SurgaWin Privacy Policy – Malaysian Member Data Protection

At SurgaWin, your privacy is not merely a legal obligation — it is a responsibility we take seriously. This document clearly explains what data we collect, how it is used, and the steps we take to ensure your information remains safe and protected at all times.

Effective Date: 1 January 2026 Last Updated: 1 June 2026 Version 2.4
Our Privacy Commitment
Data is not sold to third parties
256-bit SSL encryption at all times
You may request deletion of your data
24/7 security monitoring
Complying with international data protection standards

Six Principles Underpinning the SurgaWin Privacy Policy

We manage member personal data guided by the following core principles — because your trust is the foundation of everything we do.

Confidentiality Guaranteed

Your personal data is stored in systems protected by high-level encryption. Internal access is strictly limited to authorised personnel only.

Minimum Collection

SurgaWin only collects data that is genuinely necessary to provide our services to you. No data is collected for unrelated purposes.

Full Transparency

We clearly state the purpose behind every piece of data we collect. No hidden agendas — what you read here is exactly what happens.

Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time through our customer support.

Continuous Security

SurgaWin's security systems are updated regularly. We conduct penetration testing and security audits to ensure your data remains protected at all times.

Global Standards Compliance

SurgaWin's privacy policy complies with internationally recognised data protection standards, ensuring your data is managed in line with industry best practices.

Important Notice: This Privacy Policy explains how SurgaWin collects, uses, stores and protects your personal information. By using our platform, you acknowledge that you have read and understood this policy. If you do not agree, please stop using the platform and contact us to close your account.

1 Introduction

SurgaWin is committed to protecting the privacy of every member who uses our platform. We understand that personal data is a sensitive matter — and we do not take this responsibility lightly.

This Privacy Policy applies to all information collected through the surgawin.vu website, the SurgaWin mobile app, and all related services we offer. It is fully binding on us and serves as a guide for how our team handles your data in day-to-day operations.

Our approach is straightforward: we collect only what is necessary, use it for stated purposes, and protect it to the best of our ability. Nothing more, nothing less. Your trust in SurgaWin is something we take to heart.

2 Personal Data We Collect

SurgaWin collects several categories of personal data depending on how you interact with our platform:

2.1 Data You Provide Directly

  • Registration information: Full name, date of birth, email address, phone number and password.
  • KYC documents: A copy of your identity card, passport, or driving licence for identity verification.
  • Financial information: Bank account number, account holder name and digital wallet details for processing deposits and withdrawals.
  • Communication information: Any messages or enquiries you send to our support team.

2.2 Data Collected Automatically

  • Technical data: IP address, browser type, operating system, screen resolution and device type.
  • Usage data: Pages visited, games played, session duration and navigation patterns.
  • Transaction data: Deposit, withdrawal, betting, and wins history.
  • Cookie data: Session information and preferences stored in your browser cookies.
Remember: SurgaWin will never ask for your password, PIN, or sensitive security information via email, chat, or phone. If you receive such a request, it is a fraud attempt — contact our support team immediately.

3 How We Use Your Data

The data we collect is used solely for legitimate, stated purposes. Below is a detailed breakdown of how we use your data:

Purpose of Use Data Type Legal Basis
Account Management
Account creation, maintenance, and security
Name, email, password Contractual compliance
Transaction Processing
Deposits, withdrawals and bonus payments
Bank details, transaction history Contractual compliance
KYC Verification
Identity and age verification
Identity documents Legal obligation
Fraud Prevention
Detecting and blocking suspicious activity
IP address, usage patterns, transactions Legitimate interest
Customer Support
Resolving enquiries and complaints
Communication history, account information Contractual compliance
Platform Improvements
Analysing usage to improve our services
Anonymous usage data Legitimate interest
Marketing Communications
Promotions and special offers (with your consent)
Email, phone number Your consent

You may withdraw consent for marketing communications at any time via your account settings or by contacting our support team.

4 Data Sharing with Third Parties

SurgaWin do not sell your personal data to any third party for marketing or other purposes. However, there are certain situations where we need to share your data:

4.1 Authorised Service Providers

We share necessary data with companies acting on our behalf, including:

  • Game providers (to operate games within our platform)
  • Payment processors (to process deposits and withdrawals)
  • KYC service providers (for verifying member identity)
  • Infrastructure and cloud service providers (for running the platform)

All these providers are required to sign strict data protection agreements and are not permitted to use your data for any other purpose.

