Privacy Policy surga5000 – Malaysian Player Data Protection

Surga5000 is an online entertainment platform offering casino games, slots, roulette, Sports Betting, live matches, and e-sports to Malaysian users. As a responsible platform operator, surga5000 acts as the Data Controller for all personal data you provide to us.

This privacy policy covers all data collection and processing activities that take place through:

• The surga5000 website accessible via web browser.
• Account registration and verification process.
• Financial transactions including deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other methods.
• Use of all games and services offered by surga5000.
• Communications between you and the surga5000 support team.
• Participation in surga5000 promotions and bonus programmes.

This policy does not cover third-party websites or services that you may access through links on the surga5000 platform.

Surga5000 only collects data that is strictly necessary to provide our services safely, efficiently, and in compliance with Malaysian legal requirements. We do not collect data beyond what is needed.

We do not collect sensitive information such as biometric data, medical records, or religious information unless required by Malaysian law and with your explicit consent.

The personal data you provide to surga5000 is used solely for legitimate purposes directly related to the services we offer. Below are those purposes and the legal basis for each use:

• Account Management: Creating, verifying, and maintaining your surga5000 account, including the KYC process required under Malaysian law.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and managing your winnings withdrawals.
• Gaming Service Provision: Gives you access to all slots, Live Casino, Sports Betting, live matches, and e-sports on surga5000.
• Security & Fraud Prevention: Detecting and preventing unauthorised use, financial fraud, money laundering, and illegal activities under Malaysian law.
• Service Communications: Sending important notifications relating to your account, transactions, surga5000 promotions, and updates to our terms or policies.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate support.
• Platform Improvements: Analysing usage data (anonymised) to improve the quality, speed, and user experience of surga5000.
• Legal Compliance: Compliance with Malaysian legal and regulatory requirements, including PDPA 2010.

Surga5000 does not sell, rent, or trade your personal data to third parties. However, there are limited situations where we need to share certain information for legitimate operational purposes:

• Payment Service Provider: The payment gateways we use (such as DuitNow, Touch 'n Go, and FPX operators) are required to receive the necessary transaction information to process your deposits and withdrawals.
• Game Software Provider: Licensed providers such as PG Soft and Pragmatic Play may receive player identifiers (without full name) for game management and security purposes.
• Regulatory Bodies & Law Enforcement: surga5000 will disclose the required data if mandated by a Malaysian court order or a lawful request from the relevant authorities.
• Technology Service Providers: Cloud infrastructure and cybersecurity providers that assist us in operating the surga5000 platform securely, subject to strict confidentiality agreements.

All third parties that receive data from surga5000 are bound by data confidentiality agreements requiring them to protect that information to the same or higher standards that we uphold.

Surga5000 continuously invests in the latest security infrastructure to keep your personal data safe at all times. The following are the security layers we have in place:

• 256-bit SSL Encryption: All communications between your device and surga5000's servers are encrypted using 256-bit TLS/SSL — the same standard used by Malaysia's major banking institutions such as Maybank and CIMB.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of protection on their surga5000 account.
• 24/7 Monitoring: Our intrusion detection system monitors for suspicious activity around the clock and will automatically block any unauthorised access.
• Certified Secure Servers: Data is stored in ISO 27001-certified data centres with strict physical and digital access controls.
• Fund Segregation: Player deposits are held in a separate account from surga5000's operating funds for added protection.
• Regular Security Assessments: surga5000 conducts regular penetration testing to identify and address any security vulnerabilities.

While surga5000 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You are also responsible for keeping your surga5000 account password and login credentials confidential.

As a surga5000 player who is a Malaysian citizen or resident, you have the following rights regarding your personal data under PDPA 2010:

Surga5000 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit the surga5000 site.

Surga5000 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with Malaysian legal requirements.

• Active Account Data: Retained for as long as your account remains active with surga5000.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Security Logs: Retained for 2 years for security incident investigation purposes.
• Support Communication Data: Retained for 3 years after the last interaction for service reference and improvement.
• Data After Account Closure: After a surga5000 account is closed at the player's request, personal data not required by law will be deleted within 90 days.

Surga5000 strictly prohibits individuals under the age of 18 from registering or using our services. Our platform is not designed for minors, and we do not knowingly collect personal data from underage individuals.

If surga5000 discovers that personal data of a minor has been collected without parental or guardian consent, we will take immediate action to delete that data and close the associated account.

Surga5000 reserves the right to update or amend this privacy policy at any time to reflect changes in our data practices, new Malaysian legal requirements, or service improvements.

• Players will be notified of any material changes to this policy by email to their registered address at least 14 days before the changes take effect.
• The latest version of the surga5000 privacy policy is always available on this page, with the last updated date clearly shown at the top of the document.
• Continued use of the surga5000 platform after the effective date of any amendment constitutes acceptance of the updated policy.
• If you do not agree with the amendments, you have the right to request the closure of your surga5000 account by contacting our customer support.

Surga5000 has appointed a Data Protection Officer responsible for ensuring compliance with this privacy policy and handling all privacy-related enquiries from Malaysian players.

For any questions, concerns, or requests regarding your personal data at surga5000, please reach us through the following channels:

• Privacy Email: support@surga5000.click (please state "Privacy Enquiry" in the subject line)
• Livechat: Available 24/7 directly on the surga5000 platform
• Response Time: We aim to respond to all privacy enquiries within 5 business days

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications.