1. Home
  2. Privacy Policy
Official surga898 Document

Surga898 Privacy Policy –
Personal Data Protection Malaysian Members

Surga898 takes the privacy of every member seriously. This Privacy Policy explains exactly what data we collect, how it is used, who can access it, and your rights as the data owner. We are committed to managing your information transparently, securely, and responsibly at all times.

Last Updated: 1 January 2026. By using the surga898 platform after this date, you fully accept the updated Privacy Policy.

Our Privacy Commitment

Surga898's Six Core Privacy Principles

Before reading surga898's full Privacy Policy, get to know the six data protection principles that guide how we manage every Malaysian member's information.

256-bit SSL Encryption at All Times
All data transmitted between your device and surga898's servers is protected by 256-bit SSL encryption – the same security standard used by Maybank, CIMB, and Malaysia's leading financial institutions. No one can intercept or read your data in transit.
Your Data Is Never Sold
surga898 has never and will never sell, rent, or trade members' personal data to any third party for commercial purposes. Your data is not a product we trade in — it is a responsibility we uphold with the utmost seriousness to ensure your trust remains intact.
Minimum Data Collection
surga898 collects only the data that is strictly necessary to operate the service – no more, no less. We do not request irrelevant information, and every category of data collected has a clear and legitimate purpose that is transparently explained in this Privacy Policy.
Full Control in Your Hands
As a surga898 member, you have the right to access, correct, and request deletion of your personal data at any time. Such requests will be processed within the stipulated timeframe and we will confirm the action taken to you via your registered channel.
Limited Data Retention
Your personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or to meet applicable legal requirements. Once the designated retention period has lapsed, data is securely deleted or anonymised using industry-approved procedures.
Restricted Data Access
Only surga898 staff who require access to your personal data to carry out their duties are permitted to do so. This access is governed by a layered permission control system, and all access is logged for internal security audit purposes.
Content
1
Introduction

This Privacy Policy describes how surga898 ("we", "our platform") collects, uses, stores, protects, and in certain circumstances shares the personal information you provide to us when using the surga898 platform at surga898.asia.

We take seriously the privacy of every Malaysian member who entrusts their personal information to surga898. Our approach to privacy is built on trust – the belief that you deserve to know exactly what happens to your data, and the commitment that we will handle it as responsibly as possible.

This Privacy Policy applies to all users of the surga898 platform, including website visitors, prospective members in the process of registering, and active registered members. By accessing or using any part of the surga898 platform, you confirm that you have read and understood this Privacy Policy.

Relationship with Terms & Conditions: This Privacy Policy forms part of the overall agreement between you and surga898 and should be read together with Terms & Conditions us. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall take precedence.
2
Data We Collect

Surga898 collects various types of information depending on how you interact with our platform. Below is a full overview of the data categories we may collect and the circumstances under which they are collected.

A. Information You Provide Directly

  • Registration Information: Your full name, email address, Malaysian mobile number, username, and password chosen when registering your surga898 account.
  • Identity Verification Information: Malaysian identity card (MyKad) or passport number, date of birth, and in some cases, an image of the identity document required for the KYC (Know Your Customer) process for first-time withdrawals or withdrawals exceeding certain limits.
  • Financial Information: Your e-wallet account number (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) or Malaysian bank account number registered for deposits and withdrawals. We do not store your credit card numbers or e-wallet passwords.
  • Communications: The content of any communications you send to the surga898 support team — including via live chat, email, and WhatsApp — is retained for record-keeping and service improvement purposes.

B. Automatically Collected Information

  • Technical Data: Your device's IP address, web browser type, operating system, device model, language settings, and time zone – collected automatically when you access the surga898 platform.
  • Usage Data: Login and logout session records, pages visited, session duration, games played, bet values, and win/loss records – all logged as part of the transaction records required by law and for security purposes.
  • Cookie Data: Information collected through cookies and similar tracking technologies — explained further in Section 6.
Important Note: surga898 does not collect biometric data, health data, or any other sensitive data categories not mentioned in this section. Should there be a future need to collect new categories of data, this Privacy Policy will be updated and members will be notified in advance.
Data Category Example Primary Purpose
Identity Name, IC number, date of birth Identity verification, fraud prevention
Relationship Email, phone number Communications, OTP verification, support
Financial E-wallet account, transaction records Deposit & withdrawal processing
Technical IP address, device type Security, fraud detection
Usage Game records, login sessions Transaction records, legal compliance
3
How We Use Your Data

Surga898 uses collected personal data solely for lawful, legitimate, and transparent purposes. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent.

