Surg77 is fully committed to protecting your privacy and personal data. This document transparently explains how we collect, use, store, and protect your information as a member of our platform in Malaysia.
Six core pillars that form the foundation of our data protection policy
All personal and financial data you submit to surg77 is protected with 256-bit SSL encryption technology. This means your information cannot be read by any external party during transmission.
256-bit SSL End-to-End EncryptionSurg77 has never and will never sell, rent, or transfer member personal data to any third party for commercial purposes. Your information belongs solely to you, and we only use it for the purposes stated in this policy.
No Data Selling Confidentiality GuaranteedAccess to members' personal data within the surg77 system is strictly limited to staff who genuinely need that information to carry out their duties. All access is logged and continuously monitored by our security team.
Access Control Audit LogWe clearly disclose every purpose for collecting your personal data. No data is collected covertly or used for undisclosed purposes. You have the right to know and control how your information is used by surg77.
Fully Transparent User RightsEvery surg77 member has the right to request a copy of the personal data we hold, request corrections to inaccurate information, or request deletion of data under certain circumstances. Such requests will be processed within 14 business days.
Right of Access Right to RectificationThe surg77 Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all data protection principles set out under Malaysian law and continually update our practices in line with the latest legislative developments.
PDPA 2010 Full ComplianceThis Privacy Policy ("Policy") is published by surg77 to describe our commitment to protecting the personal data of all members and users of our platform. This document applies to all personal information collected through the official surg77 website, iOS and Android mobile apps, and all our official communication channels including live chat and Telegram.
At surg77, we understand that your trust is our most valuable asset. Since day one, we have prioritized member privacy protection as a core pillar of our operations. We believe that members who feel safe and protected can enjoy a more comfortable and confident gaming experience.
This Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. By using the surg77 platform, you acknowledge that you have read and understood this Privacy Policy.
Note: This Privacy Policy should be read together with the surg77 Terms and Conditions and our Responsible Gaming Policy, all of which collectively form the complete agreement between you and surg77.
When registering for and using surg77 services, you provide us with several categories of information directly:
The surg77 platform also automatically collects certain information when you use our services, including:
| Data Category | Example Information | Collection Methods |
|---|---|---|
| Personal Identity | Name, MyKad, date of birth | Registration & KYC |
| Contact Information | Email, phone number | Account Registration |
| Financial Data | Bank account number, e-wallet | Deposits & Withdrawals |
| Technical Data | IP, device, browser | Automatically during use |
| Activity Data | Betting history, login records | Automatically during use |
Surg77 only uses your personal data for legitimate, clearly stated purposes. The following are the primary purposes for which your data is used:
Your data is used to create and manage your account, process deposits and withdrawals, verify your identity through the KYC process, and ensure you receive all eligible member benefits including bonuses and VIP program rewards.
Your technical information and account activity are actively used by surg77's security systems to detect and prevent unauthorized access, fraud attempts, money laundering, and other suspicious activity — all to protect your interests as a legitimate member.
As a responsibly operated platform, surg77 uses member data to comply with applicable legal requirements, including anti-money laundering (AML) reporting obligations, minimum age verification, and reporting to relevant authorities as required by law.
Anonymized usage data is used to analyze platform usage patterns, identify areas for improvement, develop new features, and ensure platform performance remains optimal for all members.
With your consent, surg77 uses your contact information to send important account notifications, inform you of relevant promotions and special offers, and deliver platform updates. You may withdraw consent to receive marketing communications at any time through your account settings.
Our commitment: surg77 does not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent.
Surg77 understands the importance of your data confidentiality. We do not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where your data may be shared with certain parties:
Surg77 works with carefully selected third-party service providers, including payment processors, KYC service providers, customer support providers, and data hosting companies. All these providers are bound by strict confidentiality agreements and are only permitted to process your data strictly in accordance with our instructions.
Your data may be disclosed to law enforcement agencies, regulatory bodies, or courts when surg77 receives a valid request required under Malaysian law or a relevant jurisdiction. In such situations, we will notify you where permitted by law.
If surg77 is involved in a merger, acquisition, or asset sale, member personal data may be transferred as part of that transaction. We will ensure that any new data recipient adheres to privacy protection standards equivalent to or higher than those set out in this Policy.
Please Note: surg77 never shares member personal data with advertising companies, data brokers, or any party intending to use it to market their own products or services to you.
Your data security is surg77's top priority. We continuously invest in the latest security infrastructure to ensure your personal data remains protected at all times.
Access to members' personal data within surg77 is restricted based on the principle of least privilege. Only staff who genuinely require access to specific data to perform their duties are permitted to do so, and all access is recorded in audit logs that are reviewed on a regular basis.
While no system can be guaranteed 100% secure, surg77 has a comprehensive incident response plan. In the event of a data breach that may affect members, we will notify affected members and relevant authorities within the timeframe required by applicable law.
Surg77 retains your personal data for as long as necessary to fulfil the purposes stated in this Policy or as required by applicable law. The following are general guidelines for our data retention periods:
Upon expiry of the relevant retention period, your data will be securely deleted or anonymised in a manner that is safe and irreversible.
Under Malaysia's Personal Data Protection Act 2010 and data protection best practices, you have the following rights regarding your personal data held by surg77:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request data deletion under certain circumstances permitted by law.
Object to the processing of your data for direct marketing purposes.
Receive your data in a structured, machine-readable format.
Withdraw consent for data processing at any time.
To exercise any of the above rights, please contact our privacy team via live chat or email at [email protected]. Your request will be acknowledged within 3 business days and resolved within 14 business days. In complex situations, this period may be extended up to 30 days with prior notice to you.
Certain rights may be limited in situations where data processing is necessary to comply with legal obligations or for legitimate public interest purposes.
Surg77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website or use our app.
You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the surg77 platform.
Surg77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. The latest update date will always be displayed at the top of this document.
If we make material changes to how we process your personal data, we will notify you via your registered email or a prominent notice within the platform at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of our platform.
Continued use of the surg77 platform after any Privacy Policy changes take effect will be considered acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account before they take effect.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how surg77 handles your personal data, our privacy team is ready to assist. We take every privacy inquiry seriously and are committed to providing accurate and satisfactory responses.
You can reach us through the following methods:
For any complaint that cannot be resolved directly with us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the Personal Data Protection Act 2010.
Response Guarantee: The surg77 privacy team is committed to acknowledging all privacy-related inquiries within 3 business days and providing a full resolution within 14 business days.
Answers to frequently asked questions by surg77 members about privacy and data protection