🔒 Our Commitment to Your Data Security

Privacy Policy surga19 — How We
Protecting Your Personal Information

At surga19, your privacy is not merely a legal obligation — it is a moral responsibility we take very seriously. This document transparently explains how we collect, use, and protect the personal data of every one of our members in Malaysia.

Updated:January 2026
Encryption:256-bit SSL
Applies to:Malaysia

🛡️ surga19's Six Privacy Commitments

Here is what sets surga19's approach to data privacy apart from other platforms in the Malaysian market.

256-bit SSL Encryption at All Times

Every bit of data travelling between your device and surga19's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks. Your login credentials, payment details, and personal data are never transmitted unprotected, whether you are on WiFi or mobile data.

Your Data Is Never Sold

Surga19 never sells, rents, or commercialises our members' personal data to any third party for marketing or any other purpose. The information you share with us — your name, phone number, email, and account details — belongs to you and is used solely to operate your account and improve your experience on our platform.

Restricted & Controlled Data Access

Only surga19 staff who require access to carry out their duties are permitted to view members' personal data — and only to the extent necessary for those duties. All access to member data is logged in an internal audit trail that is reviewed regularly by our security team. No one can view your data without a legitimate reason.

Full Control in Your Hands

You have full rights over your personal data at surga19. This includes the right to access all data we hold about you, request corrections if any details are inaccurate, request deletion of your account and all associated data, and withdraw your consent to any specific data processing at any time without penalty.

Secure Servers & Regular Audits

Surga19 member data is stored on servers protected by multiple layers of physical and digital security. We conduct regular internal security audits and also engage independent external security firms to assess our systems from a fresh, impartial perspective. Any identified vulnerabilities are remediated promptly.

Immediate Notification in the Event of an Incident

In the highly unlikely event of a security incident involving your data, surga19 is committed to notifying affected members as promptly as possible via registered email and an in-account notice. We will not conceal or delay incident notifications to protect the platform's reputation at your expense.

Last updated: 15 January 2026
1

Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how surga19 ("we", "platform" or "surga19") — accessible at surga19.wine — collects, uses, processes, stores, and protects your personal information when you use our platform as a registered member or visitor.

Surga19 is committed to protecting the privacy of every individual who interacts with our platform. This policy is written in plain, straightforward language because we believe you have the right to know exactly what happens to your information — not buried in dense legal jargon. We want you to feel safe and confident every time you open surga19, whether you're playing baccarat, watching an EPL match, or simply checking your account.

This policy applies to all information collected through the surga19 platform, including during the registration process, day-to-day use, interactions with customer support, and any other engagement with our platform. By registering and using surga19, you agree to the terms of this Privacy Policy.

This Privacy Policy should be read together with the surga19 Terms & Conditions, which together form the complete agreement between you and our platform. Both documents collectively outline your rights and responsibilities as a surga19 member.

2

Types of Personal Data We Collect

Surga19 only collects data that is genuinely necessary for legitimate purposes. Below is a full overview of the types of data we collect and the reasons for collecting them:

2.1 Data You Provide Directly

  • Full legal name as it appears on your identity document.
  • An active email address used for communications and account verification.
  • An active Malaysian mobile number for two-factor authentication.
  • Payment account details — your Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay account number, or FPX bank account number for processing deposits and withdrawals.
  • Identity verification documents (MyKad or passport) when required for the KYC (Know Your Customer) process.
  • Information you voluntarily share when communicating with our support team.

