Data Protection
How surg55 Protecting Your Privacy
256-bit SSL Encryption
Every piece of information you send to surg55's servers — from passwords to payment details — is protected by 256-bit SSL encryption, the same standard used by Malaysia's leading banks.
Secure & Confidential KYC
Identity verification documents submitted during the KYC process are stored in fully encrypted systems. Only authorised personnel with restricted access are permitted to review them.
No Data Sales
Surg55 has never and will never sell, rent, or trade players' personal information to third parties for marketing or commercial purposes.
Malaysia PDPA Compliance
All our data handling practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, amend, and request deletion of your data at any time.
Financial Transaction Privacy
Your deposit and withdrawal records are strictly confidential. Financial information is not shared with any party except relevant authorities with a valid court order.
Mobile App Security
The surg55 App uses two-factor authentication (2FA) and local data encryption to keep your gaming sessions secure, even on public WiFi networks.
1 Personal Information We Collect
When you register and use the surg55 platform, we collect various categories of personal information for defined purposes. We only collect information that is strictly necessary to provide you with a quality and secure service.
In general, information collected by surg55 falls into three main categories:
| Data Category | Example Information | Purpose of Collection |
|---|---|---|
| Identity Data | Full name, date of birth, identification card number, facial image | Age verification, KYC process, fraud prevention |
| Contact Data | Email address, phone number, residential address | Account communications, notification delivery, customer support |
| Financial Data | Bank account number, payment methods, transaction history | Deposit and withdrawal processing, AML compliance |
| Technical Data | IP address, device type, web browser, session data | Account security, fraud detection, platform improvement |
| Usage Data | Gaming history, betting records, active session duration | Responsible gaming, personalization of user experience |
2 How We Use Your Personal Data
Surg55 uses collected personal information solely for the purposes disclosed to you at the time of collection, or for other purposes consistent with the original intent. We will not process your data for any other purpose without first obtaining your consent.
- Account management: Creating, maintaining, and securing your player account on the surg55 platform.
- Transaction processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and efficiently.
- Legal compliance: Fulfilling our obligations under anti-money laundering (AML) laws, age verification, and applicable gambling regulations.
- Customer Support: Providing technical support, answering inquiries, and resolving complaints effectively.
- Platform improvements: Analyzing aggregated and anonymized usage patterns to improve the surg55 gaming experience.
- Marketing communications: Sending information about the latest promotions and offers — only to players who have consented to receive such communications.
- Responsible gaming: Monitoring gameplay patterns to identify and assist players who may need responsible gaming support.
All data processing is carried out on valid legal bases, namely contract fulfillment, legal obligations, surg55's legitimate interests, or your explicit consent.
3 Sharing Information with Third Parties
Surg55 does not sell, rent, or disclose players' personal information to third parties for commercial purposes. However, there are certain situations where we need to share information with trusted parties to support platform operations:
- Payment service providers: Required transaction details are shared with registered payment processors to facilitate your deposits and withdrawals.
- KYC service providers: Identity verification documents may be shared with third-party verification service providers that comply with the PDPA.
- Relevant authorities: surg55 will disclose the required information to the police, courts, or regulatory bodies where mandated by a valid court order or applicable law.
- Technology partners: Cloud and technology service providers we use may process data as third-party processors, subject to strict data protection agreements.
4 Cookies & Tracking Technologies
Surg55 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
- Essential Cookies: Required for essential platform functions such as login, session tracking, and security. These cookies cannot be disabled.
- Performance Cookies: Collecting information on how you use the platform to help us improve website functionality and speed.
- Functionality cookies: Remembering your preferences and settings such as language, currency, and theme to deliver a more personalized experience.
- Analytics cookies: Used to understand overall usage patterns for platform improvement purposes. This data is processed in aggregate and anonymised form.
You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the surg55 platform.
5 Data Security Measures
Protecting your personal information is surg55's highest priority. We continuously invest in the latest security infrastructure to ensure your data remains safe from unauthorized access, disclosure, alteration, or destruction.
- 256-bit SSL encryption for all data transmitted between your device and our servers
- At-rest encryption for all information stored in our databases
- 24/7 security monitoring by an experienced cybersecurity team
- Regular penetration testing by independent security firms
- Two-factor authentication (2FA) available for all player accounts
- Strict role-based access controls for internal staff
- Regular encrypted data backups to secure locations
6 Your Rights as a User
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and surg55's internal policies, you have the following rights regarding your personal information:
Right of Access
You have the right to request a copy of all personal information we hold about you at any time.
Right to Rectification
If any of your information is inaccurate or outdated, you have the right to request immediate correction.
Right to Erasure
You may request the deletion of your personal data, subject to any applicable legal retention obligations.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You may request that your data be delivered to you in a machine-readable format.
Right to Restriction
You may request a restriction on the processing of your data in certain circumstances while an issue is being resolved.
To exercise any of the above rights, contact the surg55 customer support team via live chat or email at [email protected]. We will process your request within 14 business days.
7 Data Retention Period
Surg55 retains your personal information only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements.
- Active account data: Retained for the duration your account is active and for 5 years after account closure for AML compliance purposes.
- Financial transaction records: Retained for 7 years in accordance with Malaysia's accounting and tax legal requirements.
- KYC documents: Retained for 5 years from the date of last verification or account closure, whichever is later.
- Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
- Analytics cookie data: Processed in aggregate and typically deleted or anonymised after 13 months.
Once the retention period expires, your data will be securely deleted or anonymized in a manner that can no longer be associated with your identity.
8 Changes to This Privacy Policy
Surg55 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or technological developments.
When we make significant changes, we will:
- Updating the "Last Updated" date at the top of this document
- Sending a notification to your registered email at least 7 days before the changes take effect
- Displaying a clear notice on the surg55 platform's main page
9 Contact Us About Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, the surg55 Data Protection Officer (DPO) team is ready to assist.
- Live Chat: The fastest option — available directly on the surg55 platform, 24/7 every day of the week.
- Email: [email protected] — for written enquiries requiring documentation or detailed responses.
- Response time: We are committed to responding to all privacy-related enquiries within 3 business days.
For more information about your rights and related policies, please also review Terms and Conditions and Responsible Gaming Guide surg55.
Your Data is Safe. Now It's Time to Playing at surg55
A transparent, trusted, and secure platform awaits you. Register today and enjoy a privacy-protected online gaming experience alongside more than 250,000 active Malaysian players.