4.2 Legal Obligations

SurgaWin may be required to disclose your data when mandated by law, court order, or a relevant regulatory authority. We will always endeavour to notify you in advance unless prohibited from doing so.

Our Guarantee: Third-party providers we work with are not permitted to store, use, or disclose your data except for the specific purposes we define in our contracts with them.

5 Data Security Measures

The security of your data is SurgaWin's highest priority. We employ multiple layers of technical and procedural protection to keep your data safe at all times:

  • 256-bit SSL/TLS Encryption for all data transmitted between your browser and our servers.
  • Data encryption at rest — data stored in our database is protected with AES-256 encryption.
  • Role-based access control ensuring only authorised staff can access specific data.
  • Real-time activity monitoring detect any suspicious access or activity immediately.
  • Regular security audits by independent parties to identify and close any vulnerabilities.
  • Two-factor authentication (2FA) available to all member accounts for an added layer of security.

While we employ the best available security measures, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials.

6 Cookies & Tracking Technologies

SurgaWin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
  • Functional Cookies: Storing your preferences such as language and display settings for a better experience.
  • Analytics Cookies: Helps us understand how the platform is used so we can improve it. This data is collected anonymously.
  • Session Cookies: Used to maintain active game sessions and protect your account throughout the session.

6.2 Managing Cookies

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect platform functionality. Essential cookies cannot be disabled without impacting overall platform use.

7 Your Rights Regarding Personal Data

As a SurgaWin member, you have several rights regarding your personal data. We fully respect these rights and will respond to any request within a reasonable timeframe.

Access Rights

You have the right to request a copy of all personal data we hold about you. We will provide this information in a readable format.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request that we correct it promptly.

Right to Erasure

In certain circumstances, you have the right to request deletion of your personal data. This right is subject to any legal obligations binding on us.

Right to Restriction of Processing

You may request that we restrict the processing of your data under certain circumstances, such as when you dispute the accuracy of the data.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Such requests will be actioned immediately.

How to Exercise Your Rights: To exercise any of the above rights, contact the SurgaWin support team via live chat. We will verify your identity before processing your request and will respond within 30 business days.

8 Data Retention Period

SurgaWin retains your personal data only for as long as needed for the purposes stated in this policy. Retention periods vary by data type:

  • Active account data: Retained for the duration your account is active and for a defined period following account closure.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with financial and tax legal obligations.
  • KYC documents: Retained for the period required under applicable anti-money laundering legislation.
  • Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
  • Analytics data: Anonymous usage data is retained for as long as necessary for platform analytics.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it.

9 Cross-Border Data Transfers

To operate our platform, some data may be processed or stored on servers located outside Malaysia. This occurs primarily when we use cloud service providers or international game providers.

When we transfer data outside Malaysia, we ensure that equivalent protections to those in Malaysia are applied. This is done through:

  • Data processing agreements compliant with international standards
  • Selecting providers that operate under recognised data protection frameworks
  • Standard contractual clauses binding data recipients to established protection standards

10 Child Protection

SurgaWin Platform not designed for children and we do not knowingly collect personal data from individuals under the age of 18. Registration by minors is strictly prohibited.

If we become aware that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who suspect their child has registered an account at SurgaWin are urged to contact us immediately via live chat so that the appropriate action can be taken.

11 Amendments to the Privacy Policy

SurgaWin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements.

When we make material changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending notifications to members via registered email or in-platform notices.
  • In the case of major changes, posting a brief notice on the platform's main page.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after any changes take effect will be considered acceptance of the updated policy.

12 Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to help.

The fastest way to reach us is via live chat available 24 hours a day, 7 days a week on the SurgaWin platform. Our Malaysian-speaking support team will assist you promptly.

Our Response: We are committed to responding to all privacy-related enquiries within 72 hours business hours. For data deletion or data access requests, the response time is within 30 working days in accordance with established standards.

For enquiries related to the platform's general terms of use, please refer to Terms and Conditions us or visit the FAQ for quick answers.

Your Privacy is Guaranteed

Play with Peace of Mind — Your Data is Safe at SurgaWin

We built SurgaWin with trust at its core. Register today and enjoy a safe, fair and enjoyable gaming experience — with the assurance that your privacy is always protected.

Data protected by 256-bit SSL Not sold to third parties 24/7 privacy support

For users aged 18 and above only.   Terms and Conditions  |  Responsible Gaming

Bahasa Melayu