SurgaSlot Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

Surgaslot takes player privacy very seriously. We understand that when you register and play on our platform, you are entrusting us with sensitive personal information. We do not take that trust lightly.

This Privacy Policy ("Policy") explains in detail how SurgaSlot collects, uses, stores, protects, and in certain circumstances, shares your personal information. It also outlines your rights as a data owner and how you may exercise those rights.

This Policy applies to all users of the surgaslot.vu website, the SurgaSlot mobile app, and all related services we provide. It should be read together with Terms and Conditions which constitutes the entire agreement between you and surgaslot.

Surgaslot collects several categories of personal data depending on the nature of your interaction with our platform:

We never collect special sensitive data categories such as health information, political views, religious beliefs, or sexual orientation, except in very limited cases and with your explicit consent.

The personal data we collect is used for the following purposes, and only for these purposes:

• Account Management: Registering, verifying, and maintaining your player account;
• Transaction Processing: Processing deposits, withdrawals, and all related financial activities;
• Identity Verification (KYC): Meeting anti-money laundering legal compliance requirements;
• Service Provision: Providing access to games, bonuses, and platform features;
• Platform Security: Detecting and preventing fraud, abuse, and illegal activity;
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance;
• Service Communications: Sending important notifications relating to your account, transactions, and policy updates;
• Platform Improvement: Analysing usage patterns to improve service quality;
• Legal Compliance: Fulfilling obligations under applicable laws and regulations.

Surgaslot does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform, we may share your data with a limited set of third-party categories as follows:

• Payment Processors: Payment service providers that process your deposit and withdrawal transactions, subject to strict confidentiality agreements;
• Game Providers: The minimum information required to grant access to games from our partner content providers;
• Technical Service Providers: Companies supporting the platform's technical infrastructure, security monitoring, and analytics — all subject to data protection agreements;
• Relevant Authorities: When required by law, court order, or a regulatory body with applicable jurisdiction;
• Dispute Resolution: To relevant parties when required to lawfully resolve disputes or complaints.

All third parties that receive your data are required to meet data security standards equal to or exceeding our own. We do not share data with third parties we do not trust or cannot oversee.

Protecting your data is surgaslot's top technical and operational priority. We continuously invest in security infrastructure to ensure your information remains safe at all times.

The security measures we implement include:

• Data Encryption in Transit: TLS 1.3 protocol and 256-bit SSL encryption for all data transmitted between your device and our servers;
• Stored Data Encryption: Sensitive data such as financial information is stored in encrypted format using AES-256 algorithms;
• Strict Access Control: A role-based access control (RBAC) system ensures only authorised staff can access player data;
• 24/7 Monitoring: Threat detection systems operate around the clock to identify any suspicious activity;
• Regular Security Audits: Penetration testing and third-party security audits are conducted on a regular basis;
• Two-Factor Authentication: 2FA is available and encouraged for all player accounts;
• Secure Data Backup: Data is regularly backed up to secure, encrypted locations.

Surgaslot uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and understand usage patterns on an aggregate basis.

Types of cookies we use:

• Mandatory Cookies: Required for core platform operations such as login, session management, and security. These cookies cannot be disabled;
• Functional Cookies: Storing your preferences such as language, display settings, and login details for your convenience;
• Analytics Cookies: Helping us understand how players use the platform for improvement purposes — data is collected anonymously;
• Performance Cookies: Monitoring page load times and technical performance to ensure the platform runs optimally.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and your gaming experience.

As a surgaslot player, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights.

Surgaslot does not retain your personal data longer than is necessary for the original purpose of collection or for applicable legal compliance purposes.

• Active Account Data: Retained for the duration your account is active, plus the period required to fulfil legal obligations;
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with financial laws and anti-money laundering requirements;
• KYC Data: Retained for a minimum of 5 years after account closure in accordance with compliance regulations;
• Gaming Activity Data: Retained for 3 years for audit and dispute resolution purposes;
• Support Communication Data: Retained for 2 years after resolution of the related case.

Once the retention period expires, your data will be securely deleted or anonymised in a way that cannot be re-linked to you. You may request early deletion subject to applicable legal restrictions.

Surgaslot reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Each update will carry a new "Updated" date at the top of this document.

For significant changes that affect how we use your data, we will provide advance notice via your registered email or an in-platform notification at least 14 days before the changes take effect.

Continued use of the surgaslot platform after the effective date of any amendment means you accept the updated policy. If you do not agree with the changes, you may contact us to discuss available options, including account closure if necessary.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer through the following channels:

We are committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.