At Surgawin, your privacy matters as much as your gameplay. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and the rights you hold as a data subject — in plain, clear English.
We handle your personal information with the same care we bring to every part of the Surgawin experience. Here are the core principles that guide how we treat your data.
All personal and financial data is encrypted in transit using TLS and at rest using industry-standard encryption. Your payment details, account credentials, and identity documents are never stored in plain text.
We collect only the personal data strictly necessary to operate your account, comply with regulatory obligations, and deliver the services you signed up for. We do not collect data for its own sake.
You have the right to access, correct, and request deletion of your personal data at any time. We respond to data subject requests promptly and transparently in accordance with applicable data protection law.
Surgawin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Any data sharing with partners is strictly limited to what is necessary for platform operations.
This Privacy Policy clearly describes every category of data we process, our legal basis for doing so, and how long we retain it. We do not conduct hidden data processing activities.
Our data practices comply with applicable data protection legislation and anti-money laundering (AML) requirements. We cooperate with lawful regulatory requests while protecting your rights at every step.
Surgawin ("we", "us", "our") operates the online casino and sports betting platform accessible at surgawin.cam. This Privacy Policy describes how Surgawin collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "the Player", "the User") who visit our website, register an account, or use any of our services.
We understand that entrusting us with your personal information is a significant act of confidence. We take that responsibility seriously. Our data practices are designed to be lawful, fair, and transparent — and to give you genuine control over your own information.
This Privacy Policy applies to all players accessing Surgawin from Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout the country. It applies to all personal data collected through our website, mobile platform, customer support channels, and any other touch point through which you interact with Surgawin.
By registering an account or continuing to use the Surgawin platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Privacy Policy was last revised on 1 January 2026. We will notify registered users of material changes via the email address on file prior to such changes taking effect.
The following terms carry specific meanings throughout this Privacy Policy:
Surgawin collects personal data through several distinct channels and for clearly defined purposes. The categories of data we collect are as follows:
When you create a Surgawin account, we collect the information you provide in the registration form, including your full legal name, date of birth, Malaysian MyKad or passport number, email address, mobile number, and residential address.
As part of mandatory anti-money laundering compliance, we collect copies of government-issued identity documents (MyKad, Driver's Licence, Passport), proof of address documents, selfie photographs, and payment method verification documents submitted during the KYC process.
We record details of every deposit and withdrawal transaction, including amounts, timestamps, payment method used (such as Touch 'n Go eWallet, GrabPay, Maybank2u, CIMB Clicks, DuitNow, or FPX), transaction reference numbers, and the outcome of each transaction.
We maintain logs of your betting and gaming activity, including games played, wagers placed, outcomes, session durations, and promotional participation. This data is used for account management, dispute resolution, and responsible gambling monitoring.
When you access Surgawin, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and access timestamps. This data helps us secure accounts and optimise platform performance.
If you contact our support team via live chat or email, we retain records of those communications, including the content of messages and associated metadata, for quality assurance and dispute resolution purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / Passport number | Account setup, KYC compliance |
| Contact Data | Email address, mobile number, residential address | Account communication, support |
| Financial Data | Transaction records, payment method details, balance history | Payment processing, AML compliance |
| Gameplay Data | Bets placed, games played, session history, bonus usage | Account management, responsible gambling |
| Technical Data | IP address, device type, browser, login timestamps | Security, fraud prevention, analytics |
| Communications Data | Live chat logs, email correspondence | Support, dispute resolution, QA |
Surgawin processes your personal data on the following legal grounds:
We use the personal data we collect for the following purposes:
If you no longer wish to receive promotional communications from Surgawin, you may unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting our support team. Opting out of marketing will not affect essential account communications.
Surgawin does not sell your personal data. We share your information only in the following limited and lawful circumstances:
We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These include payment gateway operators, KYC verification service providers, cloud hosting and infrastructure providers, fraud detection and security vendors, and customer support platform providers. All such processors are contractually required to handle your data only for the purposes we specify and to maintain appropriate security measures.
We may disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or other government authorities where we are legally required to do so, or where disclosure is necessary to prevent, detect, or investigate suspected illegal activity including fraud and money laundering.