Surga898's primary purposes for using data are as follows:

  • Account Management: Creating, managing, and maintaining your surga898 account — including processing registration, verifying identity, managing security settings, and facilitating secure logins.
  • Transaction Processing: Processing all deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing winnings withdrawals to registered payment accounts. Complete transaction records are maintained for audit and legal compliance.
  • Security & Fraud Prevention: Identifying and preventing unauthorised access, detecting suspicious activity, verifying identity during high-risk transactions, and protecting the overall integrity of the surga898 platform.
  • Customer Support: Managing and resolving enquiries, complaints, and support requests submitted by members across all surga898 support channels, including live chat, email, and WhatsApp.
  • Service Improvements: Analysing platform usage patterns on an aggregated and anonymised basis to better understand the needs of Malaysian players and make decisions that improve the overall user experience.
  • Important Communications: Sending account-related notifications such as deposit confirmations, withdrawal confirmations, security alerts, and important policy updates. These communications cannot be opted out of as they form part of surga898's core service.
  • Legal Compliance: Meeting applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC requirements, and any other obligations imposed by applicable Malaysian law.

Surga898 does not use members' personal data to make automated decisions that have legal consequences or a significant impact on members without any human involvement, except in the context of automated fraud detection, which is subsequently reviewed by a human team.

4
Data Sharing

Surga898 does not sell or trade members' personal data to any third party. However, there are limited circumstances where sharing data with certain parties is necessary for the proper operation of our platform. All such data sharing is governed by strict confidentiality agreements.

  • Payment Providers: Required transaction information is shared with Malaysian e-wallet and banking providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) solely for processing deposits and withdrawals. These providers are bound by their own privacy policies and Malaysian financial industry security standards.
  • Game Providers: Minimum necessary technical information is shared with game providers such as Pragmatic Play, Microgaming, NetEnt, and Play'n GO to facilitate gaming sessions – this includes session identifiers and bet values but does not include your personally identifiable information.
  • Technical Service Providers: Cloud infrastructure providers and technical service providers that help operate the surga898 platform may have access to data in a limited technical capacity. All such providers are bound by strict data processing agreements and are not permitted to use your data for any purpose other than delivering the contracted services.
  • Relevant Authorities: surga898 will disclose personal data to legal, regulatory, or law enforcement authorities when required by valid Malaysian law or a valid court order. In such circumstances, we will endeavour to notify the relevant member where permitted by applicable law.
Cross-Border Data Sharing: In circumstances where data needs to be transferred outside Malaysia (for example, to international game providers), surga898 ensures such transfers are carried out with adequate safeguards, including standard data transfer agreements or other mechanisms recognised under international data protection law.
5
Data Security

Protecting surga898 members' personal data is our foremost technical and operational priority. We continually invest in security infrastructure and procedures to ensure your data is protected to the highest practical standard.

The technical and organisational security measures surga898 employs to protect your data include:

  • Transmission Encryption: All communications between your device and surga898's servers are protected by TLS 1.3 with AES-256 encryption — ensuring your data cannot be intercepted or read while in transit.
  • Storage Encryption: Sensitive data such as identity verification information and payment account details are stored in encrypted form on surga898 servers. Passwords are stored using a one-way hashing algorithm that cannot be reversed.
  • Access Controls: Access to systems containing members' personal data is restricted to staff who require it. All access is authenticated via multi-factor verification and audited on a regular basis.
  • Continuous Monitoring: surga898's security team monitors systems around the clock to promptly detect and respond to any security threats or unauthorised access attempts.
  • Independent Auditing: surga898 conducts periodic independent third-party security audits to identify and address any vulnerabilities in our data protection systems before they can be exploited.
  • Incident Management: surga898 has comprehensive security incident management procedures in place. In the event of a data breach affecting members, we will notify affected members within the timeframe required by applicable law.

While we take all reasonable steps to protect your data, it should be acknowledged that no system can guarantee absolute 100% security. You also play an important role in safeguarding your account by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to the surga898 support team.

6
Cookies & Tracking Technologies

Surga898 uses cookies and similar tracking technologies to enhance platform functionality and the user experience. Cookies are small text files stored on your device when you visit a website. They help us remember your preferences and ensure the platform functions correctly.

