Privacy Policy surg99

Welcome to the surg99 Privacy Policy. This document clearly and transparently explains how surg99 ("we", "Platform") collects, processes, stores and protects your personal information ("data") when you use our website or mobile app.

Privacy is the foundation of trust between us and every member. We understand that in today's digital world, personal data is an extremely valuable asset. Therefore, surg99 takes a proactive and principled approach to managing every data record entrusted to us.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. By using the surg99 platform, you agree to the terms set out in this Privacy Policy.

Surg99 collects various types of data depending on how you interact with our platform. Below are the categories of data we process:

We never collect information irrelevant to the platform's operations. Sensitive data such as passwords is stored in a hashed format that cannot be read back, even by our own internal staff.

Surg99 collects your personal data through several different channels depending on how you use our platform:

• Account Registration: When you register as a new member, you will be asked to provide basic information such as your name, email and phone number.
• KYC Verification: Before your first withdrawal is approved, we require a copy of your identity document to meet regulatory requirements.
• Financial Transactions: Every deposit and withdrawal automatically records the associated bank account information and transaction details.
• Platform Usage: While you play, our system automatically records game data and account activity for security and support purposes.
• Support Communications: When you contact our support team, the conversation content is stored to assist with issue resolution and service improvement.
• Cookies & Tracking Technologies: Our platform uses cookies and related technologies to enhance the user experience and analyze usage patterns.

Every piece of data we collect has a clear and legitimate purpose. surg99 uses your personal data only for the following purposes:

• Account Management: Creating, verifying, and maintaining your member account, including a secure login process.
• Transaction Processing: Processing all deposit and withdrawal requests promptly and accurately to the correct bank account.
• Identity Verification (KYC): Fulfilling Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) regulatory requirements as mandated.
• Platform Security: Detecting and preventing fraudulent activity, hacking, multi-account usage, and other security threats.
• Customer Support: Providing more effective and personalized support whenever you need assistance.
• Service Communications: Sending important notifications related to your account, transactions, promotions, and platform updates.
• Platform Improvements: Analyzing usage patterns to improve overall performance, interface, and gaming experience.
• Legal Compliance: Meeting legal obligations, including reporting to regulatory authorities when required.

Surg99 does not sell, rent or trade members' personal data to any third party. However, there are limited situations where we need to share certain information with trusted partners:

• Payment Providers: PCI-DSS certified payment processors to facilitate your deposit and withdrawal transactions. They receive only the minimum information required to complete each transaction.
• Game Software Providers: Licensed gaming companies that provide game content to our platform may receive anonymised statistical data for RNG audit purposes.
• Technical Service Providers: Cloud and cybersecurity infrastructure partners who help us operate the platform securely. All such parties are bound by strict confidentiality agreements.
• Regulatory Authorities: Government agencies and regulatory bodies with legal authority to request specific information in official investigations.
• Law Enforcement: Police or relevant agencies when there is a valid court order or lawful legal requirement.

In all data-sharing instances, surg99 ensures that only the minimum necessary data is shared, and recipients are bound by data protection obligations equivalent to our own standards.

Protecting your personal data is surg99's number one priority. We continuously invest in the latest security infrastructure to ensure your information remains safe from both external and internal threats.

Key security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS 1.3 protocol, making it unreadable to any third party in transit.
• Data-at-Rest Encryption: Data stored in our databases is also encrypted using AES-256, ensuring protection even in the event of a physical server breach.
• Two-Factor Authentication (2FA): All member accounts are protected with 2FA to prevent unauthorised access even if your password has been compromised.
• 24/7 Monitoring: Our automated security system monitors for suspicious activity around the clock and proactively blocks threats before any damage can occur.
• Regular Security Audits: Penetration testing is conducted regularly by independent security experts to identify and close any vulnerabilities.
• Internal Access Controls: surg99 staff may only access data required for their specific role, and all access is recorded in audit logs.

Surg99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve performance and site speed.
• Functional Cookies: Remembering your preferences such as language, display settings, and other choices to personalize your experience.
• Analytics Cookies: Helps us understand aggregate traffic patterns and user behavior for platform improvement purposes.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the surg99 platform.

As a surg99 member and data subject under Malaysia's PDPA, you hold several important rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Surg99 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as long as required by applicable Malaysian law.

• Active Account Data: Stored for the duration of your active account and for a defined period following account closure.
• Financial Transaction Records: Stored for a minimum of 7 years in accordance with Malaysia's AML legislation and financial regulations.
• KYC Documents: Stored for a minimum of 5 years after the business relationship ends, or longer if required by law.
• Security Logs: Stored for 2 years for investigation and digital forensics purposes if required.
• Support Communication Data: Stored for 3 years for reference and service improvement purposes.

Surg99's primary servers are located in secure data centers. Any cross-border data transfers are conducted using appropriate protection mechanisms to ensure equivalent protection standards are maintained.

Surg99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, technology or our operations. Any significant amendments will be communicated to members via:

• In-platform notification on your next login session.
• Email to your registered address.
• Clear notice displayed on the home page within a reasonable timeframe.

The "Last Updated" date at the top of this document will always reflect the latest version. We recommend you review this page periodically. Continued use of the surg99 platform after any amendments are displayed constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us:

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the live chat icon on the platform. Response time under 3 minutes.
• Email Response Time: Within 14 business days for privacy and data-related enquiries.

For general questions about your account and services, please visit our FAQ us. Further information on how we manage platform operations can be found on the About Us.