
You may object to the processing of your data for direct marketing purposes at any time, without conditions.
You have the right to receive your data in a machine-readable format for transfer to another service provider.
Surga22 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Below are our general retention period guidelines:
Once the retention period expires, your data will be securely deleted or anonymised using industry-recognised methods.
If you have any questions, concerns, or complaints regarding how surga22 handles your personal data, or if you wish to exercise any of the rights stated in this policy, you may contact us through the following channels:
We are committed to responding within 5 business days for all privacy-related inquiries. For more complex matters such as data access requests, the response period is 21 business days as required under PDPA.
If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant authority in your region.
Not just a promise — this is the data protection system we actively implement
Every bit of data transmitted between your device and surga22 servers is protected with SSL 256-bit encryption — on par with what leading banking institutions use.
Our KYC process uses advanced document verification technology. All documents you submit are stored with encryption and securely deleted once the requirement period ends.
The surga22 cybersecurity team monitors our systems around the clock. Any unusual activity is detected and acted upon immediately before it can affect your data.
Our privacy policy is designed in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a Malaysian user are fully respected.
Surga22 has never and will never sell member personal data to advertisers or data brokers. Your data is used solely to enhance your experience on our platform.
Through your surga22 account settings, you can manage your privacy preferences, marketing communications, and data rights at any time — no need to contact support.
Surga22 invests in internationally recognised security technology and standards
Communication channel encryption on par with international banking standards.
All payment processing complies with the Payment Card Industry Data Security Standard.
Data at rest encrypted using the 256-bit Advanced Encryption Standard (AES-256).
Full compliance with the Personal Data Protection Act 2010 to safeguard the rights of Malaysia users.
Now you know how we protect your data. Register a surga22 account today and enjoy a safe, fair, and transparent gaming experience alongside thousands of members across Malaysia.
By registering, you agree to the Terms and Conditions and Privacy Policy ours.