At surga19, your privacy is not merely a legal obligation — it is a responsibility we take seriously every day. This document clearly explains how we collect, use, and protect your personal information as a player on our platform.
Surga19 takes your privacy seriously. As a trusted online gaming platform in Malaysia, we understand that player trust is our most valuable asset. This Privacy Policy is designed to provide full transparency on how we handle your personal information — from the moment you register to every gaming session you enjoy.
This document applies to all players who register or use the surga19 platform, including the official website, mobile app, and any related services we offer. By continuing to use the surga19 platform, you confirm that you have read, understood, and agreed to the provisions of this Privacy Policy.
This policy is built on internationally recognised data protection principles, tailored to the Malaysian market. We make no assumptions — every clause is written clearly so you know exactly what happens to your personal information.
To provide a secure, personalised, and high-quality service, surga19 collects several categories of information from our players. This collection is conducted transparently and solely for legitimate purposes.
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity | Name, IC, Date of Birth | KYC & Age Verification |
| Contact | Email, Phone | Communication & Notifications |
| Financial | Bank Account No. | Deposit & Withdrawal |
| Technical | IP, Browser, Device | Security & Performance |
| Usage | Gaming, Betting | Personalization & Reporting |
Every piece of information we collect has a clear and legitimate purpose. surga19 does not use your data beyond the scope described below. We operate on a "minimum necessary use" principle — meaning we only process data that is genuinely required for the stated purpose.
Your information is used to register and manage your surga19 account, process deposits and withdrawals, verify your identity through the KYC process, and grant you uninterrupted access to all games and features on our platform.
We use technical and usage data to detect and prevent fraudulent activity, hacking attempts, money laundering, and system abuse. This includes monitoring unusual transaction patterns and verifying your login location to ensure only you can access your account.
As a responsibly operated platform, surga19 is required to retain certain records and report specific transactions to the relevant authorities in accordance with anti-money laundering (AML) requirements and other applicable compliance obligations.
We analyse aggregated, anonymised usage patterns to understand the most popular games, improve platform performance, enhance user interface design, and develop new features better suited to the needs of Malaysian players.
With your consent, we use your email address and phone number to send important account notifications, promotional information, and exclusive bonus offers. You may opt out of promotional communications at any time through your account settings.
Surga19 does not sell or trade your personal data. However, there are limited situations where we need to share certain information with trusted third parties in order to deliver our services to you effectively.
We share only the necessary information with service providers that support our operations, including:
All these third parties are bound by strict data protection agreements and are only permitted to use your information for purposes that have been agreed upon with surga19.
Surga19 may disclose your information to government authorities, regulatory bodies, or law enforcement agencies where we are required to do so by court order, legal process, or valid regulatory obligation. We will always endeavour to notify you in advance where circumstances permit.
Protecting your personal and financial information is surga19's top priority. We continuously invest in the latest security infrastructure to ensure your data remains protected at all times.
All data transmitted between your device and surga19 servers is protected using 256-bit SSL (Secure Socket Layer) encryption — the same security standard used by major financial institutions and banks worldwide. This means that even if someone were to intercept data in transit, they would be unable to read it.
Your data is stored on servers equipped with multi-layered firewalls, intrusion detection systems (IDS), 24/7 security monitoring, and strict physical access controls. Only authorised personnel may access player personal data, and every access is logged for audit purposes.
Your financial details are processed through PCI-DSS certified payment gateways. surga19 does not store full card numbers, PINs, or sensitive payment information on our own servers.
Surga19 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the surga19 platform.
As a surga19 player and data subject, you have important rights regarding your personal information. surga19 fully respects these rights and provides accessible channels for you to exercise them.
Surga19 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. We do not retain data that is no longer needed.
Active account information is retained for the duration your account remains active, plus an additional period required for legal compliance purposes — typically five to seven years after account closure, in accordance with applicable anti-money laundering regulations.
Financial transaction records are retained in accordance with applicable financial and tax legal requirements. Technical data and server logs are kept for a shorter period and automatically deleted once they are no longer needed for security and operational purposes.
When your data is no longer needed and there is no legal obligation to retain it, surga19 will delete it using secure deletion methods that ensure the data cannot be recovered. For data in physical format (such as printed KYC documents), certified and secure disposal procedures are used.
Surga19 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or newly added platform features. Each updated version will display a new "Last Updated" date at the top of this page.
In the event of material changes that significantly affect your rights, surga19 will notify you via your registered email or through a prominent notice on the platform before those changes take effect. This gives you the opportunity to review the changes and make an informed decision about your continued use of our platform.
Continued use of the surga19 platform after any Privacy Policy changes are published and take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically.
If you have any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data by surga19, our team is ready to assist you at any time.
Surga19 invests fully in the latest data protection technologies to ensure every player can enjoy a worry-free experience with complete confidence.
Every connection to the surga19 platform is protected with military-grade SSL encryption — the same standard used by Malaysia's leading banks to safeguard your data and transactions at all times.
An additional security layer through two-factor authentication ensures that only you can access your surga19 account, even if your password is compromised.
Your personal data is stored in a fully encrypted database. Even if someone were to gain unauthorised access to the server, your data cannot be read without the correct encryption key.
Surga19's cybersecurity team monitors our systems around the clock to detect and respond to any threats or suspicious activity before they can affect your data.
Privacy is built directly into every feature and function of the surga19 platform from the design stage — not added as an afterthought. This means data protection is a core principle, not an optional extra.
Surga19's data protection practices comply with internationally recognised security standards, including PCI-DSS for payment data, ensuring you receive world-class protection.
Also read other important documents governing the use of the surga19 platform.