Privacy Policy SurgaVIP —
Our Commitment to Protecting Your Data

SurgaVIP respects the privacy of every user and is committed to protecting the personal data shared with us. This Privacy Policy ("Policy") describes how we handle your personal information when you use the surgavip.vin website, the SurgaVIP mobile app, and all related services.

This Policy applies to all users of the surgavip platform, including website visitors, registered users and VIP members. It covers all data collected through platform use, customer support interactions and participation in promotions.

SurgaVIP collects personal data necessary to provide a safe, fair, and effective service. Below is a summary of the categories of data collected:

Personal data collected by surgavip is used solely for legitimate purposes necessary for platform operations. We do not use your data beyond what is required for the following purposes:

• Account management — registration, identity verification, password recovery and user profile management
• Transaction processing — processes deposits and withdrawals securely in MYR via supported payment methods
• KYC Verification — ensures all users meet age and eligibility requirements and comply with anti-money laundering regulations
• Platform security — detects and prevents fraudulent activity, multi-account usage and other security threats
• Customer support — resolves complaints, responds to inquiries and provides technical assistance
• Service improvement — analyses usage patterns to improve platform performance and user experience
• Promotional communications — sends information about bonuses, promotions and platform updates (subject to your preferences)
• Legal compliance — fulfils reporting obligations to relevant authorities when required by law

SurgaVIP does not sell, rent or trade your personal data to third parties for marketing purposes. However, there are limited situations where data may be shared:

• Technical service providers — third parties who help operate the platform, process payments (DuitNow, FPX, e-wallet) or provide technical infrastructure, subject to strict confidentiality agreements
• Game software developers — game session information required to run games correctly, without exposing your personal identity
• Relevant authorities — when required by law, court order or a competent criminal investigator
• Anti-fraud authority — information required to investigate and prevent financial fraud or money laundering

The security of your personal data is among surgavip's top priorities. We implement multiple layers of protection to keep your information safe at all times:

• 256-bit SSL Encryption for all data transmissions between your device and surgavip servers
• Data encryption at rest for all sensitive information stored in our database
• Two-factor authentication (2FA) available and encouraged for all user accounts
• 24-hour security monitoring by our cybersecurity team to detect any threats
• Layered access controls which ensures only authorised personnel can access sensitive data
• Regular security audits by independent third parties to identify and address vulnerabilities
• Automatic data backup to ensure service continuity and protection against data loss

While no security system is entirely perfect, surgavip continually strives to maintain the highest practical security standards to protect your data. In the event of a data breach, we are committed to notifying affected users within the timeframe required by law.

SurgaVIP uses cookies and similar technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login, session security and language preferences. These cookies cannot be disabled without affecting platform functionality
• Performance Cookies — collects information on how you use the platform (pages visited, session duration) to help us improve performance
• Functional cookies — remembers your preferences such as game settings and display preferences to deliver a more personalised experience
• Analytics cookies — helps us understand overall platform usage patterns in aggregate and anonymised form for improvement purposes

As a surgavip user, you have the following rights regarding your personal data under applicable data protection laws:

To exercise any of the above rights, please contact the surgavip customer support team via live chat. We will endeavour to process your request within 30 business days. Please note that there are situations where we may need to retain certain data to comply with legal obligations.

SurgaVIP only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Below are our general data retention period guidelines:

• Active account data — retained for the duration your account is active and for the required period following account closure
• Financial transaction records — retained for a minimum of 7 years for legal and tax compliance purposes
• Game activity log — retained for 3 years for audit and dispute resolution purposes
• Support communication records — retained for 2 years from the date of last interaction
• KYC Data — retained for 7 years after account closure to meet compliance requirements

Upon expiry of the retention period, data will be securely deleted or anonymised using methods that ensure the data cannot be recovered.

SurgaVIP is a platform dedicated to users aged 18 years and above only. We do not intentionally collect or process personal data of individuals under the age of 18.

If we find that personal data has been collected from someone under the age of 18 without proper verification, we will take immediate steps to delete that data and close the relevant account.

SurgaVIP reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or changes to the services we offer.

When material changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this Policy
• Sending a notification to your registered email address for significant changes
• Displaying clear notices on the SurgaVIP homepage

Your continued use of the surgavip platform after any amendments to this Privacy Policy will be considered your acceptance of those changes. It is your responsibility to review this Privacy Policy periodically.

For any questions, concerns or complaints regarding your data privacy at surgavip, our customer support team is available via live chat, operating 24 hours a day, 7 days a week.