Privacy Policy surya88 — Our Commitment to Protecting Your Personal Data

Information We Collect

Surya88 collects your personal information for the purposes of account management, transaction processing and legal compliance. The information we collect includes but is not limited to:

• Personal Identification Information: Full name, date of birth, identification card number (MyKad/Passport), gender, full residential address and mobile phone number.
• Contact Information: Primary email address, backup phone number and emergency contact information if required.
• Financial Information: Bank account details, credit/debit card numbers (stored in tokenized and encrypted format), deposit and withdrawal transaction history.
• Technical Information: IP address, device type, operating system, web browser, approximate geolocation data and network connection metadata.
• Behavioral Data: Game history, betting preferences, play duration, platform usage patterns and interactions with platform features.
• KYC Documents: Copy of identity card, passport, utility bill or bank statement as proof of address for identity verification process.

All data collection is done directly from you during registration or while using the platform, as well as automatically through cookie and tracking technologies we use to enhance user experience.

Purpose of Your Personal Data Use

Every piece of data we collect has a clear and legitimate purpose. surya88 uses your information for the following purposes:

We will not use your data for any purpose other than those stated above without notifying you in advance and, if necessary, obtaining your renewed consent.

Data Sharing and Disclosure

Surya88 does not sell or rent your personal data to any third parties. However, in certain situations, we may need to share your data with the following parties:

• Payment Service Providers: FPX, Maybank, CIMB, Touch 'n Go eWallet, GrabPay and Boost providers receive the transaction information required to process your deposits and withdrawals. All these providers are subject to strict confidentiality agreements.
• Game Providers: Third-party game software providers may receive anonymized game data required for game continuity and result verification.
• Law Enforcement Authorities: If required by Malaysian law or court order, we will disclose necessary information to the relevant authorities.
• KYC Verification Services: Third-party identity verification providers help us process KYC documents securely and efficiently.
• Technical Infrastructure Providers: Cloud computing and CDN providers supporting our platform operations have limited access to data required for technical functions only.

Every third party we work with is subject to a legally binding data protection agreement. They are only permitted to use your data for specified purposes and may not use it for other purposes.

Cookies and Tracking Technologies

The surya88 Platform uses cookies and similar tracking technologies to enhance your user experience and enable certain functions to operate properly. Here are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled without affecting platform usage.
• Performance Cookies: Collects data on how you use the platform to help us identify technical issues and improve speed and responsiveness.
• Functional Cookies: Stores your preferences such as language choice, display settings and recent game history to provide a more personalized experience.
• Analytics Cookies: Helps us understand overall platform usage patterns to make better improvements based on real data.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or user experience of the surya88 platform.

Data Security and Protection Measures

We invest continuously in security infrastructure to ensure your personal data is protected at the highest level. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS 1.3 protocol.
• Two-Factor Authentication (2FA): An additional security layer requiring OTP code verification for account access and financial transactions.
• 24/7 Monitoring: Our cybersecurity team monitors platform activity around the clock to detect and address any threats before they impact users.
• Internal Access Controls: Our staff are only granted access to data required to perform their duties based on the principle of "least privilege".
• Periodic Security Audits: Independent security audits are conducted regularly by third-party audit firms to ensure our systems meet current security standards.
• Secure Data Backup: Data is automatically backed up to separate secure locations to ensure service continuity and data loss prevention.

While we take all reasonable steps, no security system is completely perfect. In the unlikely event of a data breach affecting your information, we are committed to notifying you within 72 hours after we become aware of it, in line with industry best practices.

Your Rights as a User

Under the Malaysia Personal Data Protection Act 2010 and our privacy policy, you have the following rights regarding the personal data we process:

• Right to Access: You have the right to request a copy of all personal data we hold related to your account and platform usage.
• Right to Rectification: If you find that the data we hold is inaccurate or outdated, you may request correction at any time through your profile settings.
• Right to Erasure: You may request deletion of your personal data when it is no longer needed, subject to legal retention obligations that may apply.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict how we process your data while disputes are being resolved.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time without providing a reason.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to other services.

To exercise any of the above rights, please contact our data protection team via email at [email protected] or through the platform's live chat. We will process your request within 14 working days from the date of receipt.

Data Storage and Deletion

Surya88 adheres to responsible data retention principles. We only keep your personal data for the period necessary for the stated purposes or as required by law:

• Active Account Data: Retained for the duration your account is active on the surya88 platform.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia financial and tax law requirements.
• KYC Data: Retained for a minimum of 5 years after account closure or last transaction date, whichever is later.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Marketing Data: Deleted immediately when you withdraw consent for marketing communications.

After the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered by any party. All deletion processes are documented for internal audit purposes.

Children's Privacy

The surya88 Platform is exclusively for adult users aged 18 and above. We do not intentionally collect or process personal data of individuals under 18. If you believe that a minor has provided their personal data to us, please contact us immediately.

We will take immediate action to verify this information, close the relevant account and delete all associated data in the shortest time possible. Child protection is a responsibility we take very seriously as part of our commitment to responsible gaming.

Privacy Policy Amendments

Surya88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. How we notify you of changes:

• Clear notice will be displayed on the platform homepage for at least 30 days before changes take effect.
• Registered users will receive notifications via email and in-app notifications.
• The "Last Updated" date at the top of this document will be updated each time changes are made.
• For significant changes, we may request your consent again before you can continue using the platform.

We encourage you to review this Privacy Policy regularly. Continued use of the surya88 platform after any changes take effect is considered acceptance of the updated terms. If you do not agree with such changes, you have the right to close your account at any time.

Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, you can contact us through the following channels:

• Email: [email protected] — for written inquiries requiring official records.
• Live Chat: Available 24/7 on the platform for immediate response within minutes.
• WhatsApp: Our support team is ready to assist via WhatsApp every day, anytime.

We are committed to responding to all privacy-related inquiries within 14 working days. For more complex complaints related to data processing, our response period is within 30 working days from the date of receipt of your formal complaint. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.