SurgaWin takes your privacy seriously. This document clearly explains how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.
SurgaWin ("we", "our platform") takes our responsibility for protecting every user's personal data seriously. This Privacy Policy has been developed in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and sets out our commitment to your privacy in a transparent and comprehensive manner.
This policy applies to all personal information you provide to SurgaWin when registering an account, making financial transactions, using live casino services, playing slots, placing Sports Betting wagers (football, cricket, e-sports, and more), contacting customer support, or simply browsing our platform.
By registering or using the platform SurgaWin, you give your consent to the data collection and processing practices described in this policy. If you do not agree, please discontinue use of the platform and contact us to close your account.
SurgaWin only collects personal data necessary to provide a secure, legitimate, and high-quality service. The following are the categories of data we may collect:
| Data Category | Example Information | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad number | Yes |
| Contact Data | Malaysian phone number, email address | Yes |
| Financial Data | Wallet information (T&G, GrabPay, DuitNow), MYR transaction records | Yes |
| Verification Data | MyKad copy, verification selfie, utility bill | For KYC |
| Technical Data | IP address, device type, browser, location | Automatic |
| Usage Data | Game records, betting history, login activity | Automatic |
| Communication Data | Support chat logs, emails, complaints | Where applicable |
Your personal data is collected through various channels as you interact with the platform. SurgaWin:
SurgaWin only uses your personal data for lawful, transparent, and limited purposes as follows:
SurgaWin does not sell, rent, or share your personal data with third parties for marketing purposes. However, under the following limited and controlled circumstances, your data may be shared:
SurgaWin continually invests in security infrastructure to ensure your personal data is always protected to the highest standards:
All data transmitted between your device and SurgaWin's servers is encrypted using 256-bit SSL protocol — the same technology used by Malaysia's leading banking institutions.
Data is stored in data centres protected by strict physical and digital access controls, with secure backups performed on a regular basis.
Only SurgaWin staff who require access for specific work purposes are permitted to access personal data, and every instance of access is automatically audited.
An automated security monitoring system operates 24/7 to detect and respond to any cyber threats or unauthorised access attempts.
Platform SurgaWin uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and help us understand how the platform is used:
You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the SurgaWin platform. Analytics and functional cookies can be declined without impacting the platform's core features.
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by SurgaWin:
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days.
If your data is inaccurate or out of date, you have the right to request a correction. Updates can be made through your account or via customer support.
You may request the deletion of your personal data when it is no longer required or if you withdraw your consent, subject to applicable legal obligations.
You may withdraw consent for specific data processing activities (such as marketing) at any time without affecting your eligibility to use the platform.
You have the right to receive your personal data in a machine-readable format for transfer to another service upon request.
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with us or with the Personal Data Protection Commissioner of Malaysia.
To submit any request regarding your privacy rights, please contact SurgaWin's privacy team by email at privacy@surgawin.ws with the subject line "Privacy Rights Request – [your name]". We will respond within 14 business days.
SurgaWin does not retain your personal data for longer than is necessary for the processing purpose or to fulfil legal obligations:
If you have any questions, concerns, or requests regarding this Privacy Policy or how SurgaWin handling your personal data, we encourage you to contact us:
Privacy Commitment
Six ways SurgaWin ensures your personal data remains safe and respected at all times.
All of SurgaWin's data collection and processing practices comply with the Malaysia Personal Data Protection Act 2010. You are protected by Malaysia's robust data protection laws.
256-bit SSL protects all data in transit between your device and SurgaWin's servers — the same standard used by Maybank, CIMB, and Malaysia's major banks.
SurgaWin has never sold, rented, or shared your personal data with third parties for marketing purposes, and never will. Your data is not our product.
You have the right to access, correct, delete, and port your data. Withdraw your marketing consent at any time with no penalty.
SurgaWin does not store your banking information directly. All MYR transactions via Touch 'n Go, GrabPay, DuitNow, and FPX are handled by licensed gateways.
Your data is retained only for as long as necessary for legitimate and legal purposes. Once that period ends, data is securely and permanently deleted or anonymised.
Register a SurgaWin account today and enjoy Malaysia's best online casino & Sports Betting experience, backed by bank-grade data security.