🔒 surga898 Privacy Policy – Your data is fully protected with 256-bit SSL encryption 🛡️ surga898 does not sell members' personal data to any third party without your consent 💳 Touch 'n Go, DuitNow & GrabPay – secure transactions processed through certified gateways 👁️ Your right to access your data – request a copy, update or delete your information at any time 📋 Updated 1 January 2026 – The latest surga898 Privacy Policy for your full protection ⚽ Malaysia Super League, EPL & UCL – all football bets are securely recorded 🔒 surga898 Privacy Policy – Your data is fully protected with 256-bit SSL encryption 🛡️ surga898 does not sell members' personal data to any third party without your consent 💳 Touch 'n Go, DuitNow & GrabPay – secure transactions processed through certified gateways 👁️ Your right to access your data – request a copy, update or delete your information at any time 📋 Updated 1 January 2026 – The latest surga898 Privacy Policy for your full protection ⚽ Malaysia Super League, EPL & UCL – all football bets are securely recorded
PRIVACY POLICY
Updated: 1 January 2026

Privacy Policy surga898 – Our Commitment to Protecting the Personal Data of Malaysian Members

Surga898 understands that your trust in our platform depends not only on the quality of our games and the speed of payouts, but also on how we handle the personal information you entrust to us. This Privacy Policy clearly explains what we collect, how we use it, who can access it, and what your rights are as a surga898 member in Malaysia.

Surga898's Six Data Protection Principles

Our commitment to handling every piece of information you share with us responsibly

Bank-Grade Encryption

Every bit of data transmitted between your device and surga898's servers is protected by 256-bit SSL encryption – the same security standard used by leading Malaysian banking institutions. This means that even if the data were intercepted, it cannot be read by any party without the decryption key held exclusively by surga898.

No Data Sales

Surga898 has never sold, rented or lent members' personal information to any third party for commercial purposes, and never will. Your information is used solely for the operation of the surga898 platform and to enhance your experience as a member. This is not merely a promise – it is a policy we uphold strictly every day.

Secure Financial Information

Your Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay or FPX account details are not stored directly in surga898's systems. All financial transactions are handled by PCI DSS-certified third-party payment gateways — meaning your sensitive financial information never touches our servers directly.

Control Is in Your Hands

As a surga898 member, you have full rights to access, update, transfer or request the deletion of your personal data. This process can be initiated at any time through your account settings or by contacting the surga898 support team directly. We will process your request within 14 working days.

Limited Data Retention

Surga898 retains your personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable Malaysian law. Once the data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures.

Malaysian Legal Compliance

Surga898's Privacy Policy is framed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We operate fully within Malaysia's data protection legal framework and are committed to maintaining compliance through regular policy reviews and updates whenever relevant laws change.

Introduction – surga898 Privacy Policy

This Privacy Policy ("Policy") describes how surga898 ("Platform", "We") collects, uses, stores, protects and shares personal information provided by you ("Member", "You") when using the surga898.best platform and all related services. This Policy applies to all registered members across Malaysia.

By registering a surga898 account or using any of our services, you agree to the collection and processing of personal data as described in this Privacy Policy. If you do not agree, please do not use the surga898 platform.

1

What Personal Data Does surga898 Collect?

Surga898 collects personal information from you in several ways – during account registration, while you use the platform, through communications with our support team, and automatically via technologies built into the platform. Below are the full details of the data categories we collect:

Data Category Example Information How It Is Collected
Identity Information Full name, Malaysian identity card number, date of birth During registration & KYC verification
Contact Information Mobile phone number, email address During account registration
Transaction Data Deposit, withdrawal and total wagering records Automatically during transactions
Gaming Data Game history, game types accessed, play duration Automatically during platform use
Technical Data IP address, device type, operating system, web browser Automatically via cookies & server logs
Communication Data Support chat records, emails, filed complaints When you contact surga898 support
What We Do Not Collect: surga898 does not store full bank account numbers, eWallet account passwords (Touch 'n Go, GrabPay, Boost, ShopeePay), OTP codes or complete credit/debit card details. All sensitive financial information is handled directly by certified third-party payment gateways.

