At surga19, we take the privacy and security of your personal data seriously. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used and protected, and what rights you have as a registered player on our platform.
This Privacy Policy ("Policy") describes how surga19 ("we", "us", "our", "the Operator", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the User", "the Player", "the Member") who visit, register on, or use the services available at surga19.cam.
Surga19 operates an English-language online sports betting and live casino platform designed for Malaysian players. In providing our services — which include sports wagering on the English Premier League (EPL), Liga Super Malaysia, UFC, and other markets, alongside live dealer casino games and slot titles — we necessarily collect and process certain personal data. This Policy is designed to be transparent about those practices.
By registering an account on surga19.cam or otherwise using our services, you acknowledge that you have read, understood, and consented to the practices described in this Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform generally.
Your privacy matters to us. We will never sell your personal data to third parties for their own marketing purposes. We collect only what we genuinely need to operate a safe, compliant, and enjoyable platform for Malaysian players.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Surga19 collects Personal Data that is reasonably necessary to provide betting and gaming services, secure player accounts, process transactions in Malaysian Ringgit, meet verification obligations, and respond to support requests. The exact information collected depends on how you interact with the Platform.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, identification number, and government-issued identification images | Age confirmation, KYC checks, account security, and fraud prevention |
| Contact Data | Email address, mobile number, residential address, and preferred support channel | Account notices, verification, support, and service communications |
| Account Data | Username, encrypted password credentials, account status, preferences, and verification history | Account administration, authentication, and personalised settings |
| Financial Data | Payment method, masked account details, transaction references, deposit records, and withdrawal instructions | Processing MYR transactions, reconciliation, and financial security |
| Gaming Data | Sports bets, casino activity, bonuses, game history, stakes, winnings, losses, and responsible gambling limits | Settlement, account records, risk controls, and safer gambling measures |
| Technical Data | IP address, device type, operating system, browser, language settings, session time, and security logs | Platform operation, cyber security, troubleshooting, and fraud detection |
| Communication Data | Live chat transcripts, support emails, complaints, feedback, and call notes where applicable | Customer support, dispute handling, staff training, and service improvement |
We collect information directly from you when you create a surga19 account, complete identity verification, make a deposit or withdrawal, apply a responsible gambling limit, contact customer support, or update your account details. You must ensure that the information you provide is accurate and current.
When you access surga19.cam, our systems automatically generate Technical Data and security records. This information allows the Platform to maintain sessions, recognise suspicious login attempts, protect accounts, diagnose technical faults, and present content correctly on mobile and desktop devices.
We may receive limited information from payment processors, banks, e-wallet providers, identity verification services, and fraud prevention partners. For example, a transaction involving Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, or FPX may generate a payment status and reference number. Surga19 does not require or store a User's complete online banking password.
Surga19 processes Personal Data only for defined operational, security, legal, and player-protection purposes. We apply access controls so that authorised personnel and approved Service Providers can access only the information required for their duties.
We may process your Personal Data to:
Where optional promotional communications are available, surga19 will respect your recorded communication preferences. Operational notices that are necessary to administer or secure your account are not treated as optional marketing.
Depending on the nature of the Processing and the applicable data protection framework, surga19 relies on one or more recognised legal grounds. These may include performance of our agreement with you, compliance with legal or regulatory obligations, protection of legitimate interests, protection of Users and the Platform, and consent where consent is specifically required.
We process Account Data, Transaction Data, and Gaming Data where necessary to register your account, accept wagers, settle outcomes, administer bonuses, process payments, provide support, and otherwise deliver the services described in our Terms & Conditions.
Identity checks, transaction monitoring, record retention, and responses to valid official requests may be necessary to satisfy applicable legal, financial security, fraud prevention, or dispute-resolution obligations.
Surga19 may process limited data where necessary for legitimate interests such as preventing fraud, protecting network security, improving service performance, enforcing Platform rules, defending legal claims, and understanding aggregated service usage. We balance those interests against the rights and reasonable expectations of Users.
Where Processing depends on consent, you may withdraw that consent through available account preferences or by contacting support. Withdrawal does not affect Processing already lawfully completed and may not prevent Processing required for account administration, security, or legal compliance.
Surga19 does not sell or rent Personal Data. We disclose information only where reasonably necessary to operate the Platform, protect Users, process transactions, meet valid obligations, or obtain professional services.
Personal Data may be shared with the following categories of recipients:
Service Providers acting for surga19 must process information only for authorised purposes and must apply suitable confidentiality and security measures. We seek to minimise the data disclosed to each recipient.
Surga19 retains Personal Data only for as long as reasonably necessary for the purpose for which it was collected, including account administration, transaction reconciliation, fraud prevention, responsible gambling controls, dispute resolution, security, and compliance obligations.
Retention periods vary according to the type of information and the circumstances of the account. Financial and KYC records may need to be retained after account closure to establish transaction history, respond to complaints, prevent repeated prohibited registration, or comply with applicable record-keeping duties. Routine technical records may be held for shorter periods unless they are relevant to a security investigation.
When Personal Data is no longer required, surga19 will delete it, anonymise it, or place it beyond routine operational use in accordance with applicable requirements. Anonymised statistical information that no longer identifies a User may be retained for service analysis and planning.
Surga19 uses Cookies and similar technologies to operate essential Platform functions, maintain secure sessions, remember preferences, prevent fraud, and understand how the service performs. Cookies do not give us access to unrelated files or information stored on your device.
