Official Documents

Privacy Policy SurgaVIP
Personal Data Protection for Malaysian Users

Your privacy is our priority. This document clearly explains how SurgaVIP collects, uses, stores and protects your personal data — so you always know where your information is and who can access it.

Last updated: 1 January 2026

Surgavip's Six Privacy Commitments to You

We believe user trust is built through transparency. Here is how we protect your data.

256-bit SSL Encryption

All data transmitted between your device and SurgaVIP servers is protected with 256-bit SSL encryption — the same level of security used by Malaysian online banking systems.

No Data Sales

SurgaVIP has never and will never sell or rent your personal data to any third party for marketing or commercial purposes.

Your Data, Your Control

You have the right to access, correct, or request deletion of your personal data at any time by contacting our support team.

Minimal Data Retention

We only collect data that is genuinely necessary for platform operations and regulatory compliance. No excessive or irrelevant data collection takes place.

Restricted Internal Access

Only surgavip staff who require access to your data for operational or support purposes are permitted to do so — with regular monitoring and audits in place.

Breach Notification

In the event of any security incident involving your data, surgavip will notify you in a timely manner in line with industry best practices.

Introduction: This Privacy Policy describes the privacy practices of surgavip ("we", "Platform") regarding information we collect from users ("you") who access or use the surgavip.vu platform and our official mobile app. By using the surgavip platform, you agree to the collection and use of information as described in this policy.

1 Information We Collect

SurgaVIP collects several categories of information from users to enable the platform to function properly and deliver the best possible service. Below is a summary of the types of data collected:

Data Category Example Information Primary Purpose
Registration Data Full name, date of birth, email, phone number Account verification & communication
Identity Verification Data (KYC) National ID, passport, selfie, utility bill Legal compliance & security
Financial Data Bank name, account number, transaction records Deposit & withdrawal processing
Platform Usage Data Wagering records, game history, login activity Service improvement & security
Technical Data IP address, device type, browser, operating system Security & fraud detection

We do not collect sensitive information such as health data, religious beliefs, or political views. Financial data such as credit card numbers is not stored in our systems — transactions are processed directly through registered, secure third-party payment gateways.

2 How We Use Your Data

Data collected is used solely for the following purposes:

  • Creating and managing your user account on the SurgaVIP platform
  • Processing deposits, withdrawals and all financial transactions securely
  • Carrying out identity verification (KYC) processes required by regulation
  • Detecting and preventing fraud, money laundering and platform abuse
  • Providing customer support when you contact our team
  • Sending important notifications related to your account, transactions and security
  • Analyzing overall usage patterns (without identifying individuals) to improve the platform
  • Complying with applicable legal and regulatory obligations

SurgaVIP does not use your data for third-party marketing purposes. If you receive promotional communications from us, they are based on your own account activity on the platform and you may unsubscribe at any time.

3 Legal Basis for Data Processing

All personal data processing by SurgaVIP is carried out on a lawful basis. Depending on the type of data and purpose of processing, the legal bases we rely on are as follows:

  • Contractual agreement: Processing necessary to perform the service contract between you and SurgaVIP — including account management, transaction processing and delivery of services you request
  • Legal obligation: Processing required by applicable law — primarily in relation to KYC compliance, anti-money laundering prevention and mandatory reporting
  • Legitimate interest: Processing for fraud detection, platform security and service improvement purposes, based on legitimate interests that do not override your rights
  • Consent: For marketing communications you have explicitly consented to — you may withdraw this consent at any time

4 Third-Party Sharing

SurgaVIP does not sell, rent or share your personal data for third-party marketing purposes. However, we may share your data with the following parties for legitimate operational purposes:

4.1 Technical Service Providers

This includes server hosting providers, game software suppliers, live chat service providers, and analytics platforms. All these providers are bound by strict data protection agreements and may only use your data for the purposes we specify.

4.2 Payment Processors

To process deposits and withdrawals, we share the necessary information with recognised payment gateways and banks. These payment processors maintain their own strict privacy policies and security standards.

