Surga99 takes your privacy seriously. This document transparently explains how we collect, store, use, and protect your personal information in accordance with Malaysian law.
Key things you need to know – full details below
Name, phone, email & transaction data only
256-bit SSL & end-to-end encryption
Only to designated & necessary parties
Access, correct, delete & restrict your data
Used to enhance your user experience
All privacy enquiries answered within 3 days
This Privacy Policy applies to all users and registered members of the surga99 platform at surga99.click. By continuing to use our platform, you agree to the data protection practices described in this document.
Surga99 ("we", "platform", or "Company") is committed to protecting the privacy and personal data of all members and users of our platform. This Privacy Policy has been drafted in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia, and is intended to clearly explain our data management practices.
We believe every surga99 member has the right to know exactly what happens to their personal data — what information we collect, why we need it, how we use it, and who it may be shared with. For surga99, transparency is not merely a legal obligation — it is a core value.
This document supersedes all previous versions of the surga99 Privacy Policy. In the event of any conflict between the Bahasa Malaysia version and any other version, this Bahasa Malaysia version shall prevail for all Malaysian members.
Surga99 collects two main categories of information from our users:
| Type of Information | Example | Mandatory / Optional |
|---|---|---|
| Identity Information | Full name, MyKad/Passport number, date of birth | Mandatory |
| Contact Information | Phone number, email address | Mandatory |
| Financial Information | Bank/e-wallet account holder name, withdrawal account number | Mandatory (for withdrawals) |
| Verification Information | MyKad copy, verification selfie (KYC) | Upon request |
| Communication Information | Customer support conversation records, emails, support tickets | Where applicable |
Surga99 not store your full credit/debit card number. All payments are processed through trusted third-party secure payment gateways such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, ShopeePay, and Boost, all of which comply with PCI-DSS security standards.
Surga99 collects your personal information through the following methods:
Surga99 uses collected information solely for lawful and necessary purposes. We do not sell your personal data to any third party for marketing purposes.
| Purpose | How Information Is Used | Legal Basis |
|---|---|---|
| Member account management | Name, email address, phone number | Contractual performance |
| Financial transaction processing | Financial information, identity | Contractual performance |
| Identity verification (KYC/AML) | MyKad/Passport, verification photo | Legal obligations |
| Fraud prevention & security | IP address, account activity, device logs | Legitimate interests |
| Customer support | Communication records, account history | Contractual performance |
| Marketing communications (with consent) | Email, phone number | Consent |
| Platform improvements | Anonymised usage data | Legitimate interests |
You may withdraw your consent to receive marketing communications at any time by clicking the "Unsubscribe" link in any of our marketing emails, or by contacting Surga99 customer support. Withdrawing your consent does not affect the validity of any data processing that took place prior to the withdrawal.
Surga99 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, we may share your information in the following limited circumstances:
We work with carefully selected third-party service providers to support the operation of the Surga99 platform, including:
All service providers are bound by strict data protection agreements and may only use your data for purposes specified by surga99.
Surga99 may disclose your personal information to Malaysian authorities if:
Surga99 implements multiple layers of technical and organisational security controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
While we take all reasonable steps to protect your data, no system can guarantee 100% security against all threats. If you suspect your account has been compromised, please contact surga99 customer support immediately via live chat.
Surga99 retains your personal data for as long as your account is active or as required for service and legal compliance purposes:
Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by Surga99:
You have full control over your personal data
You have the right to request a copy of the personal data we hold about you. surga99 will provide this information within 21 business days from the date the request is received.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic information can be updated directly in your account settings.
You may request deletion of your personal data in certain circumstances — for example, when the data is no longer needed or your consent has been withdrawn (subject to legal requirements).
You may object to or request restriction of the processing of your personal data in certain circumstances, including for direct marketing purposes.
You have the right to receive your personal data in a structured, machine-readable format, and to transfer it to another data processor if you wish.
Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without any penalty.
To exercise any of the above rights, contact the surga99 Privacy Officer at privacy@surga99.click stating the right you wish to exercise and your identifying information.
More than just legal compliance — your privacy is our responsibility
All your personal and financial transaction data at surga99 is protected with the same 256-bit SSL encryption used by Malaysia's leading banking institutions.
Surga99 has never and will never sell, rent, or disclose your personal data to advertisers or third parties for their marketing purposes.
All of Surga99's data management practices are in full compliance with Malaysia's Personal Data Protection Act 2010 — the country's primary privacy legislation.
You may access, correct, or request deletion of your data at any time. surga99 makes it straightforward to exercise your privacy rights — no complicated procedures required.
Member funds are held in a trust account separate from surga99's operational accounts — fully safeguarding your financial interests.
Once the legal retention period expires, your data is securely deleted in accordance with internationally recognised data deletion standards.
Answers to the most frequently asked privacy questions
We take your data protection seriously. Now it's time for you to enjoy Malaysia's best online betting experience with complete confidence.
Data protected by 256-bit SSL • PDPA 2010 compliant • 24/7 support in Bahasa Malaysia