Surga33 is committed to protecting the personal data of every user on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your own data.
Effective Date: 1 January 2026These cards give you a quick overview of our privacy approach. Please read the full policy below for complete details.
We collect only the personal data that is strictly necessary to operate your account, process transactions, and comply with our international licensing obligations. We do not collect data we do not need.
All personal data is stored on secured servers and transmitted using 256-bit SSL encryption. Access to personal data is restricted to authorised personnel only, on a need-to-know basis.
Surga33 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data is yours, and we treat it accordingly.
You have the right to access, correct, port, restrict, and request deletion of your personal data. We provide straightforward channels to exercise these rights and respond within stated timeframes.
We use cookies for session management, security, and platform performance. We do not use tracking cookies to build marketing profiles for third-party advertising networks without your knowledge.
If there is ever a change to how we process your data, or a data incident that affects you, we will communicate with you directly and promptly via the email address on your account.
This Privacy Policy ("Policy") describes how Surga33 ("the Company", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "the User") who access or use the online casino and sports betting platform operated at surga33.cam ("the Platform").
Surga33 operates under an international online gaming licence and takes its data protection obligations seriously. This Policy is designed to inform you clearly and transparently about our data practices so that you can make informed decisions about your personal information.
By registering an account on, or otherwise accessing and using, the Surga33 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, please do not register or continue to use the Platform.
This Policy should be read in conjunction with our Terms & Conditions, which govern the overall legal relationship between you and Surga33.
For the purposes of this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, date of birth, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | Surga33, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of Surga33, subject to written data processing agreements. |
| "Consent" | Freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more stated purposes. |
| "Cookies" | Small text files stored on your device when you access the Platform, used for session management, security, and performance analytics. |
| "KYC Documents" | Identity verification documents, including copies of government-issued identification (e.g., Malaysian MyKad or passport), proof of address, and payment method verification. |
Surga33 collects the following categories of personal data from users of the Platform:
Surga33 collects personal data through the following methods:
Surga33 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your Surga33 account, including processing login sessions, account preferences, and security settings. |
| KYC & Age Verification | Verifying your identity and confirming that you meet the minimum age requirement of 21 years, as required under our licensing obligations. |
| Payment Processing | Processing deposits and withdrawals via Malaysian payment channels (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and cryptocurrency), including verifying payment method ownership. |
| Regulatory Compliance | Fulfilling anti-money laundering (AML), counter-terrorist financing (CTF), and other obligations under our international gaming licence, including transaction monitoring and suspicious activity reporting. |
| Customer Support | Responding to enquiries, resolving disputes, and providing assistance in English, Bahasa Melayu, and Mandarin via live chat and email. |
| Fraud Prevention & Security | Detecting and preventing fraudulent activity, multiple account creation, system abuse, and unauthorised access to user accounts. |
| Service Improvement | Analysing usage patterns and Platform performance to improve game offerings, payment reliability, and user experience — using aggregated or pseudonymised data where possible. |
| Marketing Communications | Sending promotional offers, bonus notifications, and Platform updates to users who have opted in to receive such communications. Users may opt out at any time. |
| Responsible Gambling | Monitoring betting patterns to identify potential signs of problem gambling and applying responsible gambling interventions including deposit limits, cooling-off periods, and self-exclusion tools. |
Where international data protection principles require a legal basis for processing personal data, Surga33 relies on the following:
Surga33 does not sell your personal data to any third party. We may, however, share your personal data with the following categories of recipients, strictly for the purposes set out in Section 5:
As an internationally licensed online gaming platform serving users including those based in Malaysia, Surga33 may transfer your personal data to, and store it in, countries outside of Malaysia. Some of these countries may not have data protection laws equivalent to those in Malaysia or other jurisdictions.
Where personal data is transferred internationally, Surga33 implements appropriate safeguards to ensure an adequate level of protection, including the use of contractual data processing agreements with recipient entities that impose binding obligations consistent with internationally recognised data protection standards.
By using the Surga33 Platform, you acknowledge and agree to such international transfers of your personal data as described in this section.
Surga33 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or archived in accordance with our internal data lifecycle management procedures.
The Surga33 Platform uses cookies and similar technologies to ensure the correct functioning of the Platform, maintain session security, and analyse usage patterns. The following categories of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — session management, login authentication, and security tokens. Cannot be disabled without breaking Platform functionality. | Session |
| Performance & Analytics | Collect anonymised or pseudonymised data on how users interact with the Platform — pages visited, session duration, and error frequency — to improve Platform performance. | Up to 24 months |
| Functional | Remember your preferences such as language settings, preferred payment methods, and interface configurations. | Up to 12 months |
| Fraud Prevention | Device fingerprinting and risk scoring cookies used to detect and prevent fraudulent or abusive activity on the Platform. | Up to 12 months |
Most web browsers allow you to control cookies through browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform. Surga33 does not use third-party advertising tracking cookies or share browsing data with external advertising networks.
Subject to applicable law and the exceptions described below, you have the following rights in respect of your personal data held by Surga33. To exercise any of these rights, please contact us using the details in Section 16.
Request a copy of the personal data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data, subject to legal retention obligations and regulatory requirements.
Request that processing of your data be restricted in certain circumstances, such as while a dispute is being resolved.
Receive a copy of your personal data in a structured, machine-readable format for transfer to another service where technically feasible.
Object to processing based on legitimate interests, including profiling for responsible gambling monitoring purposes.
Withdraw any previously given consent — such as marketing communications — at any time without affecting prior lawful processing.
Lodge a complaint with a competent supervisory authority if you believe your data has been processed unlawfully.
Surga33 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
Notwithstanding the above measures, no method of transmission or storage over the internet is entirely secure. Surga33 cannot guarantee absolute security but commits to implementing measures consistent with industry best practice and our licensing obligations.
The Surga33 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory part of the account registration and KYC process.
If Surga33 discovers or has reason to believe that personal data has been collected from an individual under the age of 21, we will take immediate steps to close the associated account, return any real-money deposits, delete the relevant personal data, and — where required — report the matter to appropriate authorities.
If you are a parent or guardian and believe that a minor in your care has registered on the Surga33 Platform, please contact us immediately using the contact details in Section 16 so that we may take appropriate action without delay.
The Surga33 Platform may contain references to third-party services or content, including game studios, payment processors, and technology providers. This Privacy Policy applies only to personal data processed by Surga33 as the data controller. Third-party services integrated into the Platform — including payment gateways for Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency networks — operate under their own privacy policies, which Surga33 does not control.
Surga33 selects third-party service providers with care and requires those acting as data processors to enter into contractual agreements that bind them to appropriate data protection standards. However, users are encouraged to review the privacy policies of third-party services independently.
Surga33 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy — including changes to the purposes for which we process your data, the types of data we collect, or your rights — will be communicated to you via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect, where operationally practicable.
Non-material changes, such as corrections to typographical errors, clarifications of existing practices, or updates to contact information, will take effect immediately upon publication on this page.
The effective date at the top of this Policy indicates when the current version was last updated. We encourage you to review this page periodically to stay informed about how Surga33 protects your personal data. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 11, or have a concern about how Surga33 handles your personal data, please contact us through the following channels:
Surga33 aims to acknowledge all data-related written enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days. Where a request is complex or voluminous, we will notify you of any extension to this timeframe.
Our support team is available 24/7 to help — in English, Bahasa Melayu, and Mandarin. For account privacy queries, reach us via live chat or email. You can also visit our FAQ for quick answers about data, accounts, and security on the Surga33 platform.
For players aged 21 and above only. Gambling involves financial risk — please play responsibly.