SurgaPlay Privacy Policy – Your Personal Data Protection

1 Introduction

SurgaPlay is fully committed to protecting the privacy of every user who accesses our platform at surgaplay.bio. This Privacy Policy explains in detail the types of information we collect, how we use it, who it may be shared with, and the steps we take to keep your data safe at all times.

By registering for or using the SurgaPlay platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact our support team to close your account.

This Privacy Policy applies to all services offered by SurgaPlay, including the website, mobile app, and all interactions between you and our platform — whether through account registration, customer support enquiries, or simply browsing our site.

2 Personal Data Collection

SurgaPlay collects various types of personal information from our users to ensure a smooth, secure, and personalised gaming experience. We only collect information that is genuinely necessary to deliver our services effectively.

2.1 Information You Provide Directly

• Registration information: Full name, date of birth, identity card number (MyKad), email address, phone number, and residential address.
• Financial information: Bank account details, credit/debit card numbers, and digital wallet information used for deposits and withdrawals.
• Identity verification documents (KYC): Copies of your identity card, passport, driving licence, utility bill statements, and other supporting documents submitted during the account verification process.
• Communications: Messages, complaints, enquiries, and any communications you send to our support team via live chat, email, or other communication platforms.

2.2 Information Collected Automatically

• Technical data: IP address, web browser type, device operating system, screen resolution, and preferred language.
• Usage data: Pages visited, duration of visit, games played, betting history, and interaction patterns with the platform.
• Cookie and tracking data: Session information, user preference settings, and analytics data collected through cookies and similar tracking technologies.
• Location data: General location information based on IP address to ensure compliance with applicable jurisdictional requirements.

2.3 Data Types and Purpose of Collection

3 Personal Data Usage

The information we collect is used solely for legitimate purposes that are stated before or at the time of collection. SurgaPlay never uses user data for purposes that conflict with the trust you have placed in us.

• Account management: Creating, verifying, updating, and managing your account on the SurgaPlay platform.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions quickly and securely.
• Regulatory compliance: Meeting legal obligations related to anti-money laundering (AML), fraud prevention, and identity verification.
• Platform improvements: Analysing usage patterns to continuously improve our platform's performance, design, and features.
• Service communications: Sending important notifications relating to your account, transactions, security updates, and policy changes.
• Promotions and offers: Sending information about bonuses, promotions, and loyalty programmes that may interest you — subject to your marketing communication preferences.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate assistance to members who need it.
• Fraud prevention: Detecting and preventing suspicious activity, hacking attempts, or any fraudulent attempts involving your account.

4 Personal Data Sharing

SurgaPlay does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where we need to share certain information with specific parties to ensure our services operate correctly:

• Payment processors: Required financial information is shared with licensed payment processors to facilitate your deposit and withdrawal transactions.
• Technology service providers: Cloud computing, analytics, and technical infrastructure service providers that help us operate the platform securely. All such providers are bound by strict confidentiality agreements.
• Statutory authority: Where required by law, court order, or a legitimate request from law enforcement authorities, we will comply with such requirements in accordance with established procedures.
• Identity verification service: Minimum required information is shared with licensed KYC service providers for identity verification and AML regulatory compliance.

5 Data Security

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is SurgaPlay's top priority. We implement multiple layers of comprehensive technical and organisational safeguards:

• 256-bit SSL Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS technology — the same standard used by leading banking and financial institutions worldwide.
• Encryption of data at rest: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 encryption algorithms.
• Layered access controls: Only authorised personnel with a legitimate business need may access user data. All access is monitored, logged, and regularly audited.
• Two-factor authentication (2FA): We encourage all users to enable 2FA to add an extra layer of protection to their accounts.
• 24/7 threat monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity without delay.
• Regular security audits: We conduct regular penetration testing and security audits by accredited independent parties to ensure the robustness of our defence systems.

6 Cookies and Tracking Technologies

SurgaPlay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality such as login session management and security settings. These cookies cannot be disabled.
• Functionality Cookies: Saving your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with our platform so we can make meaningful improvements. Data collected is in aggregate form and cannot be used to identify individuals.
• Performance Cookies: Monitoring the platform's technical performance and helping us detect and resolve issues faster.

6.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note, however, that disabling certain cookies may affect the functionality of some features on the SurgaPlay platform.

7 Data Storage and Transfer

Your personal data is stored on secure servers located in data centres that comply with strict international security standards. SurgaPlay maintains a clear and responsible data retention policy:

• Active account data is retained for the duration that your account remains active on the SurgaPlay platform.
• After an account is closed, your data will be retained for the period required by applicable laws and regulations, typically between 5 and 7 years for financial records.
• Data that is no longer required will be securely deleted using industry-standard data erasure methods.
• Any cross-border data transfers are carried out using valid and appropriate data protection mechanisms, including Standard Contractual Clauses approved by the relevant data protection authorities.

8 Your Rights as a User

SurgaPlay respects your rights in relation to your personal data. Under applicable data protection laws, you have the following important rights, which you may exercise at any time: