Official surgagg Documents

Surgagg Privacy Policy – Personal Data Protection Our Members

Your privacy is surgagg's top priority. This document transparently explains how we collect, use, store, and protect your personal data throughout your use of the surgagg platform.

256-bit SSL
Data Encryption
24/7
Security Monitoring
0
Sale of Data to Third Parties
PDPA
Malaysian Legal Compliance
Effective Date: 1 January 2026  |  Version 2.5
surgagg complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All member personal data is collected, processed, and stored in accordance with applicable legal provisions. By using the surgagg platform, you agree to the terms of this Privacy Policy.

1 Introduction and Scope of Privacy Policy


Welcome to the surgagg Privacy Policy page. We at surgagg understand how important privacy is to every user on our platform, and we take this responsibility seriously. This Privacy Policy is designed to give you a clear and transparent overview of our data handling practices.

This document applies to all personal information collected through the surgagg.pro website, the surgagg mobile app, and all related services we provide. It is binding on surgagg, our subsidiaries, and all parties acting on our behalf in the processing of member personal data.

This Privacy Policy explains in detail:

  • The types of personal data we collect when you use the surgagg platform
  • The specific purposes for which we collect and process that data
  • How we protect your data from unauthorised access
  • The parties with whom we may share your data and under what circumstances
  • Your rights as a data subject under Malaysian law
  • How to contact us for privacy-related enquiries or requests

If you have any doubts or do not understand any part of this policy, we encourage you to contact the surgagg support team before continuing to use the platform.

2 Personal Data We Collect


Surgagg collects only the personal data necessary to provide quality and secure services to our members. Data collection is divided into two main categories:

Data You Provide Directly:

Data Type Example Requirements
Identity Information Full name, date of birth, IC/passport number Mandatory (KYC)
Contact Information Email address, phone number Mandatory
Address Information Residential address, postcode, state Mandatory (KYC)
Financial Information Bank account number, bank name Mandatory (Payment)
Verification Documents Copy of ID card, utility bill Mandatory (Verification)

Automatically Collected Data: When you use the surgagg platform, our systems automatically record certain technical information including your IP address, browser type, device operating system, pages visited, session duration, and in-platform interaction data. This technical data is used solely for security, troubleshooting, and user experience improvement purposes.

surgagg does not collect credit card information directly. All card payments are processed by PCI-DSS certified third-party payment processors, ensuring your card data never passes through or is stored on surgagg's servers.

3 Purpose of Data Collection and Processing


Surgagg processes your personal data only for legitimate, clearly stated purposes. We do not use your data for any other purpose without obtaining your consent first. The following are the primary purposes of data processing at surgagg:

  • Account Management: To create, verify, and manage your member account, including the KYC process required by law.
  • Transaction Processing: To securely and accurately process all deposits, withdrawals, and financial transactions you make through the surgagg platform.
  • Legal Compliance: To comply with applicable legal and regulatory requirements in Malaysia, including anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
  • Platform Security: To detect and prevent fraud, unauthorised access, and suspicious activity that could compromise the security of your account or the integrity of the platform.
  • Customer Service: Enables the surgagg support team to provide effective and accurate assistance whenever you need help.
  • Important Communications: To send important notifications regarding your account, service changes, or security information you need to be aware of.
  • Promotions and Offers: With your consent, we may send you promotional information, bonuses, and special offers we believe are relevant to you. You may withdraw this consent at any time.
  • Service Improvement: To analyse usage patterns in aggregate (not individually) in order to improve the gaming experience and functionality of the surgagg platform.
surgagg will not use your personal data to make automated decisions that significantly affect you without human involvement in the relevant assessment process.

4 Data Encryption and Security Measures


Protecting your personal data is a responsibility that surgagg takes seriously. We continually invest in the latest security infrastructure to keep your data safe at all times. The following are the security layers we have in place:

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and surgagg's servers is protected by industry-leading 256-bit SSL/TLS encryption, meaning no third party can read your data while in transit.
  • Encrypted Data Storage: Sensitive data stored in the surgagg database, including financial information and identity verification documents, is encrypted using robust encryption algorithms.
  • Two-Factor Authentication (2FA): 2FA is available for all surgagg member accounts, adding an extra layer of security to the login process.
  • 24/7 Security Monitoring: The surgagg security team monitors our platform around the clock to detect and respond to any threats or suspicious activity.
  • Strict Access Control: Access to members' personal data within the surgagg organisation is restricted to staff who require it to perform their duties, based on a strict "need-to-know" principle.
  • Regular Security Audits: surgagg conducts regular independent security audits to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable precautions, no system can be guaranteed 100% secure. We therefore encourage you to take your own security measures — use a strong password, never share your login credentials, and keep your device up to date.