2.2 Automatically Collected Data

  • The IP address of the device used to access surga19.
  • Your device's browser type and operating system.
  • The time and date of each login and logout session.
  • A complete record of your gaming activity — including game type, bet amounts, outcomes, and financial transaction history.
  • Cookie data and similar tracking technologies (see Section 7 for full details).
Data Category Example Required? Primary Purpose
Identity Name, MyKad Mandatory Account verification & KYC
Contact Email, phone number Mandatory Communication & security
Finance TnG & FPX Accounts Mandatory Deposits & withdrawals
Technical IP, browser Auto Security & fraud detection
Games Betting history Auto Support & responsible gaming
Optional Account settings Optional Personalise your experience
3

How surga19 Uses Your Data

Every piece of data we collect is used for a specific, legitimate purpose. We do not use your data for anything unrelated to the operation of the surga19 platform without obtaining your separate consent. The purposes for which data is used are as follows:

3.1 Account & Platform Operations

  • Creating, verifying, and managing your surga19 account.
  • Securely processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX.
  • Processing withdrawal of winnings to your registered payment method.
  • Enabling access to all games on the platform, including slots, Live Casino, EPL and Malaysia Super League football, e-sports, and more.
  • Managing bonuses, promotions, and VIP programmes associated with your account.

3.2 Security & Fraud Prevention

  • Detecting and preventing fraudulent activity, money laundering and platform abuse.
  • Verifying your identity when required to safeguard the security of your account.
  • Monitoring suspicious login patterns and alerting you if any unauthorised access is detected.
  • Complying with applicable anti-money laundering legal requirements.

3.3 Personalisation & Service Improvement

  • Understanding platform usage patterns to improve the overall user experience.
  • Personalising promotional displays and game recommendations based on your gameplay history (with your consent).
  • Identifying players who may benefit from responsible gaming support based on activity patterns.

3.4 Communications

  • Sending important account notifications — deposit confirmations, successful withdrawals, and security alerts.
  • Responding to enquiries and complaints submitted through customer support.
  • Sending promotional information and offers (with your consent, and you may unsubscribe at any time).

Surga19 does not use your data to make fully automated decisions that materially affect you without human involvement. All significant decisions — such as account suspensions — are reviewed by our trained team before being carried out.

4

Sharing Data with Third Parties

Surga19 never sells your personal data. That said, there are limited situations where we need to share your data with certain third parties to keep the platform running smoothly. All such sharing is done under strict controls:

4.1 Payment Service Providers

When you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX via Maybank2u and CIMB Clicks, the required transaction information is shared with those service providers solely for the purpose of processing the transaction. These providers are bound by their own privacy policies and Malaysian financial industry security standards.

4.2 Game Software Providers

International-standard game providers that partner with surga19 may receive the minimum data required to operate the games — typically an anonymous session ID that does not reveal your personal identity. Our contracts with all game providers include strict data protection clauses.

4.3 Legal Requirements

Surga19 may be required to disclose your data to authorities or law enforcement agencies upon receipt of a legally binding directive under applicable Malaysian law. In such cases, we will disclose only the minimum data necessary and will notify you if permitted to do so by the relevant authority.

Surga19 never shares your data with advertisers, third-party analytics companies for the purpose of targeting you on other platforms, or any entity that does not have a direct service relationship with the operation of our platform.

5

Data Retention and Security Measures

Surga19 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

  • 256-bit SSL encryption for all data in transit between your device and surga19's servers.
  • Encrypting sensitive data at rest using the latest industry standards.
  • Intrusion detection system (IDS) and multi-layered firewall protection.
  • Two-factor authentication (2FA) is available for all accounts and is mandatory for certain sensitive actions.
  • Daily data backups to geographically separate secure storage locations.
  • Regular penetration testing conducted by independent security experts.

5.2 Data Retention Period

Surga19 retains your personal data for as long as your account remains active. Following account closure, we retain records required for legal audit purposes and anti-money laundering compliance for the period prescribed by applicable Malaysian law. Data that is no longer required will be securely deleted or anonymised.

surga19 Data Protection Standards
Encryption in Transit
100%
Storage Encryption
100%
Access Control
98%
Uptime
99.9%
Security Audit
96%
6

Your Rights Over Personal Data

As a surga19 member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You may request a copy of all personal data surga19 holds about you at any time. We will provide this data in a readable format within 14 business days from the date of your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction promptly. Submit your request via live chat or email support@surga19.wine.

