Official Document

Privacy Policy surg99Malaysia User Data Protection

Surg99 is committed to protecting the privacy and data security of every member. This Privacy Policy clearly explains how we collect, use, store, and protect your information throughout your use of the platform.

Updated: January 2026 Bahasa Melayu (Malaysia)

surg99's commitment: We use 256-bit SSL encryption to protect all data transmitted through the platform. Your personal information will not be sold, rented, or shared with external parties without your consent, except where required by applicable Malaysian law.


How surg99 Protecting Privacy You

From data encryption to strict access controls, here are the six core pillars that ensure your privacy is always protected at surg99.

256-bit SSL Encryption

All data transmitted between your device and surg99's servers is protected with industry-standard 256-bit SSL encryption. This means your information remains secure at all times while in transit over the internet.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of security. Database access is strictly controlled and continuously monitored by our security team.

No Data Selling

Surg99 does not sell, rent, or commercialise your personal data to any third party. Your information is used solely for account management, security, and service improvement purposes.

Full User Control

You have the right to access, correct, or request deletion of your personal data. Contact our support team at any time and your request will be processed within the stipulated timeframe.

Legal Compliance

Surg99's Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international regulations. We continually ensure our privacy practices are updated in line with the latest legal developments.

Communication Controls

You may choose to receive or opt out of any marketing communications from surg99. This preference can be updated at any time through your account settings with no additional conditions.


Privacy Policy surg99

This document details how surg99 manages the personal information of users on our platform. By using surg99's services, you agree to the terms set out in this Privacy Policy. Please review this document from time to time as we may update it in line with changes in law or platform practices.

1 Information We Collect

To enable surg99 to provide a secure, efficient, and personalised service, we collect several categories of information from our users. This information is collected directly from you or automatically during your use of the platform.

Data Categories Example Information Collection Method
Identity Information Full name, date of birth, identity card number Account registration / KYC
Contact Information Email address, phone number, residential address Registration form
Financial Information Bank account details, deposit & withdrawal records Platform transactions
Usage Data Game logs, login date & time, game preferences Automated systems
Technical Data IP address, device type, browser, operating system Cookies & server logs
Communication Data Live chat conversation records, support emails Support interactions
Mandatory vs. Optional Information: Certain information such as your full name and email is mandatory for account registration. Other information such as communication preferences is optional and can be updated at any time through your profile settings.

To meet anti-money laundering (AML) compliance and Know Your Customer (KYC) requirements, surg99 also collects identity verification documents such as copies of your national ID or passport, as well as recent proof of residence. These documents are stored securely and accessed only by authorised personnel.

2 How We Use Your Data

Surg99 uses the information collected for legitimate and transparent purposes. The following are the primary purposes for which your personal data is used:

  • Account management: Creating, verifying and maintaining your account on the surg99 platform.
  • Transaction processing: Processing deposits, withdrawals and any financial transactions related to your account.
  • Identity verification (KYC): Meeting legal compliance requirements related to customer identity verification.
  • Platform security: Detecting and preventing fraud, money laundering, multiple account ownership and any suspicious activity.
  • Service improvement: Analysing usage patterns to enhance the user experience and develop new features.
  • Service communications: Sending important notifications related to your account, transactions and platform updates.
  • Customer support: Processing and responding to enquiries, complaints or support requests from you.
  • Marketing (with consent): Sending promotional offers, bonuses and the latest news related to the surg99 platform if you have given your consent.
Legal Basis for Processing: All personal data processing by surg99 is carried out on the basis of one or more valid legal grounds — whether based on your consent, contractual necessity, legal obligation, or surg99's legitimate interests in operating a safe and responsible business.

3 Information Sharing

Surg99 does not sell or rent your personal data to third parties for commercial purposes. However, in certain situations, we may need to share your information with the following parties:

  • Payment processors: Financial information required to process deposits and withdrawals is shared with authorised and regulated payment service providers.
  • Technology service providers: Providers that assist us with server hosting, analytics, cybersecurity and platform maintenance — all bound by strict confidentiality agreements.
  • Authority: surg99 will disclose information when required by Malaysian law or a valid court order.
  • Identity verification service providers: For KYC and AML purposes, identity information may be verified through licensed third-party systems.

Contractual Protection: All third parties that receive surg99 user data are bound by strict data protection agreements. They are only permitted to process data in accordance with surg99's instructions and may not use it for any other purpose.

