Privacy Policy surgaslot – surgaslot's Commitment to Protecting Malaysian Users' Data

1Introduction

Surgaslot ("we", "Platform") is committed to protecting the privacy of all its users. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform, website, and mobile applications.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We take our responsibilities as a data controller seriously and strive to ensure that every aspect of your data handling is transparent, lawful, and fair.

This Policy applies to all SurgaSlot users, including website visitors, registered users, and anyone who interacts with our platform in any capacity. If you do not agree with this Privacy Policy, please discontinue use of our platform.

2Types of Personal Data We Collect

We collect various types of personal data depending on how you interact with the surgaslot platform. The following are the main categories of data we collect:

We not collect data deemed sensitive under PDPA, such as health information, religious beliefs, or trade union membership, except with your explicit consent or where required by law.

3How We Use Your Personal Data

Surgaslot uses your personal data only for lawful and necessary purposes. We do not use your data for any other purpose without prior notice or consent. The primary purposes of use are:

• Service Delivery: Processing account registration, deposits, withdrawals, and providing access to games and platform services.
• Identity Verification (KYC): Meeting legal compliance obligations including anti-money laundering and user age verification.
• Account Security: Detecting and preventing fraud, unauthorized access, and suspicious activity that could compromise your account or platform security.
• Customer Support: Processing and responding to inquiries, complaints, and requests you submit to our team.
• Platform Communications: Sending transaction notifications, account updates, and promotional information you have consented to receive.
• Responsible Gaming: Monitoring usage patterns to identify signs of problem gambling and provide appropriate support.
• Platform Improvements: Analyzing aggregated usage data to improve features, performance, and the user experience.

4Data Sharing with Third Parties

Surgaslot does not sell your personal data. However, we may share certain data with carefully selected third parties in the following circumstances:

• Payment Service Providers: Financial institutions and payment processors such as DuitNow, FPX, Touch 'n Go, and GrabPay require transaction data to process your deposits and withdrawals.
• Game Providers: Gaming technology platforms may receive session data required to deliver games and calculate results accurately.
• KYC Verification Services: Third-party identity verification service providers used to meet legal compliance requirements.
• Relevant Authorities: surgaslot will disclose required data to law enforcement agencies or government authorities when mandated by court order or applicable law.

5Data Security Measures

Surgaslot implements multiple layers of technical and organisational protection to ensure the security of your personal data:

• 256-bit SSL Encryption: All data communications between the platform and your device are protected by industry-standard encryption technology.
• Two-Factor Authentication (2FA): An additional security layer for account access that protects you even if your password is compromised.
• 24/7 Threat Monitoring: Intrusion detection systems and continuous security monitoring that identify and respond to threats in real time.
• Internal Access Restriction: Access to users' personal data on our end is strictly limited on a need-to-know basis — only staff who genuinely require access to perform their duties are permitted.
• Regular Security Audits: Independent security assessments are conducted periodically to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. If you notice any suspicious activity on your account, please contact our support team immediately.

6Cookies & Tracking Technologies

Surgaslot uses cookies and similar technologies to enhance your experience on the platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect platform functionality.

7Your Rights as a Data Subject

Under Malaysia's PDPA and the data protection principles we uphold, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team at [email protected]. We may require identity verification before processing your request.

8KYC & Identity Verification

As a responsible platform, surgaslot carries out a strict KYC (Know Your Customer) process to meet anti-money laundering (AML) compliance obligations and to verify user identity and age.

During the KYC process, you may be asked to submit:

• A valid copy of your national ID (MyKad) or passport
• Proof of current address such as a utility bill or bank statement dated within the last 3 months
• Additional information related to the payment method used, if required

All KYC documents you submit are stored securely using encryption and are only accessed by authorised personnel for verification purposes. They are not shared with any party except as stated in Section 4 of this Privacy Policy.

9Data Retention Period

Surgaslot retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active at SurgaSlot, plus the mandatory retention period required after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in line with anti-money laundering legal requirements.
• KYC Documents: Retained for the minimum period mandated by applicable compliance law.
• Technical Log Data: Retained for a maximum of 12 months for security and technical troubleshooting purposes.
• Support Communication Data: Retained for 3 years for reference and service quality monitoring purposes.

Once the retention period ends, your data will be securely deleted or anonymised in accordance with our internal procedures.

10Changes to the Privacy Policy

Surgaslot reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or updated platform features. You will be notified of any material changes through:

• In-platform notification the next time you log in
• Email to the address registered to your account
• Update the "Last Updated" date at the top of this page

We encourage you to review this Privacy Policy periodically. Your continued use of the platform after any changes are published indicates your acceptance of the revised Privacy Policy.

11Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your rights as a data subject, please contact the surgaslot data protection team through the following channels:

For concerns related to responsible gaming or account controls, please refer to the Responsible Gaming us.