Right to Erasure

You may request the deletion of your account and all associated personal data. Deletion is subject to mandatory legal record-keeping requirements. Financial transaction records may need to be retained for a specified period in accordance with applicable law.

Right to Restriction of Processing

In certain circumstances, you may request that surga19 limit the way we process your data — for example, during a dispute about data accuracy or while you are considering closing your account.

Right to Data Portability

You may request your data in a structured, machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service. This includes your transaction history and account information.

Right to Object

You may object to the processing of your personal data for specific purposes — in particular, direct marketing. When you object to marketing, we will stop processing your data for that purpose immediately.

To exercise any of the above rights, contact us via 24/7 live chat or email support@surga19.wine. We may request identity verification before processing certain requests to protect the security of your account.

7

Cookies and Tracking Technologies

Surga19 uses cookies and similar tracking technologies to keep the platform running smoothly and to give you a better experience. Here is an overview of the types of cookies we use:

7.1 Required Cookies

These cookies are essential for the surga19 platform to function correctly. They store your login session information, language preferences, and basic security settings. Without these cookies, the platform cannot operate and they cannot be disabled.

7.2 Functional Cookies

These cookies remember your preferences — such as your favourite game selections, display settings and account configurations — so you don't have to reset them every time you access surga19. They enhance the overall convenience of using the platform.

7.3 Internal Analytics Cookies

Surga19 uses internal analytics to understand how members use the platform — which pages are visited most often, any technical issues that may arise, and which sections of the platform are most popular. This data is aggregated and does not personally identify you. We use this information solely to improve the surga19 platform for all users.

7.4 How to Manage Cookies

You can manage cookies through your browser settings. Most browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling essential cookies may affect the functionality of the surga19 platform. For instructions on managing cookies in your particular browser, please refer to that browser's help documentation.

8

Protection of Children's Data

Surga19 is an entertainment platform strictly restricted to individuals aged 21 and above. Our platform is not designed for minors or individuals below the stipulated age limit, and we do not target them in any way.

We do not knowingly collect or process personal data from individuals under the age of 21. If we discover that an underage person has successfully registered an account by providing false information, that account will be closed immediately and all collected data will be deleted as soon as possible once the matter comes to our attention.

If you are a parent or guardian who believes that your dependent under the age of 21 has accessed or registered at surga19, please contact us immediately at support@surga19.wine so we can take prompt action to close the account.

9

Links to Third-Party Websites

The surga19 platform may contain links to third-party websites in certain contexts — for example, links to game providers or payment providers. surga19 is not responsible for the privacy practices of these third-party websites, and our Privacy Policy does not apply to them.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. The presence of links to third-party websites on the surga19 platform does not mean we endorse or vouch for the privacy practices of those sites.

If you come across any link within the surga19 platform that appears suspicious or redirects you to a website requesting your personal information without clear reason, please report it to our support team immediately via live chat.

10

Amendments to This Privacy Policy

Surga19 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or improvements to the technology we use. When we make significant changes, we will notify you via:

  • An in-platform notice upon your next login after amendments take effect.
  • Email to your registered account address if the amendment is material and significant.
  • Updating the "Last Updated" date on this page.

Your continued use of the surga19 platform after notice of any amendment will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to contact us to discuss your options, including account closure should you decide to proceed.

11

How to Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your rights regarding your personal data, we strongly encourage you to contact us directly. surga19's dedicated team handling privacy enquiries can be reached through:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the platform. Response time under 2 minutes. Ideal for urgent enquiries.
  • Email: support@surga19.wine — for official requests relating to data rights, complaints, or enquiries requiring a written response. We aim to reply within 3 business days.

When contacting us about a privacy matter, please clearly state the type of request you are making (data access, correction, deletion, etc.) so we can address it more quickly and accurately. We may require identity verification before processing certain requests to ensure the security of your account.