The types of cookies used by surga898 are:

  • Essential Cookies (Required): These cookies are required for the basic operation of the surga898 platform and cannot be disabled. They include cookies that maintain your login session, security cookies that prevent CSRF attacks, and cookies that store your language preference.
  • Functional Cookies: These cookies allow the surga898 platform to remember your preferences – such as your chosen betting limits, display mode, and other personal settings – to make your gaming experience more comfortable.
  • Performance & Analytics Cookies: These cookies collect information about how members use the surga898 platform – such as the most frequently visited pages and error messages encountered. All information collected by these cookies is in aggregated, anonymised form and is used solely for platform improvement purposes.

You can control and manage cookies through your web browser settings. Please note, however, that disabling essential cookies may significantly affect the functionality of the surga898 platform, including potentially preventing you from logging into your account.

Third-Party Cookies: Game providers that supply content on the surga898 platform may also use cookies or similar technologies. surga898 does not control these third-party cookies. Please refer to the respective game providers' privacy policies for more information about their cookie practices.
7
Data Storage & Transfer

Surga898 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or as required by applicable Malaysian law.

  • Active Account Data: Personal data of members with active accounts is retained for the duration of their membership and kept for as long as necessary after account closure to fulfil legal obligations.
  • Financial Transaction Records: Records of all deposits, withdrawals, and betting activity are retained for a minimum of seven (7) years from the date of the transaction – this is a standard legal requirement under anti-money laundering regulations.
  • Communication Logs: Communication records with the surga898 support team are retained for three (3) years from the date of communication for reference and dispute resolution purposes.
  • Technical Data & Logs: System logs and technical data are retained for as long as necessary for security and technical troubleshooting purposes, after which they are deleted or anonymised.

When data is no longer needed and there is no legal obligation to retain it, surga898 will delete or anonymise it using secure, industry-verified data deletion procedures.

8
Your Rights as a Data Subject

As a surga898 member, you hold a range of rights regarding your personal data, and we take each of them seriously. Here is an overview of those rights and how you can exercise them.

Your Rights

Your Data Protection Rights at surga898

Surga898 respects and upholds the following rights for every Malaysian member who entrusts their data to us.

Right to Access Data
You have the right to obtain a copy of the personal data we hold about you at any time. Data access requests can be submitted by email to support@surga898.asia and will be processed within 30 business days. We will provide a copy in a clear and readable format.
Right to Rectification
If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Some details, such as your username and phone number, can be updated directly in your surga898 account settings, while others will require verification through our support team.
Right to Data Erasure
You may request deletion of your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose. Please note that we may need to retain certain data to fulfil legal obligations, such as seven-year financial transaction record requirements.
Right to Restrict Processing
In certain circumstances, you have the right to request that surga898 restrict the processing of your data — for example, while we investigate the accuracy of disputed data. During the restriction period, we will only process your data for the most limited purposes necessary.
Right to Data Portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. This allows you to transfer your data to another platform should you choose to do so.
Right to Object
You have the right to object to the processing of your personal data for certain purposes, including direct marketing. If you no longer wish to receive promotional communications from surga898, you may opt out at any time through your account settings or by contacting our support team.

How to Exercise Your Rights: To exercise any of the above rights, please contact the surga898 data protection team by email at support@surga898.asia, stating the right you wish to exercise along with your account information for identity verification. We will respond within 30 business days and inform you of the action taken.

9
Children's Privacy

The surga898 platform is intended exclusively for individuals aged 18 and above and is not designed for use by minors. surga898 does not knowingly collect personal data from individuals under the age of 18.

All prospective members are required to confirm they are at least 18 years of age at the point of registration. Age verification is carried out through several stages, including date of birth confirmation during registration and, for the first withdrawal, through valid identity document verification.

If surga898 discovers that personal data of a minor has been collected without our knowledge — for example, through the provision of false information during registration — the account in question will be closed immediately and all related data will be deleted or referred to the relevant authorities in accordance with procedures set out under Malaysian law.

Parental and Guardian Responsibilities: If you are a parent or guardian who believes your child under the age of 18 has registered an account with surga898, please contact us immediately at support@surga898.asia. We will take prompt action to close the account and delete the associated data.
10
Links to Third Parties

The surga898 platform may contain links or integrations to third-party services in certain contexts – for example, e-wallet payment interfaces operated by their respective providers. surga898's Privacy Policy does not apply to those third-party websites or services.

When you leave the surga898 platform to use third-party services such as the Touch 'n Go eWallet app, GrabPay, or the Maybank2u and CIMB Clicks online banking interfaces for deposit purposes, you are subject to the privacy policies of those respective providers. surga898 is not responsible for the privacy practices or content of third-party websites or services and encourages you to read their privacy policies before providing any personal information.

