Data Protection

Privacy Policy surga5000 – Personal Data Protection for Malaysian Members

Surga5000 takes your privacy seriously. This document transparently explains how we collect, use, store, and protect your personal data as a member of our platform — in accordance with Malaysia's Personal Data Protection Act (PDPA 2010).

Last updated: 1 January 2026
Bahasa Melayu (ms-MY)
PDPA 2010 Compliance
The surga5000 Privacy Policy is fully compliant with Malaysia's Personal Data Protection Act 2010 to uphold your rights.
Terms Updated 2026

Surga5000's 6 Data Protection Promises to You

Before reading the full privacy policy, here are surga5000's six core commitments to safeguarding the personal data of every Malaysian member.

256-Bit SSL Encryption

All your personal and financial transaction data is encrypted using 256-bit SSL — the same security technology used by Malaysian banking institutions such as Maybank and CIMB. Your data cannot be read by any third party while in transit.

No Data Selling

Surga5000 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not our commodity.

Malaysia PDPA Compliance

Surga5000's Privacy Policy is built on the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We respect and comply with all data protection principles established under Malaysian law.

Right of Access & Correction

As a surga5000 member, you have the full right to access, review, amend, or request deletion of your personal data at any time via your account settings or by contacting our support team.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered access controls, 24/7 monitoring, and regular backups. We use industry-grade cloud infrastructure to ensure your data remains secure at all times.

Data Breach Notification

In the event of any security incident involving your personal data, surga5000 is committed to notifying you via your registered email address within 72 hours of confirming the incident.

Personal Data Lifecycle at surga5000

We ensure your personal data goes through a clear, controlled, and secure process from start to finish.

1
Collection

Data is collected only when necessary for registration or a transaction.

2
Verification

Data is verified for security and accuracy before processing.

3
Encryption

Data is encrypted with 256-bit SSL before being stored on secure servers.

4
Usage

Used solely for the purposes stated in this privacy policy.

5
Deletion

Data is securely deleted when no longer needed or upon your request.

01Introduction & Scope of Privacy Policy

Welcome to the Privacy Policy surga5000. This document explains in detail how we, as the data controller, collect, process, store, and protect your personal information when you use our online gaming platform at surga5000.ws.

This Privacy Policy applies to all surga5000 users and members, including those who register to play slots, live casino, baccarat, roulette, Sports Betting on Malaysia Super League football, badminton, e-sports, and all other games available on our Platform.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), and we are committed to ensuring your personal data is handled fairly, lawfully, and transparently. By using the surga5000 Platform, you agree to the terms set out in this Privacy Policy.

Note: If you are under 18 years of age, please stop using the surga5000 Platform immediately. We do not knowingly collect data from minors.


02Types of Personal Data We Collect

Surga5000 only collects personal data that is strictly necessary to provide you with our platform services. The following are the categories of data we collect:

Data You Provide Directly

Data Type Example Primary Purpose
Identity Information Full name, Malaysian Identity Card number, date of birth Identity verification, legal compliance
Contact Information Email address, Malaysian phone number Account communications, security notifications
Financial Information Deposit methods (TNG, GrabPay, DuitNow, FPX), transaction history Payment processing, deposit/withdrawal verification
Account Information Username, password (encrypted), preference settings Account management, login security

Automatically Collected Data

  • Device Data: Device type, operating system, smartphone model, screen resolution.
  • Network Data: IP address, internet connection type, and internet service provider (ISP) in Malaysia.
  • Usage Data: Games played, session duration, visit frequency, and buttons clicked.
  • Cookie Data: Session cookies, preference cookies, analytics cookies — used solely to enhance your user experience.

03How We Use Your Personal Data

Surga5000 uses collected personal data solely for the following purposes:

  • Account Management: Creating, verifying, and managing your member account on surga5000.
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) and withdrawals to your account.
  • Platform Security: To detect and prevent fraud, money laundering, and unauthorised access to your account.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance via live chat or email.
  • Legal Compliance: To comply with legal obligations under PDPA 2010 and applicable financial reporting requirements.
  • Experience Personalisation: Recommending relevant surga5000 games or promotions based on your play history — with your consent.
  • Platform Communications: To send account-related notifications, security updates, and promotional information (unsubscribable at any time).

surga5000 does not use your personal data to make automated decisions that materially affect you without human involvement, except for automated fraud detection systems designed to protect your account.