When you undergo the identity verification (KYC) process required by surga898, you may be asked to submit a copy of your Malaysian identity card or relevant documents. These documents are stored securely and used solely for identity verification purposes, in accordance with applicable anti-money laundering (AML) legal requirements in Malaysia.


2

How Does surga898 Use Your Personal Data?

Surga898 uses collected personal data for legitimate, specific and transparent purposes. We do not use your data for any purpose other than those stated below without first obtaining your consent:

  • Account Management: To create, verify and manage your surga898 account, including the login process, security verification and information updates.
  • Transaction Processing: To process deposits you make via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay or FPX (Maybank2u, CIMB Clicks) and to process withdrawal of winnings to the same account.
  • Gaming Services Provision: To give you access to all surga898 games, including Live Casino, Malaysia Super League and EPL football betting, cricket, e-sports, slots and virtual sports.
  • Customer Support: To identify you when you contact the surga898 support team and to address any enquiries, complaints or technical issues you report.
  • Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multiple account ownership, and any activity that violates surga898's Terms & Conditions.
  • Legal Compliance: To fulfil applicable Malaysian legal obligations, including reporting requirements under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
  • Platform Improvements: To analyse usage patterns and improve the user experience on surga898 based on anonymised aggregate data.
  • Promotional Communications: To send you information about surga898 promotions, bonuses and offers that may be of interest to you – subject to the marketing preferences you have set in your account.
Communication Controls: You may opt out of marketing communications from surga898 at any time by updating your notification preferences in your account settings or by contacting our support team. Account-related communications such as transaction confirmations and security notifications cannot be disabled, as they are essential to the security of your account.

3

Surga898 Member Personal Data Sharing

Surga898 operates on a data minimisation principle – meaning we only share information that is strictly necessary, with parties that genuinely need it, and solely for legitimate purposes. We do not sell or share member data with external parties for commercial purposes.

Third parties that may receive some of your information in the course of surga898's operations are as follows:

  • Payment Gateway Providers: Information required to process your deposit and withdrawal transactions via Touch 'n Go, GrabPay, DuitNow, FPX, Boost and ShopeePay is shared with the respective payment gateways. These providers are bound by PCI DSS security standards and do not use your information for any other purpose.
  • Game Software Providers: Usernames and session information required to access games from providers such as Evolution Gaming, Pragmatic Play and Microgaming. These providers are bound by strict confidentiality agreements with surga898.
  • Identity Verification Service Providers: KYC documents you submit may be processed by certified third-party verification systems to confirm your identity.
  • Malaysian Authorities: surga898 will share the necessary information with the relevant Malaysian authorities when required by law – for example, in financial crime investigations or pursuant to a valid court order.
Our Commitment: All third parties that receive surga898 member data are bound by data processing agreements requiring them to protect that information to the same or higher standards as surga898's Privacy Policy. We do not permit third parties to use our members' data for their own marketing purposes.

4

Surga898 Data Security Measures

Surga898 continually invests in security infrastructure to ensure our members' personal data remains protected at all times. Below is a full overview of the security measures we have in place:

  • 256-bit SSL Encryption: All communications between your browser and surga898's servers are protected by 256-bit Transport Layer Security (TLS) encryption — the same standard used by Maybank2u and CIMB Clicks for their online banking operations.
  • Two-Factor Authentication (2FA): surga898 members are encouraged to enable 2FA, which sends a verification code to their registered phone number whenever a login from a new device is detected.
  • 24/7 Security Monitoring: surga898's security team monitors the platform for suspicious activity around the clock. Logins from unusual locations or unauthorised access attempts will trigger immediate alerts.
  • Data Segregation: Sensitive data such as account passwords is stored as a one-way hash that cannot be decrypted, even by surga898 staff.
  • Internal Access Controls: surga898 staff are granted access only to the data necessary to perform their duties. Access to member data is logged and audited on a regular basis.
  • Backup & Recovery: Member data is regularly backed up to secure remote servers to ensure service continuity and data protection in the event of unforeseen circumstances.