4.3 Statutory Authorities

SurgaVIP will disclose user data to legal or law enforcement authorities when required by law, court order or a valid official investigation. We will not disclose data beyond what is legally required.

All third-party service providers we engage have undergone security assessments. Data shared is kept to the minimum necessary and is afforded contractual protections equivalent to those within our own platform.

5 Data Storage & Security

SurgaVIP stores your personal data on servers protected to the highest industry security standards. The technical and organizational measures we apply include:

  • Data encryption in transit using 256-bit SSL/TLS protocols
  • Encryption of stored data for sensitive information such as KYC documents
  • Role-based access control (RBAC) — staff can only access data relevant to their responsibilities
  • 24/7 security monitoring and intrusion detection systems
  • Regular security audits by independent third parties
  • Secure data backups and tested disaster recovery procedures

Data Retention Period

Your personal data is retained for as long as your account is active, or for as long as necessary for the purposes stated in this policy. Generally, transaction records and KYC data are retained for a minimum of 5 years after account closure, in accordance with anti-money laundering legal requirements.

After the required retention period expires, your data will be securely deleted or permanently anonymized so it can no longer be linked back to you.

6 Cookies & Tracking Technologies

The SurgaVIP platform uses cookies and similar technologies to enhance user experience and security. Types of cookies we use:

  • Essential cookies: Required for core platform functions such as login sessions, language preferences, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies: Collecting information on how you use the platform — pages visited, time spent and errors encountered — for improvement purposes.
  • Preference cookies: Saving your preferences such as display settings and selected modes for a more personalized experience.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect certain functions of the SurgaVIP platform.

7 Your Rights as a User

As a SurgaVIP user, you have the following rights regarding your personal data:

Right to Access

Request a copy of your personal data held by us at any time.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data, subject to our legal obligations.

Right to Restrict Processing

Request restriction of your data processing in certain circumstances.

Right to Data Portability

Receive your data in a machine-readable format for portability.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, contact the surgavip support team via 24/7 live chat within the platform. We will process your request within 14 business days.

8 KYC & Identity Verification

The Know Your Customer (KYC) process is a legal requirement that all responsible online entertainment platforms must fulfill. SurgaVIP conducts KYC to verify user identities, prevent fraud and meet anti-money laundering obligations.

Documents collected during the KYC process — including copies of national ID, passport, or other supporting documents — are stored with high-level encryption and accessible only by authorised compliance staff. These documents are never shared with any party except as required by law.

Once your KYC is completed and verified, the withdrawal process becomes faster and smoother. Your KYC data is stored securely and you will not need to repeat the process unless there is a significant change in your information or a mandatory periodic review is required.

9 Children's Data

SurgaVIP is a platform restricted to users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we find that data from a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your child has registered on our platform, please contact our support team immediately via live chat so we can take the appropriate action.

10 Privacy Policy Changes

SurgaVIP reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, technologies used, legal requirements or other relevant operational reasons.

Any material changes will be communicated to active users via in-platform notifications before the changes take effect. The "Updated" date at the top of this page always reflects the latest version of the policy.

Your continued use of the SurgaVIP platform after an updated Privacy Policy is published constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding your privacy and personal data protection at surgavip, we welcome you to reach out to us:

  • Live Chat: Available 24/7 directly within the surgavip platform — the fastest way to get a response
  • Support Email: [email protected] — for written enquiries that require documentation
  • FAQ Page: Visit our FAQ page for answers to frequently asked privacy questions

Our team is committed to responding to all privacy-related inquiries within 3 business days. For formal data subject rights requests (such as access, correction or deletion), the processing period is up to 14 business days.

SurgaVIP operates with full commitment to user privacy and trust. If you are dissatisfied with how we have handled any privacy request, you have the right to seek independent review through the relevant legal channels.

Your Data Is Safe with surgavip

An online entertainment platform that prioritizes the privacy and security of Malaysian users. Register a free account and play with peace of mind.

Bahasa Melayu