Privacy Policy surya888 —
Malaysian Player Data Protection

Welcome to the surya888 Privacy Policy. This document explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use our platform at surya888.pro or through the surya888 mobile app.

We understand that privacy is deeply personal. At surya888, player trust is not just a slogan — it is at the core of how we operate every day. We are therefore committed to managing your data with full responsibility, transparency, and respect.

By registering and using surya888's services, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact us for assistance with closing your account.

Surya888 collects several categories of information to ensure you enjoy a smooth, secure, and responsible gaming experience. The information we collect falls into three main categories:

Information you provide directly:

• Full name as stated in official identity documents.
• Date of birth for age eligibility verification.
• Active email address used for account communications.
• A valid Malaysian mobile phone number.
• Current residential address including postcode.
• Payment method information including bank account or digital wallet details.
• KYC documents such as copies of your ID card, passport, or utility bills.

Information collected automatically:

• IP address and geographic location data at the country/state level.
• Device type, operating system, and browser version used.
• Activity log data including pages visited and action timestamps.
• Gaming session records, including games played, bets placed, and outcomes.
• Cookie data and similar tracking technologies.

Information from third parties:

• Identity verification data from accredited KYC service providers.
• Payment verification information from financial transaction processors.
• Anti-money laundering (AML) screening data from financial monitoring systems.

Every piece of information we collect is used for clear and legitimate purposes. surya888 does not use your data beyond the scope stated below:

• Account management: Creating, maintaining, and protecting your player account, including handling secure registration and login.
• Financial processing: Verifying and processing deposits and withdrawals, and maintaining accurate transaction records.
• Eligibility verification: Ensuring all players meet the minimum age requirement and are not on the self-exclusion list.
• Legal compliance: Fulfilling obligations under data protection laws, anti-money laundering regulations, and regulatory authority directives.
• Platform security: Detecting and preventing fraud, unauthorized access, and suspicious activity.
• Service communications: Sending important notifications related to your account, transactions, and policy changes.
• Product improvement: Analyzing usage patterns to improve platform performance and user experience.
• Marketing (with consent): Sending promotions and exclusive offers only to players who have consented to receive marketing communications.

Surya888 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, there are limited situations where we need to share your information with specific parties:

• Service providers: Third parties that help us operate the platform, such as payment processors, KYC service providers, and gaming software suppliers. They only receive data necessary for their specific tasks and are bound by strict confidentiality agreements.
• Regulatory authority: Where required by law or court order, we will disclose information to the relevant authorities.
• Fraud investigators: In confirmed cases of financial crime or serious identity fraud, we may cooperate with law enforcement agencies.
• Business transfers: In the event of a company merger or acquisition, player data may be transferred to the new entity, and you will be notified in advance.

Surya888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Key security measures we have in place include:

• Encryption of data in transit using the latest TLS 1.3 protocol.
• Encryption of data at rest using AES-256.
• Role-based access control (RBAC) to ensure only authorized personnel can access sensitive data.
• Mandatory two-factor authentication (2FA) for all internal system access.
• Regular security audits conducted by independent cybersecurity firms.
• Real-time threat monitoring and an incident response system available 24/7.
• Disaster recovery plan and data backups tested on a regular basis.

Your data is stored in data centers located in the Asia Pacific region, meeting international physical and cybersecurity standards. Retention periods are as specified in the Section 2 table above.

Surya888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display format, and other personal settings.
• Analytics Cookies: Helping us understand how players use the platform for improvement purposes. This data is collected in aggregate and does not identify individuals.
• Performance Cookies: Optimizing platform speed and responsiveness based on real usage patterns.

You can manage or disable non-essential cookies through your browser settings or via the cookie preference panel available on our platform. Please note that disabling certain cookies may affect some platform features.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding the personal data held by surya888:

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will respond to your request within 30 days working days from the date of receipt.

The surya888 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that a minor has successfully registered an account, we will immediately close the account, delete all associated data, and refund any deposits made.

The surya888 platform may contain links to websites of our gaming software providers or service partners. Once you follow those links and leave our platform, the surya888 Privacy Policy no longer applies.

We encourage you to read the privacy policy of every website you visit. surya888 is not responsible for the privacy practices or content of third-party websites.

Surya888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. The latest update date will always be displayed at the top of this document.

If a material change occurs — meaning a change that significantly affects how we use your data — we will notify you via an in-platform notification or your registered email at least 14 days before the changes take effect.

Continued use of the surya888 platform after the effective date of any changes means you accept the updated version of the Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the platform.
• Frequently Asked Questions: Visit page FAQ us for a quick response.

Our Data Protection Officer will address your inquiry within 3 working days and resolve more complex cases within 30 working days.