4 Data Security

The security of your personal data is surg99's highest priority. We implement a range of technical and organisational measures to protect your information from unauthorised access, loss or misuse:

  • End-to-end encryption: All communications between the platform and your device are protected with the latest TLS/SSL protocols.
  • Two-factor authentication (2FA): An additional security layer that protects your account from unauthorised access even if your password is compromised.
  • 24/7 Monitoring: Our security monitoring systems operate around the clock to detect and respond to any threats or unusual activity.
  • Regular security audits: Security assessments and penetration testing are conducted periodically by independent experts to identify and address any vulnerabilities.
  • Internal access controls: Access to user data among surg99 staff is strictly limited on a need-to-know basis.

Incident Response: In the event of any data breach that may affect you, surg99 will notify you and the relevant authorities within the timeframe required by law, and take immediate action to mitigate the impact.

5 Cookies & Tracking Technologies

Surg99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
  • Performance cookies: Collecting information on how you use the platform to help us improve overall speed and functionality.
  • Functional cookies: Storing your preferences such as language, region and display settings to deliver a more personalised experience.
  • Analytics cookies: Helping us understand aggregated usage patterns for product improvement and business strategy purposes.
Managing Cookies: You can control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the surg99 platform. For more information on managing cookies, please refer to your browser's help documentation.

6 Data Storage & Transfer

Your personal data is stored on secure, protected servers. surg99 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

  • Active account retention period: Your data is retained for as long as your account remains active with surg99.
  • After account closure: Certain data may be retained for up to 7 years after account closure to meet legal compliance requirements, including financial reporting and AML obligations.
  • Transaction data: Records of all financial transactions are retained in accordance with Malaysian legal requirements.
International Data Transfers: In the rare event that data may be transferred outside Malaysia, surg99 ensures equivalent protections are applied through standard contractual clauses or recognised safeguard mechanisms. We do not transfer data to countries without adequate data protection standards without additional safeguards in place.

7 Your Rights

As a surg99 user and under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

Right of Access

Requesting a copy of the personal data we hold about you.

Right to Rectification

Requesting correction of inaccurate or incomplete data.

Right to Erasure

Requesting deletion of data under certain circumstances provided by law.

Right to Object

Objecting to the processing of your data for direct marketing purposes.

Right to Portability

Receiving your data in a structured, machine-readable format.

Right to Withdraw Consent

Withdrawing consent to processing at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the surg99 privacy team via email [email protected] or via our platform's live chat. Your request will be processed within 30 calendar days from the date of receipt.

8 Children's Privacy

Surg99 is an online entertainment platform exclusively for users aged 18 years and above only. We do not accept registrations from underage individuals and do not knowingly collect personal data from children.

Immediate Action: If we find that we have collected data from an individual under the age of 18 without proper age verification, we will promptly delete that information and terminate the account in question. Parents or guardians with concerns regarding children's privacy may contact us at [email protected].

9 Third-Party Links

The surg99 platform may contain links to third-party services or content in certain contexts. Please take note of the following:

  • Surg99 is not responsible for the privacy practices or content of any third-party website or service.
  • Each third-party service has its own privacy policy governing the use of your data on their platform.
  • We recommend reading the privacy policy of each third-party service before providing any personal information.
  • Third-party payment processors used by surg99 are licensed entities subject to strict financial regulations.

10 Privacy Policy Changes

Surg99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each update will be accompanied by a new "Updated" date at the top of this document.

Change Notification: For significant changes that affect your rights or how we use your data, surg99 will endeavour to notify you via your registered email or in-platform notification before the changes take effect. Continued use of the platform after those changes are enforced will be considered your acceptance of the updated terms.

We recommend checking this page periodically to stay informed on how surg99 protects your personal data.

11 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, the surg99 team is ready to assist through the following channels:

  • Live Chat: Available 24/7 directly through the surg99 platform — the fastest way to get an immediate response.
  • Privacy Email: [email protected] — for detailed enquiries or requests relating to your personal data.
  • FAQ: Visit the page FAQ for answers to the most frequently asked questions.

The surg99 support team operates 24 hours a day, 7 days a week. Data privacy requests are processed within 30 calendar days of receipt, or sooner where possible.


Join surg99 — Secure & Trusted in Malaysia

You now have a clear understanding of surg99's commitment to your privacy and data security. Register today and enjoy a safe, fair and entertaining online experience alongside millions of Malaysian members.

256-bit SSL Encryption PDPA-Protected Data Integrated KYC 24/7 Support

Bahasa Melayu