Essential Cookies support authentication, navigation, security, load balancing, transaction continuity, and responsible gambling controls. Disabling these Cookies may prevent parts of surga19.cam from operating correctly.
Preference Cookies may remember settings such as display choices, selected odds formats, or interface preferences so that you do not need to select them again during each visit.
Limited performance technologies may be used to identify errors, measure page responsiveness, and understand aggregated usage patterns. Where required, optional analytics will be subject to the appropriate preference or consent controls.
You can manage Cookies through your browser settings. Blocking all Cookies may affect account login, live odds, payment workflows, or other essential functions. Clearing Cookies may also remove saved preferences and end active sessions.
Surga19 maintains technical and organisational safeguards intended to protect Personal Data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These safeguards include encrypted transmission, restricted administrative access, account authentication controls, security monitoring, system logging, and staff confidentiality requirements.
No online system can provide an absolute guarantee of security. Users also have an important role in protecting their accounts. You must use a strong, unique password, keep your credentials confidential, sign out on shared devices, and notify surga19 promptly if you detect an unfamiliar login or transaction.
Account safety reminder: Surga19 support will not ask you to reveal your complete password. Never share login credentials, verification codes, or online banking passwords with another person.
If a Personal Data incident creates a material risk to affected Users, surga19 will assess the incident, take reasonable containment and remediation measures, and provide notifications where required by applicable rules.
Subject to applicable law, verification requirements, and relevant exemptions, you may request access to or correction of Personal Data held by surga19. You may also have rights to request deletion, restriction, objection, portability, or withdrawal of consent in certain circumstances.
You may ask for confirmation of whether surga19 processes your Personal Data and request a copy of relevant information. If your account information is inaccurate or incomplete, you may request correction. We may require supporting documents where a change affects verified identity or payment information.
You may request deletion or restriction of eligible Personal Data. Surga19 may retain information where it remains necessary for transaction records, fraud prevention, responsible gambling restrictions, legal claims, dispute handling, or other valid obligations. Closing an account does not automatically require immediate deletion of every associated record.
You may object to certain Processing based on legitimate interests and may withdraw consent where consent is the applicable basis. Each request will be considered in light of the relevant circumstances and any overriding security, contractual, or compliance grounds.
To make a privacy request, contact the surga19 support team through live chat or send your request to [email protected]. The email address is displayed as plain text for security and is not a clickable link. Please describe your request clearly and provide enough information for us to verify your identity.
We may request additional verification before releasing, correcting, or deleting Personal Data. This protects your information from unauthorised requests. Surga19 aims to respond within a reasonable period, subject to the complexity and scope of the request.
Surga19 is strictly available to players aged 21 and above only. We do not knowingly permit minors to register, deposit, place wagers, or use casino-style gambling services. Date-of-birth information and identity documentation may be processed to confirm eligibility.
If we have reason to believe that an account belongs to a person under 21, we may immediately restrict the account while conducting verification. Where underage use is confirmed, the account will be closed in accordance with our Terms & Conditions.
A parent or guardian who believes that a person under 21 has provided Personal Data to surga19 should contact support promptly at [email protected]. We will review the concern and take appropriate action after verification.
Certain Platform functions depend on approved Service Providers, including payment processing, game delivery, identity verification, cyber security, and technical infrastructure. When a provider processes Personal Data on behalf of surga19, we require the provider to use the information only for authorised purposes and to maintain appropriate safeguards.
Payment services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank may process transaction information under their own applicable privacy practices. Surga19 receives only the information reasonably necessary to confirm, reconcile, secure, or investigate the transaction.
Surga19.cam does not include links to unrelated external websites within this Privacy Policy. Users should remain cautious when independently visiting third-party services and should review the privacy information supplied by the relevant provider.
Surga19 may amend this Privacy Policy to reflect changes in Platform features, security practices, legal requirements, payment methods, or data-processing activities. The revised Policy will display an updated effective date at the top of this page.
Where a change materially affects how we process Personal Data, we will take reasonable steps to notify registered Users through an account notice or another suitable service communication. We encourage you to review this page periodically so that you remain informed about our privacy practices.
Continued use of surga19 after an updated Policy takes effect acknowledges the revised practices, except where applicable law requires a separate form of consent.
If you have questions about this Privacy Policy, believe your information is inaccurate, wish to exercise a privacy right, or want to report a suspected data security issue, please contact the surga19 support team.
Please do not send passwords, complete payment credentials, or unnecessary sensitive documents in an initial message. Our team will explain any secure verification steps required to process your request.
Our privacy controls support secure accounts, reliable MYR transactions, fair play, and clear choices for every verified Malaysian player.
Surga19 collects information for defined account, security, payment, compliance, support, and player-protection purposes rather than gathering data without a clear operational need.
Encrypted transmission, restricted access, security monitoring, and confidentiality controls help protect identity, account, gaming, and transaction information.
Identity checks protect player balances, support the 21+ age restriction, and reduce the risk of unauthorised withdrawals, duplicate accounts, and fraudulent activity.
Only information reasonably required to confirm and reconcile MYR deposits or withdrawals is exchanged with approved banks, e-wallets, and payment processors.
Verified Users may request access, correction, and other eligible controls over Personal Data, subject to necessary security, legal, and record-retention requirements.
This Policy explains what surga19 collects, how information is used, when it may be shared, and how long relevant records may be retained.
Have a question about account data, identity verification, or MYR payment records? Review our FAQ or return to the homepage to explore surga19 with clear privacy and security standards.
Surga19 is for players aged 21 and above only. Play responsibly and review our Responsible Gambling guidance before participating.