04Sharing Data with Third Parties

Surga5000 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, we may share limited information with the following parties under certain circumstances:

  • Payment Providers: Information required to process your deposit and withdrawal transactions through authorised Malaysian e-wallet and banking providers.
  • Technical Service Providers: Software and infrastructure providers that support the operation of the surga5000 platform — subject to strict confidentiality agreements.
  • Game Providers: Minimum game data required by providers such as Pragmatic Play and Evolution Gaming to ensure proper game functionality.
  • Legal Authority: When required by Malaysian law or a valid court order — surga5000 will comply with such requirements.

All third parties who receive your personal data from surga5000 are bound by data protection agreements that require them to safeguard your information to a standard no less stringent than Malaysia's PDPA 2010.


05Data Security Measures

Surga5000 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

  • 256-Bit SSL Encryption: All communication between your device and surga5000's servers is encrypted using the latest TLS 1.3 protocol.
  • Secure Password Storage: Your password is never stored in plain text — we use strong cryptographic hashing algorithms.
  • Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of security on their surga5000 account.
  • 24/7 Monitoring: Our systems are continuously monitored to detect suspicious activity or unauthorised access attempts.
  • Internal Access Controls: Only surga5000 staff who require access to personal data to perform their authorised duties are permitted to access that information.
  • Regular Security Audits: The surga5000 platform undergoes regular independent security audits to identify and address any potential vulnerabilities.

06Data Retention Period

Surga5000 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

Data Type Retention Period Reason
Active account information For the duration of the active account Surga5000 service requirements
Financial transaction records 7 years after the transaction Malaysian financial legal requirements
Support communication logs 3 years Complaint resolution & referral
Data after account closure 5 years PDPA compliance & audit requirements
Cookie data 30 days – 1 year Depends on cookie type

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be used to identify you.


07Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by surga5000:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Correction: You have the right to request the correction of inaccurate or incomplete data.
  • Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data.
  • Right to Restrict Processing: You may request that we restrict how we use your data under certain circumstances.
  • Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
  • Right to Withdraw Consent: You may withdraw your consent to optional processing at any time.

To exercise any of the rights above, please contact the surga5000 data protection team by email at privacy@surga5000.ws or via our live chat, available 24 hours a day. We will respond to your request within 14 business days.


08Cookies & Tracking Technologies

Surga5000 uses cookies and similar tracking technologies to enhance your experience on our Platform. Cookies are small text files stored on your device when you visit our website.

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect some features on the surga5000 Platform.


09Third-Party Links & Services

The surga5000 Platform contains links to third-party services such as payment providers (Touch 'n Go, GrabPay, DuitNow, FPX) and game providers. This Privacy Policy applies solely to the surga5000 Platform.

When you use third-party services linked through the surga5000 Platform, the respective provider's privacy policy governs how they handle your data. surga5000 is not responsible for the privacy practices of those third parties.

We encourage you to read the privacy policies of the e-wallet and banking providers you use to make deposits at surga5000, as they maintain their own privacy policies that are separate from ours.


10Changes to This Privacy Policy

Surga5000 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform security enhancements.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last updated" date at the top of this document.
  • Sending email notifications to the address registered to your account.
  • Posting an in-platform notice on surga5000 at least 7 days before the changes take effect.

Continued use of the surga5000 Platform after a change notice is posted will be considered your acceptance of the updated Privacy Policy.


11Contact the surga5000 Privacy Officer

If you have any questions, concerns, or complaints regarding how surga5000 handles your personal data, you may reach us via:

  • Privacy Email: privacy@surga5000.ws — for specific data protection enquiries
  • General Support: support@surga5000.ws — for general enquiries
  • Live Chat: Available 24 hours a day, 7 days a week within the surga5000 Platform

We are committed to responding to all privacy-related enquiries within 14 working days from the date of receipt. For more complex complaints, we will contact you with an estimated resolution timeline.

If you are dissatisfied with our response, you have the right to refer your complaint to the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.

Your Rights as a surga5000 Member Under the PDPA

The PDPA 2010 grants you strong rights over your personal data. surga5000 respects and supports the exercise of all these rights.

Right of Access

Request a copy of all personal data surga5000 holds about you. We will provide this within 14 days.

Right to Rectification

Update or correct any inaccurate or incomplete personal data in your account settings.

Right to Erasure

Under certain circumstances, you may request the permanent deletion of your personal data from surga5000's systems.

Right to Object

Object to the processing of your data for marketing purposes or in certain other circumstances provided for under the PDPA.

Your Data Is Safe With surga5000

We prioritise the privacy and data security of every Malaysian member. Register with confidence today and enjoy a safe, responsible gaming experience with surga5000.

256-bit SSL encryption PDPA 2010 Compliance No data selling 24/7 privacy support
Bahasa Melayu