surga Casino & Sportsbook Data Care

This page describes what we collect when you use surga and how we keep that data protected. When you register on our surga platform, open an account, place positions on Liga 1 or Piala AFF matches, or play our live-dealer tables, we collect information to verify your identity, process your payments (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), and comply with applicable law.

We take data protection seriously. Our surga servers use encryption, and we restrict access to your personal information to staff and third-party vendors who need it to support your account and our service. This privacy policy explains what data we collect, how we use it, who we share it with, and what rights you have.

Our surga platform operates in multiple jurisdictions, and we comply with data-protection laws in each region where we hold a license. If you have questions about how surga handles your data, contact us at the addresses in this policy.

What Data surga Collects

Account Registration and Identity Information

When you create a surga account, we collect your legal name, email address, phone number, and date of birth. We ask for this information to create your account and contact you about your surga account if needed. We do not share your email or phone with marketers; we use it only to send you account notifications and security updates.

To verify your identity and comply with anti-money-laundering (AML) regulations, we ask for a government-issued ID (such as an Indonesian KTP, passport, or equivalent). We collect your ID number, the issue and expiration dates, and a photo of the document. This information is used only for KYC (know-your-customer) verification and is not shared externally except as required by law or our licensing authority.

We also collect your address (street, city, postal code) during registration. This helps us verify your location and detect fraud. Our surga team uses address information to ensure you are located in a jurisdiction where we offer service.

surga Data Security: We keep your ID and address information encrypted on our servers. Only our KYC team and legal compliance staff can access it, and only to verify your account or respond to regulatory requests.

Payment and Financial Data

When you deposit funds into your surga account via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, we collect transaction details: the amount, the date, the payment method, and a transaction ID. We use this information to process your deposit, reconcile your account balance, and detect fraud.

We do not store your full payment card or bank account number. Our surga payment processors (third-party vendors) handle sensitive payment data and provide us with a token or transaction reference. This means we can process your withdrawals and refunds without storing your actual card or account details.

When you withdraw funds from surga, we collect the same transaction data (amount, date, method, ID). Your withdrawal is returned to your original payment method (e.g., if you deposited via mobile banking, we send your withdrawal to your local payment account). We keep withdrawal records for compliance and dispute resolution.

Gameplay and Betting Data

When you play surga games (live blackjack, roulette, baccarat, Dragon Tiger, Sic Bo, slots like Aviator or Sweet Bonanza, or sportsbook markets like Liga 1), we record:

  • The game or market you accessed
  • Your bets and positions
  • Outcomes and payouts
  • The date and time of each session
  • Your balance before and after each round

We collect this data to calculate your account balance, settle your positions, provide your play history, and detect cheating or irregular patterns. Your surga play history is available in your account settings so you can review your activity anytime.

Device and Connection Data

We collect technical information about how you access surga: your IP address, device type (mobile, desktop, tablet), operating system, browser type, and approximate location (based on IP). This information helps us detect fraud, prevent account takeovers, and ensure our surga platform is running smoothly across different devices.

We also log timestamps of your login and logout, so we can help you recover your account if it is compromised and can investigate suspicious activity.

Cookies and Tracking

Our surga website and platform use cookies to remember your login session, language preference, and game settings. Cookies are small files stored on your device that help us provide a faster, more personalized experience. You can disable cookies in your browser settings, but this may limit surga functionality.

We do not use third-party tracking cookies to follow you across other websites. We use cookies only on surga to improve your experience and security.

How surga Uses Your Data

Providing surga Service

We use your data to operate surga. This includes verifying your identity, processing your deposits and withdrawals, calculating your account balance, settling your game outcomes, and sending you account statements and receipts. Without this data, we cannot provide the surga service.

Compliance and Legal Obligations

We collect and retain your data to comply with anti-money-laundering (AML) and know-your-customer (KYC) regulations in our operating jurisdictions. Our surga licensing authorities may request access to your account data as part of regulatory audits or investigations. We cooperate with law enforcement and government agencies when required by law, and we may share your data if we receive a valid court order or regulatory request.

We also use your data to prevent fraud, money laundering, and underage access. Our surga team monitors for suspicious patterns—such as unusually large deposits or rapid deposits followed by large withdrawals—to identify potential illegal activity.

Communication and Support

We use your email and phone number to send you account notifications (deposits received, withdrawals processed, security alerts). We also contact you via email or phone if we need additional information to verify your identity or resolve a dispute. If you have a question about your surga account, our support team may review your data to provide assistance.

