Official Documents

Surga33 Privacy Policy – Personal Data Protection Malaysian Players

Surga33 takes the privacy and security of every player's personal data seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
Version: 3.1
🔐
Surga33's Privacy Commitment
256-bit SSL Encryption
Malaysia PDPA Compliance
No sale of data to third parties
Full data control by the player
Data deletion upon request
🛡️
SSL-Protected Data

All data is transmitted through secure channels with 256-bit encryption

🚫
No Data Sales

Your personal data is never sold or rented to any third party

⚖️
PDPA Compliance

Our operations comply with Malaysia's Personal Data Protection Act 2010

👤
Full Control Rights

You have the right to access, correct, and request the deletion of your data

01

Introduction & Scope of the Privacy Policy

Welcome to the Surga33 Privacy Policy. This document sets out Surga33's ("we", "Platform") commitment to protecting your privacy and personal data as a player or user of our platform at surga33.ws.

Surga33 takes the trust you place in us when sharing your personal information with the utmost seriousness. We understand that for most Malaysian players, privacy is not merely a legal requirement — it is a fundamental right that deserves to be respected. That is why we have built our systems and processes with privacy as the foundation, not as an afterthought.

This Privacy Policy applies to all personal information we collect through:

  • The Surga33 website at surga33.ws
  • Surga33 mobile app for Android and iOS
  • All services and games available on the Surga33 platform
  • Communications between you and the Surga33 support team
  • Financial transactions including deposits and withdrawals

By using the Surga33 platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please contact us before continuing to use the platform.

This Privacy Policy should be read together with Terms & Conditions Surga33 forms part of the overall agreement between you and our platform.


02

Personal Information We Collect

Surga33 only collects data that is genuinely necessary to provide our services to you. The following are the categories of information we collect:

A. Information You Provide Directly:

  • Full name as shown on your identification document (MyKad or passport)
  • Date of birth for age verification purposes
  • An active email address
  • Malaysian mobile number
  • Passwords (stored in encrypted hash format – we are unable to read your password)
  • Bank account or e-wallet details for payment purposes (Touch 'n Go eWallet, GrabPay, DuitNow, ShopeePay, Boost, Maybank2u, CIMB Clicks)
  • KYC documents such as a copy of your MyKad and proof of address when required

B. Automatically Collected Information:

  • IP address and device information
  • Session data and in-platform activity logs
  • Game history and transactions
  • Web browser and operating system information
  • Approximate geolocation data (not precise GPS)
  • Cookies and similar tracking technologies
Data Category Primary Purpose Required?
Name & Date of BirthIdentity & age verificationYes
Phone NumberAccount verification & OTPYes
Payment InformationDeposits & withdrawalsYes
IP Address & DeviceSecurity & fraud preventionYes
Game HistoryResponsible gambling & supportAuto
Optional CookiesUser experience improvementPreferences

03

How We Use Your Personal Data

Surga33 uses your personal data solely for lawful, transparent purposes that are limited to what is necessary for the platform's operations. The following are the specific purposes for which your data is used:

  • Account Management: Creating, verifying, and managing your Surga33 account
  • Transaction Processing: Processing deposits, withdrawals, and bonus payments securely
  • Identity Verification (KYC): Fulfilling legal compliance obligations, including anti-money laundering requirements
  • Customer Support: Responding to enquiries, resolving issues, and providing technical support
  • Platform Security: Detecting and preventing fraud, hacking, and platform abuse
  • Responsible Gaming: Monitoring playing patterns to identify players who may need assistance
  • Service Communications: Sending important notifications relating to your account, transactions, and terms updates
  • Marketing Communications: Sending promotional information, bonuses, and exclusive offers (only with your consent)
  • Platform Improvements: Analysing usage data to improve the user experience
  • Legal Compliance: Fulfilling legal obligations and the requirements of relevant authorities

Surga33 does not use your data to make automated decisions that materially affect your rights or interests without human involvement. All significant decisions — such as account closures or withdrawal rejections — are reviewed by our team.


04

Legal Basis for Data Processing

Surga33 processes your personal data on valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA). These bases are:

  • Consent: You have given explicit consent for certain data processing activities, such as marketing communications. You may withdraw this consent at any time
  • Contract Performance: Processing necessary to fulfil the service agreement between you and Surga33, including payment processing and account management
  • Legitimate Interests: Processing for security, fraud prevention, and service improvement purposes that does not override your privacy rights
  • Legal Obligation: Processing required to comply with applicable Malaysian laws, including AML/KYC requirements

05

Data Sharing & Disclosure to Third Parties

Surga33 does not sell, rent, or trade your personal data to any third party for their marketing purposes. This is a core principle we have never compromised on since the very first day our platform launched.

However, there are limited situations where we may need to share your data with trusted third parties, solely to enable us to provide our services to you:

  • Payment Providers: Information required to process deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost, Maybank2u, and CIMB Clicks
  • Game Software Providers: Minimum technical data required by providers such as Evolution Gaming, Pragmatic Play, and Microgaming to operate their games
  • Technology Service Providers: Cloud infrastructure, cybersecurity, and analytics providers bound by strict data protection agreements
  • Authorities: Malaysian government agencies or law enforcement bodies when required by law or court order

All third parties we work with are required to sign data protection agreements ensuring they handle your data to a standard no less stringent than this Surga33 Privacy Policy.