While surga898 takes all reasonable precautions to protect your data, no system is completely 100% secure. In the event of a security incident involving members' personal data, surga898 will notify affected members within the timeframe required under applicable Malaysian law and take immediate remedial action.

Shared Responsibility: The security of your surga898 account is a shared responsibility. Make sure you use a strong, unique password for your surga898 account, never share your login credentials with anyone, and contact us immediately at support@surga898.best if you suspect any suspicious activity on your account.

5

Surga898 Member Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and surga898's policies, you have certain rights regarding the personal data we hold about you. surga898 is committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to request a copy of all personal data surga898 holds about you. We will provide that copy in a readable format within 14 business days of receiving your request.

Right to Rectification

If you find that any information in your surga898 account is inaccurate or outdated, you have the right to request an immediate correction. Some information can be updated directly by you within your account settings.

Right to Erasure

You may request the deletion of your personal data from surga898's systems. Please note that certain data may need to be retained for a specific period to fulfil legal obligations under Malaysian law, such as financial transaction records.

Right to Object to Processing

You may object to surga898 using your data for direct marketing or profiling purposes at any time. Contact us at support@surga898.best with the subject "Data Processing Objection" and we will respond within 5 business days.

Right to Data Portability

You have the right to request a copy of your personal data in a structured, machine-readable format (such as CSV) for the purpose of transferring it to another service, subject to applicable technical limitations.

Right to Restrict Processing

In certain situations – for example, when you are disputing the accuracy of your data or awaiting the outcome of an objection – you may request that surga898 temporarily restrict the processing of your data.

To exercise any of the above rights, please contact the surga898 privacy team by email at support@surga898.best with the subject line "Personal Data Rights Request". Include your surga898 account username and a clear description of your request. We may require identity verification before processing your request to ensure we do not inadvertently disclose or alter another person's data.


6

Cookies, Tracking & Analytics at surga898

Surga898 uses cookies and similar tracking technologies to keep the platform running smoothly, enhance your experience, and help us understand how the platform is used. Cookies are small text files stored on your device by your web browser when you visit the surga898 platform.

Types of cookies used by surga898:

  • Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled without affecting the functionality of the surga898 platform.
  • Performance Cookies: Used to gather information on how visitors use the surga898 platform – including the most frequently visited pages, time spent, and errors encountered. This information is used to improve the platform.
  • Functionality Cookies: Enables the surga898 platform to remember your preferences – such as language, display layout and other personal settings – to deliver a more personalised experience.
  • Analytics Cookies: Used to understand aggregated and anonymised platform usage patterns for the purpose of improving surga898's services. The data collected does not contain any information that can personally identify you.

You can control or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the surga898 platform and your gaming experience. For guidance on managing cookies in popular browsers, please refer to the support documentation of the browser you are using.


7

Contact the surga898 Privacy Team

If you have any questions, concerns or complaints about how surga898 handles your personal data, or if you wish to exercise any of the rights set out in this Policy, the surga898 privacy team is available to assist you at any time.

  • Email: support@surga898.best – use the subject line "Privacy Policy" or "Personal Data Request" to speed up our response
  • Live Chat: Available directly on the surga898 platform – click the chat icon in the bottom-right corner of your screen
  • Response Time: Privacy enquiries will be answered within 5 business days; data rights requests within 14 business days

Surga898 may update this Privacy Policy from time to time to reflect changes in our data handling practices or applicable Malaysian law. The latest version will always be available at surga898.best/privacy-policy with a clearly indicated update date. Your continued use of the surga898 platform after any amendment is published will be considered your acceptance of the updated policy.

For full protection and a more comprehensive understanding of your rights, we also recommend that you read Terms & Conditions and Responsible Gaming Guide surga898.