In the event of a merger, acquisition, restructuring, or sale of all or part of Surgawin's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and your rights in relation to it.
We may share your data with third parties in additional circumstances where you have given explicit, informed consent for a specific sharing purpose.
Surgawin will never share your personal data with advertisers, data brokers, or unaffiliated third parties for their own independent marketing or commercial purposes without your explicit consent.
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following framework:
Once the applicable retention period expires and no legal basis for continued retention applies, we will securely delete or irreversibly anonymise your personal data.
Surgawin implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:
While we employ industry-leading security practices, no online platform can guarantee absolute security. You also play an important role in protecting your account by maintaining the confidentiality of your login credentials and notifying us immediately if you suspect unauthorised access.
Surgawin uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session state, and gather analytical insights. The types of cookies we use are as follows:
These cookies are essential for the platform to function. They maintain your session when you are logged in, remember your language preferences, and enable core security features. You cannot opt out of these cookies while using the platform.
We use analytics tools to understand how players navigate the platform, which features are most used, and where technical issues arise. This data is processed in aggregate and used solely to improve our services. You may opt out of analytics cookies through your browser settings or our cookie preference centre.
Functional cookies remember your preferences — such as your preferred payment method display, notification settings, and other personalisation choices — so you do not need to reconfigure them on each visit.
You may manage or disable cookies through your browser's privacy settings. Note that disabling certain cookies may affect the functionality of the Surgawin platform. Instructions for managing cookies in popular browsers are available through each browser's official help documentation.
In the course of providing our services, your personal data may be processed by our service providers in jurisdictions outside Malaysia. Where such international transfers occur, Surgawin takes steps to ensure that your data receives an equivalent level of protection to that afforded within Malaysia, including through the use of contractual data protection clauses with our overseas processors.
We do not transfer personal data to jurisdictions that do not offer adequate data protection safeguards without implementing appropriate protective measures.
You hold a set of substantive rights in relation to your personal data held by Surgawin. These rights are summarised below. To exercise any of these rights, please contact our support team using the details in Section 14.
Request a copy of all personal data we hold about you, along with details of how it is being used.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no longer a lawful basis for its retention, subject to legal obligations.
Request that we restrict processing of your data in certain circumstances while a concern or dispute is being resolved.
Request a structured, machine-readable copy of your personal data to transfer to another service provider.
Object to processing based on legitimate interests or for direct marketing purposes at any time.
We will respond to verified data subject requests within thirty (30) days of receipt. We may need to verify your identity before processing a request to protect you and other data subjects from unauthorised access to personal data.
Some rights — particularly the right to erasure — may be limited where Surgawin is required by law to retain certain data. For example, AML regulations require us to retain KYC and transaction records for a minimum of five years. In such cases, we will explain the specific legal basis preventing immediate deletion.
Surgawin's services are strictly intended for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process requires players to confirm their date of birth, and our KYC process independently verifies age through government-issued identity documents.
If we discover that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, void all transactions, and securely delete the data collected — or retain only the minimum necessary for legal compliance purposes — as promptly as practicable.
If you believe that a minor may have registered on our platform, please notify us immediately via the contact details in Section 14. We treat such reports as a priority.
Surgawin may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The version number and effective date at the top of this page will always reflect the current revision.
Where changes are material — meaning they substantively affect your rights or how your data is used — we will notify registered players by email to the address on file at least fourteen (14) days before the changes take effect. Non-material updates may be made without advance notice.
Your continued use of the Surgawin platform following the effective date of any updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with the updated policy, you should cease use of the platform and may request account closure.
If you wish to exercise any of your data subject rights, have a question about how Surgawin processes your personal data, wish to raise a privacy concern, or want to make a complaint about our data practices, please contact us through the following channels:
We aim to acknowledge all privacy-related requests within two (2) business days and to resolve them within thirty (30) calendar days, in line with data protection best practices.
For account and gameplay enquiries unrelated to privacy, please visit our FAQ page for quick answers, or contact our support team directly via live chat.
For a full understanding of your obligations as a Surgawin player, please also read our Terms & Conditions.
Your privacy is protected every step of the way. Join thousands of Malaysian players enjoying a safe, fair, and exciting online gaming experience.