Official Privacy Document

SurgaVIP Privacy Policy – Malaysia Member Personal Data Protection

SurgaVIP takes our responsibility to protect your personal data seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your information as a member of our platform.

Updated: 1 January 2026  |  Effective immediately

6 Ways SurgaVIP Protects Your Personal Data

Protecting your personal information is our top priority. Here is a summary of the security measures we put in place every day.

Industry-Grade Data Encryption

All data transmitted between your browser and SurgaVIP's servers is protected by 256-bit SSL/TLS encryption. This means your information — including login credentials and financial data — cannot be read by third parties while in transit.

Strict Access Control

Member personal data is accessible only to authorized SurgaVIP staff with a legitimate work requirement. All access is logged and continuously monitored. We use role-based access control (RBAC) to keep your data secure.

No Sale of Data to Third Parties

SurgaVIP does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you — we only use it for the purposes stated in this Privacy Policy.

Secure Data Storage

Member data is stored on high-performance cloud servers protected by multi-layered security systems. We enforce a strict data retention policy — data that is no longer needed is securely deleted in accordance with established procedures.

PDPA Legal Compliance

SurgaVIP complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant data protection legislation. We ensure that all our data handling practices align with current legal requirements to safeguard your rights.

Data Breach Notification

In the event of any security incident involving your personal data, SurgaVIP is committed to notifying you within a reasonable timeframe via your registered email, and will take immediate remediation steps to minimise the impact on you.

This Privacy Policy describes how SurgaVIP ("we", "Platform") manages your personal data as a member ("you"). By using the SurgaVIP platform, you agree to the practices described in this document.

1Introduction

SurgaVIP is committed to protecting the privacy of every member who uses our platform. This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and transparently explains how we handle your personal information from the moment of registration through your daily use of the platform.

We believe your trust is our most valuable asset. That is why every decision we make regarding data handling always prioritizes the interests and privacy of our members. This policy applies to all services offered through the surgavip.bar website and related mobile applications.

If you have any questions about how we handle your personal data, our support team is available via 24/7 live chat or SurgaVIP's official communication channels.

2Types of Personal Data We Collect

SurgaVIP only collects data that is strictly necessary to provide you with a safe, seamless, and responsible service. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, date of birth, identification card number Identity verification (KYC), fraud prevention
Contact Data Email address, phone number Account communications, security notifications
Financial Data Bank account number, bank name, transaction records Deposit and withdrawal processing
Technical Data IP address, browser type, device information Account security, fraud detection
Usage Data Game history, wagering records, session duration Responsible gaming, service improvement
Communication Data Support chat logs, incoming emails Complaint resolution, quality improvement

3How We Collect Your Personal Data

Your personal data is collected through various channels as you interact with the SurgaVIP platform:

  • Account Registration: Information you provide when completing the registration form, including your name, email, phone number, and date of birth.
  • KYC Process: Identity verification documents you upload, such as a copy of your national ID or passport, to meet legal compliance requirements.
  • Financial Transactions: Details provided when making deposits or withdrawals via FPX, DuitNow, Touch 'n Go, GrabPay, or other supported payment methods.
  • Platform Usage: Data generated automatically while you use the platform, including activity logs, session cookies, and game records.
  • Direct Communication: Information you share when contacting our support team via live chat, email, or Telegram.
  • Devices and Networks: Technical data collected automatically, including IP address, device type, operating system, and language settings.

We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has provided us with personal data, the account in question will be closed immediately and the data will be deleted.

4Personal Data Usage Purpose

SurgaVIP uses the personal data collected for the following legitimate and transparent purposes:

  • Account Management: Creating, verifying, and maintaining your member account on the platform.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
  • Identity Verification (KYC): Meeting legal requirements related to anti-money laundering (AML) and counter-terrorism financing (CFT).
  • Security and Fraud Prevention: Detecting and preventing fraudulent activity, unauthorized access, and multiple account usage.
  • Customer Support: Providing technical assistance and effectively resolving your complaints or inquiries.
  • Responsible Gaming: Monitoring gameplay patterns to identify and assist members who may be experiencing gambling-related issues.
  • Relevant Marketing: Sending information about promotions, special offers, and platform updates — provided you have given consent or have not objected to receiving such communications.
  • Service Improvement: Analyzing aggregate usage data (without identifying individuals) to improve the user experience and platform performance.

We only use your data for the purposes stated above. Should we wish to use your data for a new or different purpose, we will seek your fresh consent beforehand.

