🔒 Privacy & Security

Privacy Policy surg77 — Data Protection & User Privacy

Surg77 takes your privacy seriously. This document clearly explains how we collect, use, store and protect your personal information.

Last updated: 1 January 2026
Our Commitment

How surg77 Protecting Your Privacy

Six core principles that shape how we handle your personal data every day.

Bank-Grade Data Encryption

All your personal and financial information is transmitted and stored using 256-bit SSL encryption — the same security standard used by major banking institutions in Malaysia. No sensitive data is stored in plain text format.

Data Is Not Sold to Third Parties

Surg77 has never and will never sell, rent or transfer your personal data to any third party for marketing purposes. Your information is only shared with selected partners who are bound by strict confidentiality agreements.

Secure Identity Verification

Surg77's KYC process uses the latest document verification technology, allowing the process to be completed entirely online. Documents you submit are stored in an isolated environment and accessible only to authorised personnel.

Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time through your account settings or by contacting our support team. Your privacy is not just a right — it is our priority.

Two-Factor Authentication (2FA)

Surg77 supports two-factor authentication for all accounts as an additional layer of protection. Even if your password is compromised, 2FA ensures no unauthorized access can be made to your account. We strongly encourage all members to enable this feature.

Full Transparency in Data Usage

We will not use your data for purposes not stated in this Privacy Policy without obtaining your prior consent. Whenever there is a material change in how we handle your data, you will be proactively notified.

1 Information We Collect

To provide you with a safe, fair and seamless surg77 experience, we need to collect certain categories of personal information. We only collect what is strictly necessary for the stated purposes — nothing more, nothing less.

Data Category Examples of Information Collection Purpose
Identity Information Full name, date of birth, MyKad/passport number KYC verification & legal compliance
Contact Information Email address, phone number Account communications & customer support
Financial Information Bank account number, eWallet details Deposit & withdrawal processing
Technical Data IP address, device type, web browser Account security & fraud prevention
Activity Data Game history, transaction history Account management & responsible gaming

All information you provide during registration and the KYC process is stored in a secure, protected environment. We never request information unrelated to the operation of the surg77 platform.

2 How We Use Your Data

The data we collect is used exclusively for the following purposes directly related to the operation and improvement of the surg77 platform:

  • Account Management: To register, verify and manage your user account and enable access to all platform features.
  • Transaction Processing: To securely process deposits and withdrawals via your preferred payment methods such as DuitNow, FPX and eWallet.
  • Security & Fraud Prevention: To monitor suspicious activity, detect unauthorized access attempts and protect the integrity of the platform.
  • Legal Compliance: To meet KYC, AML (Anti-Money Laundering) and reporting obligations set by the relevant authorities.
  • Service Improvement: To analyze aggregated usage patterns in order to improve the gaming experience, platform speed and customer support quality.
  • Communications: To send important notifications regarding your account, promotional updates (if you have consented) and customer support responses.
  • Responsible Gaming: To monitor gaming patterns and enable us to offer early assistance to users showing signs of problem gambling.

We will not: use your data for automated decisions that materially affect you without human review, or process your data for purposes that conflict with your legitimate interests.

3 Information Sharing with Third Parties

Surg77 does not sell, rent or disclose your personal data to third parties for commercial marketing purposes. However, there are limited situations where sharing information is necessary for platform operations:

  • Payment Processors: Trusted payment gateway partners enabling deposit and withdrawal transactions. All our payment processors comply with PCI DSS security standards.
  • Identity Verification Providers: Third-party KYC services that help us verify user identities securely and efficiently.
  • Game Providers: Gaming software providers that require certain minimum technical data to ensure game integrity.
  • Legal Authorities: When required by court order, law, or a valid request from a law enforcement agency.
â„šī¸

All third parties we work with are bound by strict data processing agreements and are only permitted to use your information for the specific purposes defined. We conduct regular reviews of our partners to ensure ongoing compliance with our privacy standards.