06

Data Security Measures

Surga33 invests seriously in security infrastructure to protect your personal data from unauthorised access, loss, misuse, or disclosure. The security measures we have in place include:

  • 256-bit SSL Encryption: All communications between your device and Surga33's servers are encrypted using the latest TLS protocols
  • Sensitive Data Encryption: Financial information and KYC documents are stored in encrypted format using the latest industry-standard encryption algorithms
  • Hashed Password: Your password is never stored in plain text — we use an irreversible cryptographic hash function
  • Two-Factor Authentication (2FA): 2FA is available on all Surga33 accounts for an added layer of security
  • 24/7 Security Monitoring: Our automated monitoring system detects and alerts on any suspicious activity in real time
  • Regular Security Audits: Independent security assessments are conducted periodically by qualified third parties
  • Data Access Restrictions: Only staff who require access to specific data to carry out their duties are permitted to do so

While we take every reasonable step to protect your data, no system can be guaranteed 100% secure. You are also responsible for safeguarding your Surga33 account password and login credentials from others.


07

Personal Data Retention Period

Surga33 retains your personal data only for as long as it is needed for the purposes it was collected, or as required by applicable law. The following are general guidelines for our retention periods:

  • Active Account Data: Retained for as long as your account remains active and in use
  • Data After Account Closure: Basic records are retained for 7 years after account closure to meet Malaysian financial and legal compliance requirements
  • Transaction Records: Retained for 7 years in accordance with Malaysian financial law requirements
  • Security Logs: Retained for 2 years for investigation and security purposes
  • Communications Data: Email and customer support records are retained for 3 years
  • Cookies: Depends on cookie type – ranging from the current session up to a maximum of 24 months

Once the applicable retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.


08

Cookies & Tracking Technologies

Surga33 uses cookies and similar tracking technologies to enhance your experience on the platform and ensure its core functions operate correctly. The types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality
  • Performance Cookies: Collecting information on how you use the platform to help us improve our services. All data is anonymised
  • Functionality Cookies: Remembering your preferences — such as language, display settings, and game choices — to deliver a more personalised experience
  • Analytics Cookies: Helps us understand overall usage patterns for the continuous improvement of the Surga33 platform

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality and security of your Surga33 account. Analytical and performance cookies are optional and can be turned off without impacting core functionality.


09

Your Rights Regarding Personal Data

As a data subject, you have the following rights under Malaysia's PDPA regarding the personal data we hold about you. Surga33 is committed to respecting and facilitating the exercise of all these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 working days.

Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Simple updates can be made directly through your account settings.

Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances. Please note that we may need to retain certain data to fulfil our legal obligations.

Right to Object & Withdraw Consent

You may withdraw your marketing consent at any time via the unsubscribe link in our emails or by contacting our support team. Withdrawal does not affect the validity of any processing carried out prior to that point.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform operator where applicable.

To exercise any of the above rights, please contact the Surga33 privacy team by email at privacy@surga33.ws or via the in-platform live chat. We will verify your identity before processing any data-related requests.


10

Child Data Protection

Surga33 strictly does not collect or process personal data from individuals under the age of 18. Our platform is exclusively for adults, and we take this responsibility seriously.

We apply an age verification process during registration and KYC checks to ensure all users meet the minimum age requirement. Should we discover that a minor's data has been inadvertently collected, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe your child under the age of 18 has registered a Surga33 account, please contact us immediately at support@surga33.ws so that we may take the appropriate action.


11

Amendments to the Privacy Policy

Surga33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, industry practices, or our operations. When we make material changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending email notifications to all registered players regarding important changes
  • Displaying clear notices on the platform for a reasonable period

Your continued use of the Surga33 platform after any amendments take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.

For highly material changes that may significantly affect your privacy rights, Surga33 will provide at least 30 days' notice before the changes take effect, giving you sufficient time to review and make an informed decision.


12

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Surga33 handles your personal data, please do not hesitate to reach us through the following channels:

  • Privacy Email: privacy@surga33.ws
  • General Support Email: support@surga33.ws
  • Live Chat: Available 24/7 within the Surga33 platform

The Surga33 privacy team will endeavour to respond to all enquiries within 14 working days. For more complex matters, we will keep you informed of a realistic resolution timeline.

Surga33 also complies with reporting obligations under Malaysia's PDPA. In the event of a data breach that may pose a risk to your rights or freedoms, we will notify you and the relevant authorities within the timeframe required by law.

Why Your Privacy Is Safe at Surga33

Six layers of protection keeping your personal data secure at all times

256-bit End-to-End SSL Encryption

All data transmitted between your device and Surga33's servers — including login credentials, transaction data, and game records — is protected by the same encryption standards used by leading financial institutions.

Full Malaysia PDPA Compliance

Surga33 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Every instance of data processing has a valid legal basis, and you are informed of the purpose for which your data is used.

No Sale of Data to Advertisers

Surga33 has never sold, rented, or traded your personal data to advertisers, data brokers, or any third party for their own marketing purposes — and we never will.

Real-Time Security Monitoring

Surga33's automated security monitoring system operates around the clock, detecting any suspicious activity or unauthorised access attempts and responding immediately to protect your account.

Full Control in Your Hands

You may access, correct, download, or request deletion of your personal data at any time through your account settings or by contacting our privacy team. You are always in control.

Periodic Independent Security Audits

Surga33's security and privacy infrastructure is regularly assessed by qualified independent auditors to ensure your data protection consistently meets or exceeds current industry standards.

🔐

Your Data Is Safe at Surga33 – Play with Confidence

With 256-bit SSL protection, Malaysia PDPA compliance, and our commitment to privacy, you can enjoy over 500 Surga33 games with complete peace of mind.

For players aged 18 and above only  ·  Play responsibly

Bahasa Melayu