Your personal data is more than just information to us — it is a trust you place in us. This Privacy Policy transparently explains how surya88 collects, uses, stores, and protects the personal information of all Malaysian players using our platform.
Our privacy policy is built on six core principles that safeguard the security and confidentiality of your personal data at all times.
Surya88 only collects data that is strictly necessary to provide you with our services. We do not collect unnecessary or excessive information without a clear and legitimate purpose.
Your data is used solely for the purposes stated in this policy. Surya88 will not use your information for any other purpose without first obtaining your explicit consent.
256-bit SSL encryption, multi-layered firewalls, and intrusion detection systems protect all data stored on Surya88 servers. Independent security audits are conducted on a regular basis.
Surya88 has never and will never sell, rent, or trade players' personal data to any third party for commercial or marketing purposes without your consent.
You have the right to access, correct, transfer, or request deletion of your personal data at any time. Your request will be processed within 30 business days.
Surya88 operates in full compliance with the Malaysia Personal Data Protection Act 2010 (PDPA). Our Data Protection Officer ensures that all data processing practices meet legal requirements.
This Privacy Policy explains how Surya88 handles your personal data as an online sports betting and casino platform operating for Malaysian players. By using Surya88's services, you agree to the terms of this Privacy Policy. Please read it carefully before registering.
Surya88 ("we", "the Company", "the Platform") is the data controller responsible for processing the personal data of players using our betting platform. This Privacy Policy is prepared in accordance with the provisions of the Malaysia Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.
This document applies to all individuals who register an account with Surya88, use any of our services including Sports Betting (football, badminton, cricket), Live Casino, slots, poker, e-sports, and virtual sports, as well as anyone who visits our website even without registering.
The current version of this Privacy Policy takes effect from 1 January 2026. Any updates will be communicated to you via your registered email or in-platform notifications on Surya88.
Surya88 collects your personal data through several means — directly when you interact with us, and automatically when you use our platform. Below are the categories of data we collect:
| Data Category | Sample Information | Time Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, IC number | During registration & KYC |
| Contact Data | Email address, phone number, residential address | During registration |
| Financial Data | Bank account details, e-wallets (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) | During deposit/withdrawal requests |
| Verification Data | MyKad / passport copy, verification selfie | During KYC verification |
| Communication Data | Support chat records, complaint emails, feedback | Throughout platform usage |
Surya88 does not collect sensitive data such as medical information, criminal records, or political affiliations. Biometric data such as fingerprints or facial recognition is not collected through our platform.
Surya88 uses collected personal data solely for legitimate, stated purposes. We will not use your data for any other purpose without obtaining your consent:
Surya88 may send notifications about promotions, new bonuses, and exclusive offers only if you have agreed to receive them during registration or in your account settings. You may withdraw this consent at any time through your account settings page.
Surya88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, we do share data in the following limited circumstances:
All third parties with whom we share data are bound by confidentiality agreements and data protection obligations equivalent to our own standards. They are not permitted to use your data for any purpose beyond the scope of services they provide to Surya88.
Surya88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:
If Surya88 identifies a data breach that may affect your rights and freedoms, we will notify you and the relevant authorities within 72 hours after we become aware of the breach, in line with industry best practices.
Surya88 retains your personal data only for as long as necessary for the stated purposes or as required by law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | For as long as the account remains active | Ongoing service provision |
| Financial transaction records | 7 years after transaction | Malaysian financial legal requirements |
| KYC Documents | 5 years after account closure | Anti-money laundering (AML) requirements |
| Support communication logs | 3 years | Dispute resolution |
| Technical & security logs | 24 months | Fraud detection & security |
| Cookie and session data | 30 days – 2 years (depending on type) | User experience & analytics |
Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you.
Surya88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality of the Surya88 platform. Cookies required for security and core operations cannot be disabled.
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Surya88:
Request a copy of all personal data we hold about you
Correct inaccurate or incomplete data
Request data deletion when it is no longer needed
Restrict how we process your data in certain circumstances
Receive your data in a structured format for transfer
Object to data processing for direct marketing purposes
To exercise any of the rights above, contact the Surya88 Data Protection Officer by email at privacy@surya88.biz. Your request will be responded to within 30 business days. In certain cases, we may require proof of identity before processing your request.
In operating a global platform, some player data may need to be transferred or processed outside Malaysia, particularly in the context of cloud infrastructure and certain third-party services.
Surya88 ensures that any international data transfers are carried out with adequate safeguards in place, including:
Surya88's primary servers are located in the Asia region, with backup infrastructure at locations compliant with international data protection standards. Malaysian players' data remains subject to Malaysia's PDPA protections at all times, regardless of where it is physically processed.
Surya88 strictly prohibits the use of our platform by individuals under the age of 18. Our platform is not designed for children, and we do not knowingly collect personal data from individuals known to be under 18.
If Surya88 discovers that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate steps to:
If you suspect that a minor is using the Surya88 platform, please contact our team immediately at support@surya88.biz. We take our responsibility to protect children seriously.
Surya88 reserves the right to update this Privacy Policy from time to time to reflect changes in our service practices, legal requirements, or the technologies we use. The procedure for changes:
We encourage you to review this Privacy Policy periodically, especially after receiving update notifications.
For any enquiries, concerns, or requests relating to your privacy and personal data, you may contact Surya88 through the following channels:
We are committed to responding to all privacy-related enquiries within 30 working days. For urgent matters such as suspected account hacking, please contact us via live chat for an immediate response.
At Surya88, privacy protection is more than a legal obligation — it is part of our company culture. Every Surya88 employee receives data protection training and is subject to strict confidentiality obligations. Your data is safe with us.
Join over 500,000 Malaysian players who trust Surya88 for a safe, fair betting experience that fully respects your privacy.
For players aged 18 and above only. | Terms & Conditions | Responsible Gaming