❓ FAQs — surga19 Privacy Policy

The most frequently asked questions from surga19 members regarding privacy and data security.

surga19 stores your registration details (name, email, phone number), the payment account details you have registered (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX), a complete record of all financial transactions (deposits and withdrawals), gameplay activity history, and technical logs such as IP addresses and login records. Yes, you may request a full review of this data — submit your request by emailing support@surga19.wine with "Data Access Request" in the subject line. We will provide a comprehensive report within 14 business days.

Absolutely not. surga19 does not sell, rent, or commercialise our members' personal data to any advertising companies, data brokers, or third parties for marketing purposes outside our platform. Your data is only shared with service providers directly involved in operating the platform — such as local Malaysian payment providers and gaming software providers — and only the minimum data necessary for those purposes. All such third parties are bound by strict confidentiality agreements with surga19.

All your payment information — whether Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or an FPX account number — is protected with 256-bit SSL encryption in transit and stored in encrypted form on our servers. surga19 does not store your full bank card details; we retain only the identifiers needed to process transactions and withdrawals to the same account. All financial transactions are handled through payment providers that comply with Bank Negara Malaysia's security standards.

Yes, you may request the deletion of your personal data by closing your surga19 account. Submit your request via live chat or by emailing support@surga19.wine. We will delete all data that is eligible for deletion in accordance with your rights. Please note, however, that financial transaction records — deposits and withdrawals — may need to be retained for a specified period to comply with anti-money laundering and financial audit requirements under Malaysian law. This data will not be used for any purpose other than legal compliance and will be deleted once the mandatory retention period has expired.

If you suspect your surga19 account has been accessed without your authorisation, contact our support team immediately via live chat to request a temporary account freeze. Our security team will review the access logs, identify any suspicious activity, and take the necessary steps to restore control of your account. surga19 uses a login detection system that flags access from new or unrecognised locations and devices — you will receive a notification whenever a login is detected from an unrecognised device. The best preventive measure is to enable two-factor authentication (2FA) in your account settings and use a strong, unique password for surga19.

💳 Secure Payment Methods at surga19

All Malaysian local payment methods — transaction data is fully protected in accordance with this Privacy Policy.

Touch 'n Go eWallet
DuitNow QR
GrabPay
Boost eWallet
ShopeePay
FPX / Maybank2u

All transactions are in Malaysian Ringgit (RM). Payment data is protected by 256-bit SSL. No hidden charges.

Privacy and Responsible Gambling Go Hand in Hand at surga19

Surga19 uses your gameplay history responsibly — not to exploit your playing habits, but to identify whether you may benefit from responsible gambling support. This data is handled with strict confidentiality and is never shared with third parties. You can set deposit limits, loss limits, and self-exclusion directly from your account settings. The surga19 platform is intended for individuals aged 21 and above only.

Terms & Conditions — Supplementary Document to This Privacy Policy

This Privacy Policy should be read together with the surga19 Terms & Conditions, which outline the rules of platform use, account conditions, deposits and withdrawals, bonus terms, and your rights as a member. Both documents together form the complete agreement between you and surga19. By registering an account, you agree to both documents.

In the event of any conflict between this Privacy Policy and the Terms & Conditions on privacy-related matters, this Privacy Policy shall prevail.

Read Full Terms & Conditions

Your Data Is Safe — Play with Confidence at Surga19

Now you know how surga19 protects your privacy. Register a free account today and claim your welcome bonus of up to RM 1,888. Enjoy 200+ games — slots, live casino, baccarat, Malaysia Super League football, EPL, e-sports and more — with the peace of mind that your data is protected at all times.

Deposit via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay or FPX. Withdrawals in 5–15 minutes. 24/7 support in Bahasa Melayu.

21+ | Responsible Gambling | Terms & Conditions Apply

Bahasa Melayu