5 Data Sharing with Third Parties


Surgagg does not sell, rent, or trade member personal data to any third party for their own marketing purposes. This is our absolute commitment. However, there are limited situations where we may need to share your data:

  • Trusted Service Providers: We work with selected third-party service providers — such as payment processors, cloud service providers, and identity verification service providers — who assist us in operating the platform. All such parties are bound by strict confidentiality agreements and are only permitted to process your data in accordance with surgagg's instructions.
  • Legal Requirements: We may be required to disclose your data to relevant authorities when mandated by law, court order, or directive from Malaysian regulatory bodies.
  • Security Protection: In situations where we believe data disclosure is necessary to prevent fraud, protect the rights of surgagg or other members, or address urgent security concerns.
  • Business Transfers: In the event of any merger, acquisition, or transfer of surgagg's business assets, member data may be transferred to the successor entity, subject to appropriate notice and protections.
Before sharing your data with any third party, surgagg ensures that the party complies with data protection standards equal to or higher than those we apply ourselves.

6 Use of Cookies and Tracking Technologies


The surgagg.pro website uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform runs smoothly. The following are the types of cookies we use:

  • Essential Cookies: These cookies are required for the platform's core functions — including maintaining your login session and remembering your security settings. The platform cannot operate properly without them.
  • Preference Cookies: To save your preferences such as display language and other personal settings so you do not need to reset them every time you visit the platform.
  • Analytics Cookies: Helps us understand how members use the platform — which pages are most popular, where users encounter issues, and more. This information is used in aggregate form and does not identify individuals.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the surgagg platform and your gaming experience.

7 Your Rights as a Data Subject


Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by surgagg:

Right of Access

You have the right to request and obtain a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data in our records.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

Right to Restriction of Processing

In certain circumstances, you may request that surgagg restrict the processing of your data while any dispute is being resolved.

To exercise any of the above rights, contact the surgagg privacy team via our support email. We will process your request within 30 business days of receiving a complete submission.

8 Data Retention Period


Surgagg retains your personal data only for as long as necessary for the purposes stated in this policy, or for as long as required by Malaysian law. The following are our general data retention guidelines:

  • Active Account Data: Retained for the duration your account remains active at surgagg, plus a specified period after account closure for legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's accounting and tax legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after account closure, in accordance with anti-money laundering legal requirements.
  • Support Communication Logs: Retained for 2 years for dispute resolution and service improvement purposes.
  • Technical Data & System Logs: Retained for 90 days for security and technical troubleshooting purposes.

When your personal data is no longer required, surgagg will securely and thoroughly delete or anonymise it so that it can no longer be linked back to you.

9 Changes to This Privacy Policy


Surgagg reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data.

When we make significant changes to this policy, we will notify you via one or more of the following methods:

  • In-platform notifications on surgagg that you will see upon your next login
  • Email notification sent to the email address registered to your account
  • Prominent notices on the surgagg.pro website

The "Updated" date at the top of this document always reflects the last date this Privacy Policy was modified. Continued use of the surgagg platform after any changes take effect constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy page periodically. If you do not agree with any changes, please discontinue use of the platform and contact us to close your account.

10 Contact Us for Privacy Enquiries


If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the surgagg privacy team is here to help.

You can reach us through the following channels:

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or deletion requests, the full response period is up to 30 business days in accordance with Malaysia's PDPA provisions.

The surgagg support team is available 24 hours a day, 7 days a week through our platform. For sensitive privacy-related issues, please use our dedicated privacy email channel for a more detailed and secure response.

Why Your Privacy Is Safe with surgagg

Six data security commitments that set surgagg apart from other platforms.

Industry-Grade Encryption

Every bit of data moving between your device and surgagg's servers is protected by 256-bit SSL encryption — the same technology used by the world's leading banking institutions.

Malaysian PDPA Compliance

Surgagg is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). Your rights as a data subject are fully recognized and respected in every data processing decision we make.

No Direct Data Sales

This is surgagg's absolute promise — your personal data will never be sold, rented, or traded to any third party for their own marketing purposes, under any circumstances whatsoever.

Encrypted Data Storage

Sensitive data in the surgagg database is stored in encrypted format. Even in the highly unlikely event of a breach, your data remains unreadable without the encryption key.

24/7 Threat Monitoring

The surgagg cybersecurity team monitors our platform around the clock. Any suspicious activity is detected and addressed in real time before it can affect your data.

Regular Security Audits

Surgagg undergoes periodic independent security audits conducted by third-party security experts. Audit findings are used for continuous improvement of our data protection systems.

Privacy Guaranteed, Gaming Secured

Join surgagg — A Platform That Respects Your Privacy

Register a surgagg account today and enjoy a safe, transparent, and trusted gaming experience backed by international-standard personal data protection.

Bahasa Melayu