surgaplay Privacy Policy

This page describes what we collect when you use surgaplay and how we keep that data protected. We at surgaplay take privacy seriously — your personal information is encrypted, access-controlled, and used only for account verification, fraud prevention, and payment processing. Our platform operates where local law permits, and we comply with data protection regulations in all jurisdictions where we operate.

When you register on surgaplay, deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts (mobile banking, local payment, online payment, e-wallet), or withdraw your balance, we collect certain data. We use this data to verify your identity, process your transactions, and protect both you and our platform from fraud. We do not sell your data to third parties, and we do not use it for marketing purposes without your explicit consent.

Our surgaplay data retention policy keeps your information only as long as necessary — usually while your account is active plus a standard period afterward. Once deleted, your data cannot be recovered. If you have questions about our privacy practices, contact our support team through the in-app messaging system.

What We Collect on surgaplay

Account Registration Data

We collect your full name, email address, phone number, and residential address when you register on surgaplay. We use this information for account verification and to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations. We encrypt this data and store it on secure servers. Access is restricted to surgaplay staff who need it to verify your identity or resolve account issues.

We also collect your date of birth to confirm you are at least 18 years old. We do not use this for age-restriction marketing — only for account eligibility verification.

Payment and Transaction Data

When you deposit or withdraw on surgaplay via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts, we collect transaction data — the amount, date, time, and payment method. We store this data to process your request and to create an audit trail for dispute resolution. We do not store your full payment card or account number — only a tokenized reference that identifies your payment method.

Our payment processors (who handle mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank VAs) have their own privacy policies. We do not control how they use your data beyond our agreement with them. You should review their policies separately.

Device and Activity Data

When you use surgaplay on Android or iOS, we collect minimal device data — your device type, operating system version, and IP address. We use this to detect fraud, prevent unauthorized access, and identify security threats. We also log your login times and locations so you can audit your own account activity anytime in your Account Settings

We collect gameplay data — which games you play, how long you play, and your betting patterns. We use this data to improve our platform, identify server issues, and detect problem usage patterns. We do not use this data for age-restriction marketing or targeted advertising without your consent.

KYC and Identity Verification Data

Before your first withdrawal on surgaplay, we require identity verification. We ask you to upload a photo of your ID card (KTP, passport, or driver's license). We verify this document against government records or through a third-party verification service. The document is encrypted and stored separately from your account — access is restricted to our compliance and fraud-prevention teams.

We may request additional documentation during high-volume periods or if we detect unusual activity. This may include proof of address (utility bill, bank statement) or employment verification. These documents are handled with the same security protocols as your ID — encrypted, access-restricted, and deleted after verification is complete.

We at surgaplay encrypt all data at rest and in transit. Your privacy is protected by industry-standard security practices.

Our surgaplay Data Protection and Your Rights

How We Use Your Data on surgaplay

We use your data for the following purposes: account verification and identity confirmation; payment processing and transaction settlement; fraud detection and prevention; compliance with AML and KYC regulations; dispute resolution and customer support; and platform improvement through aggregated analytics. We do not use your data for marketing purposes without your explicit opt-in consent.

Our surgaplay servers may sit outside your jurisdiction — we use cloud providers in multiple regions to ensure platform availability. These providers are contractually bound to maintain the same security and privacy standards we do. Your data is encrypted before it leaves our systems, so the provider cannot read it.

Third-Party Access and Data Sharing

We do not sell your personal data to third parties. We may share your data with the following parties only: payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank providers) to process your deposits and withdrawals; identity verification services to confirm your KYC documentation; law enforcement, if required by law or court order; and our own staff and contractors, only where necessary to provide customer support or fraud prevention.

All third parties we share data with are contractually bound to maintain your privacy. If they breach that contract, we take action to enforce it. You can request a list of third parties we share your data with by contacting our support team.

Your Rights on surgaplay

You have the right to request a copy of your personal data held on surgaplay. Go to your Account Settings and select "Download My Data" — we provide it in a standard format. You also have the right to correct any inaccurate data — if your address or phone number is wrong, update it in your account settings immediately. Corrections are logged so we can track when and what changed.

You have the right to request deletion of your data, subject to legal obligations. If you request account deletion on surgaplay, we delete your personal data after a standard retention period (usually 12 months), unless we are required by law to keep it longer. Some data may remain in encrypted backups for a limited time — we will notify you of the expected timeline.

Cookies and Tracking on surgaplay

Our surgaplay platform uses cookies to keep you logged in, remember your preferences, and detect fraud. These are technical cookies necessary for the service to function. We do not use cookies for behavioral tracking or targeted advertising. You can disable cookies in your browser settings, but this may prevent you from logging into your surgaplay account.

We use basic analytics (page views, device type) to understand how surgaplay is used and identify server issues. This analytics data is aggregated and does not identify you personally.

Data Breach Notification

If we discover a data breach on surgaplay, we notify affected users by email or SMS within a standard period. We also notify relevant regulators as required by law. We conduct a full investigation, implement remediation, and provide details of what was compromised and what steps we took to prevent future breaches.

Jurisdiction and Applicable Law

Our surgaplay privacy policy complies with data protection regulations in all jurisdictions where we operate, including Indonesia. We do not offer our services in jurisdictions where online wagering is prohibited. If you access surgaplay from a prohibited jurisdiction, we may suspend or close your account and delete your data in accordance with our standard retention policy.

1. We encrypt all data at rest and in transit

   Your personal information is protected by industry-standard encryption protocols.

2. We require KYC verification before your first withdrawal

   This helps us comply with anti-fraud regulations and protects your account.

3. You can download, correct, or delete your data anytime

   Visit your Account Settings to manage your personal information on surgaplay.

4. We notify you of any data breach

   We inform you by email or SMS and explain remediation steps taken.

For questions about our surgaplay privacy practices, contact our support team through the in-app messaging system. We respond during standard business hours. You can also review our Terms & Conditions and Legal Notice for additional information about how we operate.

This privacy policy was last updated and applies to all current surgaplay users. We may update it to reflect changes in our practices or in applicable law. We notify users of material changes via email or in-app notification. Continued use of surgaplay after an update means you accept the new policy.