4 Data Storage & Security

Surg77 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration or destruction:

  • Transit Encryption: All communications between your device and surg77 servers are protected using TLS 1.3 protocol with 256-bit encryption.
  • Storage Encryption: Sensitive data such as financial information and identity documents is stored in encrypted format using AES-256 encryption.
  • Access Controls: Access to user data is granted only to staff who require it for their responsibilities, and all access is logged for audit purposes.
  • 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or anomalies in real time.
  • Regular Penetration Testing: Security audits and penetration testing are conducted regularly by independent security experts to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no system is entirely free from risk. In the event of a data breach affecting your information, we will notify you within 72 hours of becoming aware of it.

5 Cookies & Tracking Technologies

Surg77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you don't need to reconfigure them each time.
  • Analytics Cookies: Helping us understand how users interact with the platform for improvement purposes. This data is collected in aggregate and does not identify individuals.
  • Performance Cookies: Used to optimise page loading speed and the overall performance of your platform experience.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect platform functionality. More information on cookie management is available in your account settings.

6 Your Privacy Rights

As a surg77 user, you hold privacy rights that we fully respect and facilitate. The following are your rights regarding the personal data we hold:

đŸ‘ī¸
Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

âœī¸
Right to Rectification

You have the right to request correction of any inaccurate or incomplete information held in our records.

đŸ—‘ī¸
Right to Erasure

You may request deletion of your data, subject to applicable legal record-keeping obligations.

⛔
Right to Object

You have the right to object to the processing of your data for direct marketing or profiling purposes at any time.

đŸ“Ļ
Right to Portability

You have the right to receive your data in a machine-readable format for transfer to another provider.

🔕
Right to Unsubscribe

You may opt out of marketing communications at any time through your account settings or by contacting us.

đŸ“Ŧ

To submit any request relating to your privacy rights, contact our data protection team via Live Chat or email at [email protected]. All requests will be processed within 14 working days.

7 Children's Data

The surg77 platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process any personal data from children or individuals under the age of 18.

Should we discover that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and terminate the associated account. If you believe a child has registered on our platform, please contact us immediately so we can take action.

8 Cross-Border Data Transfer

As part of our global operations, your personal data may be transferred to and stored on servers located outside Malaysia. We ensure that any such transfer is carried out in compliance with applicable data protection requirements.

The steps we take to protect your data during cross-border transfers include:

  • Use of approved standard contractual clauses for international data transfers.
  • Ensuring data recipients in other countries comply with equivalent or higher data protection standards.
  • Data encryption while in transit across jurisdictional borders.
9 Data Retention Period

Surg77 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by applicable law:

  • Active Account Data: Retained for the duration that your account remains active on surg77.
  • KYC Data & Identity Documents: Retained for a minimum of 5 years after account closure to comply with AML legal requirements.
  • Financial Transaction Records: Retained for 7 years as required by accounting and tax legislation.
  • Security Logs: Retained for 12 months for investigation purposes in the event of a security incident.
  • Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

After the designated retention period has elapsed, your data will be securely deleted or anonymised in accordance with established procedures.

10 Privacy Policy Amendments

Surg77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new platform features. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending a notification to your registered email for significant changes.
  • Displaying a clear notice on the surg77 platform before changes take effect.

Continued use of the surg77 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

  • Live Chat: Available 24/7 via the chat icon in the corner of the surg77 platform or app.
  • Privacy Email: [email protected] — include "Privacy Inquiry" in your email subject line.
  • Response Time: Most enquiries are answered within 1–4 hours; complex privacy enquiries may take up to 14 working days.

For more information on how we protect your overall gaming experience, please visit our Responsible Gaming and Terms and Conditions us.

🔐

Your Data Is Safe. Your Game Is Secure.

Join over 500,000 surg77 members who play with peace of mind, knowing their privacy and security are in trusted hands. Register today and start enjoying the best gaming experience in Malaysia.

Bahasa Melayu