Your privacy is not merely a legal obligation for us — it is a core value we have upheld since the very first day Surga88 began operating. This document clearly and honestly explains how we collect, use, store, and protect your personal information as a member of our platform.
Last updated: 1 January 2026. Any material amendments to this Privacy Policy will be communicated to all members via email at least 7 days before taking effect.
The principles that guide every decision we make on member data and privacy
Every bit of data you send to Surga88 — from registration details to transaction records — is protected with SSL 256-bit encryption. This is the same security standard used by Malaysia's major banks.
Surga88 never sells, rents, or transfers your personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not a business asset of ours.
Only Surga88 staff who require access to your data for legitimate operational purposes are permitted to view that information. All access is logged and regularly audited by our security team.
As a Surga88 member, you have the right to request a copy of the personal data we hold, request corrections to inaccurate data, or request deletion of your data once your account is closed, subject to any legal retention requirements.
In the event of any security breach that may affect your data, we are committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.
The Surga88 Privacy Policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect the rights granted to you under Malaysian law and comply with all applicable requirements.
Surga88 collects various types of information from you when you register, use the platform, or interact with our services. We only collect information that is genuinely necessary to provide you with a safe, fair, and quality experience.
We do not collect sensitive information such as biometric data, medical records, religious beliefs, or political views. If you are ever uncertain about why a particular piece of information is required, you are entitled to ask our support team before providing it.
Surga88's Data Collection Principles: We only ask for what we need. No form collects more information than is necessary for its stated purpose. This is our commitment to the data minimisation principle outlined in best-practice data protection standards.
Surga88 uses the information you provide solely for legitimate purposes directly related to the services you signed up for. We do not use your data for any purpose you have not agreed to or would not reasonably expect at the time of registration.
Regarding Marketing Communications: You may opt out of promotional emails at any time by clicking the "unsubscribe" link in any marketing email from Surga88, or by updating your communication preferences in your account settings. Unsubscribing from marketing communications does not affect important operational communications related to your account.
The security of your data is Surga88's highest technical priority. We continuously invest in security infrastructure to ensure your data is protected against all threats.
Surga88 retains active account data for the duration of your membership. After an account is closed, personal data is kept for the period required under Malaysian law (typically 7 years for financial records) before being securely deleted. Data that is no longer required will be erased using secure deletion methods that ensure it cannot be recovered.
Surga88 does not sell, rent, or trade your personal data to third parties. Full stop. However, there are limited situations where we may need to share certain information:
⚠ Phishing Warning: Surga88 will never ask for your password, PIN, or OTP via email, WhatsApp message, or phone call. If you receive any communication claiming to be from Surga88 and requesting such sensitive information, it is a scam. Please report it to our support team immediately.
The Surga88 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device when you access our platform.
You can manage your cookie settings through your web browser. However, disabling all cookies may affect certain features of the Surga88 platform. We recommend enabling at least the essential cookies for the best experience.
As a Surga88 member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:
To exercise any of these rights, contact the Surga88 Privacy Officer at privacy@surga88.in. We will process your request within 30 calendar days of receipt. For complex requests, this period may be extended by up to 60 days, with prior notice provided to you.
Financial transactions are the most sensitive aspect of using the Surga88 platform. We apply additional security measures to protect all information related to your money and payments.
Additional Protection: All withdrawals to a new account or e-wallet require additional security verification. This is to ensure that no unauthorised party can redirect your funds to a destination you did not specify. This step may slightly delay your first withdrawal, but it is in place to protect your financial security.
The Surga88 platform is for adults aged 18 and above only. We take the protection of minors extremely seriously and have a strict policy on this matter.
⚠ Parental Responsibility: We encourage parents and guardians to monitor their children's online activity and to use appropriate parental control software. If you suspect your child is accessing an online gambling platform, please report it to us and to the relevant authorities.
Surga88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. We are, however, committed to full transparency with every change we make.
If you do not agree with the changes made, you have the right to close your account before the effective date. Please contact our support team to initiate the account closure process and any eligible balance refund.
Surga88 has appointed a Data Privacy Officer responsible for ensuring compliance with this privacy policy and handling all privacy-related enquiries from members.
For data rights requests (access, correction, deletion), please email privacy@surga88.in with the subject line "Data Rights Request – [Your Username]". Include the phone number registered to your account for identity verification purposes. We will respond within 5 business days to acknowledge receipt of your request.
Bahasa Malaysia Support: All privacy-related enquiries may be submitted in Bahasa Malaysia. Our Privacy Officer is fully proficient in BM and will respond in kind. You do not need to use any other language to receive our full service.
In today's digital age, our personal data is among our most valuable assets — and among the most vulnerable to misuse. Every time we sign up with an online platform, we entrust a piece of our digital identity to it. For Surga88 players in Malaysia, that trust is something we never take lightly.
You might wonder — why does an online entertainment platform need to know so much about me? There are two parts to the answer. First, legal requirements. As a responsibly operated platform, Surga88 is required to verify members' identities and ages, and to monitor financial transactions in line with anti-money laundering regulations. Second, your own security. With accurate information on file, we can quickly detect if your account is accessed by an unauthorised party or if there is a fraudulent attempt targeting your account.
Malaysia's Personal Data Protection Act 2010 (PDPA) grants individuals the right to know and control how their data is used by organisations. Surga88 was built with PDPA compliance from the ground up, not as an afterthought. This means every data collection process has a clearly defined purpose, every piece of data collected has a legitimate justification, and every member has the right to access and request correction of their data.
Unlike some overseas platforms that collect data through opaque means and then sell it to advertisers or data analytics firms, Surga88 operates on a straightforward model: we collect data to provide services to you, and that is all. We have no "data sales" business unit because we believe such a model erodes user trust in the long run.
When you make a deposit via Touch 'n Go or GrabPay, or submit a withdrawal request to your Maybank account, the financial information involved is highly sensitive. Exposure of this data to unauthorized parties could result in serious financial loss. That's why we use a tokenization system to store payment information — our system retains a "token" that represents your account details, not your actual account number. In the event of an unexpected data breach, these tokens are worthless to hackers without separate access to the payment gateway's tokenization system.
While Surga88 takes all reasonable steps to protect your data on the platform side, there are simple measures you can take yourself to further strengthen your account security. First, use a strong and unique password for your Surga88 account — do not reuse the same password as your email or social media. Second, enable two-factor authentication (2FA) in your account settings — this adds an extra layer of security, meaning that even if someone learns your password, they still cannot log in without your device. Third, avoid logging in to your Surga88 account over public Wi-Fi without a VPN. Fourth, always log out of your account when using a shared device. And fifth, regularly review your login history in your account settings to spot any access you do not recognise.
Privacy is a shared responsibility between the platform and its users. Surga88 holds up our end with the latest security technology, transparent policies, and a dedicated team. We encourage you to hold up yours with good digital security practices. Together, we can ensure a safe, enjoyable, and worry-free experience at Surga88.
Quick answers to the most frequently asked questions about our data privacy practices
With your privacy protected, payments in RM via Touch 'n Go and GrabPay, and 24/7 Bahasa Malaysia support — Surga88 is the top choice for Malaysian players who value safety and trust. Register in 2 minutes and enjoy over 800 games today.
18+ only • Play responsibly • Data protected under Malaysia's PDPA