FAQ – surga898 Privacy Policy

The most frequently asked questions by Malaysian members about privacy and data protection at surga898

No. surga898 does not directly store your eWallet account details — including Touch 'n Go, GrabPay, Boost, ShopeePay — or your FPX bank account number in our systems. When you make a deposit or withdrawal, you are redirected to a PCI DSS-certified third-party payment gateway. That gateway handles your sensitive financial information, and surga898 only receives a transaction confirmation (success/failed) without your full financial account details.

Yes, you may request deletion of your personal data by contacting the surga898 privacy team at support@surga898.best. Please note, however, that surga898 may be required to retain certain data for a specified period to meet Malaysian legal obligations — for example, financial transaction records required under anti-money laundering laws for a minimum of six years. Such data will be deleted once the mandatory retention period expires. For data not subject to legal retention obligations, we will delete or anonymise your data within 30 days of your request being confirmed.

surga898 does not share your personal gaming activity records – such as your Malaysia Super League or EPL football betting history, the casino games you have played, or your individual winnings – with third parties for marketing or commercial purposes. Gaming activity information may be shared with game software providers (such as Evolution Gaming or Pragmatic Play) only to the extent required for the technical operation of the games. Data may also be shared with Malaysian authorities if required by a valid court order or lawful legal investigation.

There are two easy ways to stop receiving promotional communications from surga898. First, click the "Unsubscribe" link found at the bottom of any promotional email we send. Second, log in to your surga898 account, go to Account Settings, and select the Notifications option to disable marketing communications. Changes will take effect within 48 hours. Please note that even if you opt out of promotional emails, surga898 will still send important account-related emails such as transaction confirmations, security notifications, and alerts about changes to terms that are critical to the security of your account.

When you close your surga898 account, we will process any valid pending withdrawal requests and disable access to your account. However, surga898 is required under Malaysian law to retain certain records — in particular, financial transaction records — for the minimum period stipulated by anti-money laundering legislation. These records will be securely stored in isolated systems and will not be used for marketing or communications. Data not subject to legal retention obligations will be deleted or anonymised within 90 days of your account closure being confirmed.

Financial Transaction Security at surga898

Every time you make a deposit or withdrawal on surga898 using your preferred Malaysian payment method, the process goes through multiple layers of security. surga898 works with PCI DSS Level 1-certified payment gateways — the highest security standard in the digital payments industry — to ensure your financial information is never exposed to unnecessary risk.

This means that when you tap the deposit button via Touch 'n Go or GrabPay on surga898, the direct connection between your device and the eWallet provider is fully encrypted. surga898 only receives confirmation that the transaction was successful or failed — we never see or store your eWallet PIN, password or account number directly.

Touch 'n Go
GrabPay
DuitNow
FPX
Boost
ShopeePay
256-bit SSL
Bank-grade encryption for all data in transit
PCI DSS Level 1
The highest security standard for digital payments
2FA Available
An additional layer of security for your surga898 account
24/7 Monitoring
An active anti-fraud system monitors every transaction
YOUR DATA IS SAFE AT SURGA898

Play with Confidence – Your Privacy is Protected at surga898

Now that you know how surga898 protects your personal data, register your free account and enjoy live casino, Malaysia Super League and EPL Sports Betting, and a wide range of other games – with complete confidence that your information is always safe with us. Minimum deposit of RM 30 via Touch 'n Go or DuitNow.

256-bit SSL No Data Sales 24/7 BM Support Malaysia PDPA Compliance

Surga898 Privacy Commitment Summary

Surga898 is committed to protecting the privacy and data security of every Malaysian member who trusts our platform. We use 256-bit SSL encryption, we do not sell members' personal data to third parties, we do not directly store sensitive financial details such as Touch 'n Go or GrabPay information, and we give you full control over your data through the rights guaranteed under Malaysia's Personal Data Protection Act 2010.

This Privacy Policy is to be read together with Terms & Conditions and Responsible Gaming Guide surga898 for a full understanding of your rights and responsibilities. Any privacy enquiries can be sent to support@surga898.best.

Bahasa Melayu