11
Privacy Policy Changes

Surga898 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform improvements. The date of the most recent update is always displayed at the top of this page.

For material changes that significantly affect how we process your personal data, surga898 will endeavour to notify members via their registered email or an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and, if you disagree with them, to close your account before they come into force.

For minor changes such as spelling corrections, language clarifications, or formatting updates that do not alter the content or effect of the Privacy Policy, advance notice may not be given. We therefore encourage you to review this page periodically.

12
Contact Us

If you have any questions, concerns, or complaints regarding surga898's Privacy Policy or how we handle your personal data, our data protection team is ready to assist you.

  • Data Protection Email: support@surga898.asia – please include "Privacy Policy Inquiry" in the subject line to ensure your email is routed to the right team.
  • Live Chat: Available 24 hours a day within the surga898 platform for general privacy-related inquiries that require an immediate response.
  • WhatsApp: surga898's official WhatsApp number is available in your account page after logging in.

We are committed to responding to all data protection enquiries within 14 business days of receipt. For more complex rights-exercise requests, we may require up to 30 business days but will keep you updated on progress within the specified timeframe.

Complaints to the Authorities: If you are not satisfied with how surga898 has handled your privacy inquiry after contacting us, you have the right to lodge a complaint with the relevant data protection authority in Malaysia. However, we encourage you to reach out to us first, as most issues can be resolved more quickly and effectively through direct communication with our team.
Join surga898 with Confidence
Your Data Is Safe with surga898 – Register Today

Now that you understand how surga898 protects your privacy, create a free account and claim your Welcome Bonus of up to RM888 — enjoy Malaysia's online casino that's safe, fair, and trustworthy.

Register a Free Account Claim RM888 Bonus
256-bit SSL Encryption
Data Not Sold
Minimum Deposit RM20
24/7 Bahasa Malaysia Support
FAQ

Questions About surga898's Privacy Policy

The most frequently asked questions from Malaysian members regarding personal data protection on the surga898 platform.

Absolutely not. surga898 has never and will never sell, rent, or trade members' personal data to any third party for commercial purposes. Your data is used solely for the purposes explicitly stated in our Privacy Policy — to manage your account, process transactions, provide customer support, and fulfil legal obligations. Member trust is surga898's most valued asset, and we will not exchange it for any commercial gain.

During surga898 account registration, we collect the basic information needed to create and manage your account — specifically your full name, email address, Malaysian mobile number, chosen username, and password. We also request date of birth verification to confirm you are at least 18 years of age. For your first withdrawal or withdrawals exceeding certain thresholds, we may request additional identity verification documents such as a MyKad or passport image as part of the standard financial industry KYC process.

surga898 protects your financial information through multiple layers of security. All communications are secured by 256-bit SSL encryption, ensuring data cannot be intercepted in transit. Your registered e-wallet and bank account details are stored in encrypted form on our servers. It's important to note that surga898 does not store your e-wallet password or PIN — when you make a deposit, you are directed to the secure interface of the relevant e-wallet provider to complete the transaction using your own credentials. surga898 only receives a success or failure confirmation from that provider.

Yes, you have the right to request deletion of your personal data under certain circumstances. However, please note that this right has limitations — we may need to retain certain data to fulfil legal obligations. For example, financial transaction records must be kept for a minimum of seven years under Malaysia's anti-money laundering laws. For data that can be deleted, submit a request to support@surga898.asia with "Data Deletion Request" in the email subject line. We will process your request within 30 business days and inform you of what has been deleted and what must be retained, along with the reasons.

surga898 takes all reasonable technical and organisational measures to prevent security breaches — including 256-bit SSL encryption, 24-hour security monitoring, periodic independent security audits, and layered access controls. Sensitive data such as passwords is never stored in plain text; one-way irreversible hashing is used instead. In the event of a security incident affecting members' personal data, surga898 has a comprehensive incident response procedure in place, including notifying affected members within the required timeframe. We also encourage members to use strong, unique passwords and enable two-factor authentication for an added layer of protection on your end.
View All FAQs

Privacy and Responsible Gambling at surga898

Data related to the use of responsible gambling tools — including limits you have set yourself, self-exclusion periods, and records of self-control tool usage — is handled with a higher level of confidentiality. This information is not shared with any third party except where required to comply with legal protection obligations. If you are experiencing challenges related to gambling, we encourage you to use the self-control tools available in your account and visit the Responsible Gambling us for further information and assistance. All communications with our support team regarding gambling-related concerns are strictly confidential. The minimum age requirement at surga898 is 18 and above.

Bahasa Melayu