5Data Sharing with Third Parties

SurgaVIP does not sell your personal data to any party. However, under certain circumstances, we may need to share your information with the following parties:

  • Payment Service Providers: Financial institutions, banks, and e-wallet providers that process your transactions. They only receive data necessary to complete the transaction.
  • KYC Service Providers: Third-party identity verification companies that assist us in verifying member documents to meet compliance requirements.
  • Game Providers: Game software companies that provide gaming content on the SurgaVIP platform may receive session data required to run the games.
  • Legal Authorities: Law enforcement agencies, regulatory bodies, or courts when required by law or court order.
  • Technology Infrastructure Providers: Cloud service and server hosting providers that store and process platform data, subject to strict confidentiality agreements.

All third parties with whom we share data are required to handle that information in accordance with security standards equal to or higher than our own, and solely for agreed purposes.

6Data Security Measures

SurgaVIP implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, or disclosure:

  • 256-bit SSL/TLS Encryption: All communications between your browser and our servers are encrypted using the latest encryption standards.
  • Secure Password Storage: Your account password is stored in hashed form using a strong cryptographic algorithm — we are unable to read your password ourselves.
  • Two-Factor Authentication (2FA): Additional security features are available and strongly encouraged for all members to activate.
  • Continuous Security Monitoring: Automated monitoring systems operate around the clock to detect and respond to security threats.
  • Regular Penetration Testing: SurgaVIP conducts regular security audits and penetration testing through independent security experts.
  • Staff Training: All SurgaVIP staff receive regular data protection training to ensure proper data handling practices.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. We encourage you to also play your part in keeping your account safe by using a strong password and not sharing your login credentials.

7Cookies and Tracking Technologies

SurgaVIP uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification and security settings. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymous data on how you use the platform to help us improve website functionality and performance.
  • Functional Cookies: Saving your preferences such as language and regional settings to deliver a more personalized experience.
  • Analytics Cookies: Helping us understand aggregate traffic and usage patterns using trusted third-party analytics tools.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect platform functionality. By continuing to use the SurgaVIP platform after viewing our cookie notice, you consent to the use of cookies as described.

8Your Rights Regarding Personal Data

As a SurgaVIP member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request corrections to any inaccurate or incomplete personal data in your account.

Right to Erasure

You may request the deletion of your personal data, subject to applicable data retention legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Data Portability Right

You have the right to receive your personal data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

You may request that we restrict the processing of your data under certain circumstances while a dispute is being resolved.

To exercise any of the above rights, please contact our privacy team via live chat or email. We will process your request within 30 business days. In some cases, we may need to verify your identity before processing the request.

9Data Retention Period

SurgaVIP retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law:

  • Active Account Data: Retained for the duration your account is active and for several years after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's financial and taxation legal requirements.
  • KYC Documents: Retained for the period specified under Anti-Money Laundering laws (AMLA).
  • Support Communication Logs: Retained for 2 years for quality control and complaint reference purposes.
  • Cookie and Session Data: Session cookies are deleted when you close your browser; persistent cookies expire according to their defined settings.

When data is no longer needed, we delete it securely and irreversibly, ensuring it cannot be accessed by any party.

10Links to Third-Party Websites

The SurgaVIP platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the SurgaVIP platform.

SurgaVIP is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of any other website you visit. Third-party game providers integrated with our platform are subject to their own privacy policies for data they collect directly.

11Amendments to This Privacy Policy

SurgaVIP reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Updated" date at the top of this document indicates the date of the most recent revision.

For material changes — particularly those that significantly affect how we process your data — we will notify you via an in-platform notification or registered email at least 7 days before the changes take effect.

Continued use of the SurgaVIP platform after the effective date of any such amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you are encouraged to contact us or close your account.

We recommend bookmarking this page and reviewing it periodically to stay up to date with how we manage your data privacy.

12Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, please contact our Data Privacy Officer through the following channels:

  • Live Chat: Available 24/7 on the SurgaVIP platform — the fastest way to get an immediate response.
  • Email: [email protected] — for privacy inquiries that require written documentation.
  • Telegram: Reach the official SurgaVIP support agent via the Telegram channel listed on the platform.

We are committed to responding to all privacy-related inquiries within 3 business days. For formal data deletion or data access requests, please clearly state your purpose so we can process your request promptly and accurately.

Your Data is Safe. Your Gaming Experience is Secured.

With a clear understanding of how we protect your privacy, you can now play with greater peace of mind on SurgaVIP. Register today and experience a platform that is secure, trusted, and built around you.

Bahasa Melayu