Third-Party Service Providers

Our surga platform relies on third-party vendors to deliver service:

  • Payment processors: We share deposit and withdrawal information with payment providers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet partners) to process your transactions.
  • Identity verification vendors: We may share your name, ID number, and address with third-party KYC vendors to verify your identity and detect fraud.
  • Cloud hosting providers: Our surga servers may be hosted on cloud infrastructure providers who store your data but do not use it for their own purposes.
  • Live-dealer studios: When you join a surga live-dealer table, the dealer and studio staff can see your username and bet information in real time as you play.

All third-party vendors sign confidentiality agreements and are required to protect your data according to applicable data-protection laws. We do not sell your data to marketers or advertisers.

Data Retention and Deletion

We keep your surga account data for as long as your account is active. If you close your surga account, we retain your data for a legal holding period (typically seven years) to comply with AML and tax regulations. After the holding period expires, we delete or anonymize your data. You cannot request deletion of data that is subject to a legal retention requirement.

You can request access to your personal data at any time by contacting our support team. You can also request corrections to your information (e.g., if your address has changed). We will process your request within 30 days where applicable.

Your Rights on surga

You have the right to access your surga data, request corrections, and ask about how we use your information. If you live in a jurisdiction with strong data-protection laws (such as GDPR), you may have additional rights to request deletion or data portability. Contact our support team to exercise these rights.

Data Security and Encryption

Our surga platform uses TLS 1.2+ encryption for all data in transit between your device and our servers. This means your password, ID information, and payment data are encrypted as they travel over the internet.

We store your data on encrypted servers with restricted access. Only surga staff and authorized third-party vendors can access your information. We conduct regular security audits and penetration testing to identify and fix vulnerabilities. If we discover a security breach affecting your data, we will notify you as soon as possible and comply with applicable notification laws.

International Data Transfers

Our surga servers may be located outside your home country. This means your personal data may be transferred to, stored in, and processed in jurisdictions outside your own. By using surga, you consent to this transfer. We take steps to ensure that your data receives the same level of protection in other jurisdictions as it would in your home country.

Contact and Updates to This Policy

If you have questions about how surga collects or uses your data, contact our support team via in-app chat or email. We respond in English and Indonesian. If you disagree with how we handle your data, you may also file a complaint with your local data-protection authority.

We update this privacy policy from time to time to reflect changes in our practice or applicable law. We will notify you of material changes by email or by posting a notice on the surga platform. Your continued use of surga after a policy update indicates your acceptance of the new terms.

  1. Access Your Data on surga

    Log into your surga account and view your play history, account statement, and stored information in your profile settings.

  2. Request Corrections

    Contact surga support if you need to update your name, address, phone, or other account details. We process corrections within 30 days.

  3. Report a Security Issue

    If you believe your surga account has been compromised, change your password immediately and contact our support team via email with details.

Legal and Jurisdiction Information

Expand legal details

Service availability

We at surga offer our platform only in jurisdictions where online gaming and sportsbook services are permitted by applicable law. We do not knowingly provide service in regions where such services are prohibited or restricted. Regulatory frameworks vary widely across the world, and the legal status of online gaming, betting, and casino-style play may differ based on your location, residency status, and citizenship.

When you attempt to access surga, our system performs location checks based on IP address and other identifiers to determine whether service is available in your jurisdiction. If we detect access from a region where our service is not permitted, we may block your access. We do not provide surga services where law forbids it, but we rely on users to comply with their own local regulations. If you are unsure about the legal status of surga in your jurisdiction, consult local legal resources or your government's guidance on online gaming.

Service availability on surga is subject to ongoing changes in law and regulation. We monitor regulatory developments and update our service-availability list accordingly. If the legal status of online gaming changes in your jurisdiction, surga may restrict or terminate service in that region without notice. Users affected by such changes will be notified and given an opportunity to withdraw their remaining account balance.

Account eligibility

To open and use a surga account, you must meet the eligibility requirements under the law of your jurisdiction. In most jurisdictions where surga operates, players are required to be of legal age to gamble or enter into gaming contracts. We do not specify a universal age requirement because age of majority varies by region; instead, we require that you comply with your local age-of-majority or age-of-gambling law.

During surga account registration, you provide your legal name, date of birth, and government-issued identification. Our system verifies this information against our compliance database and applicable local requirements. If we determine that you do not meet the age or eligibility requirements of your jurisdiction, we will not activate your account. If we later discover that you were underage or ineligible when you registered, we will close your account immediately, suspend your balance, and take steps to return funds in accordance with our terms and applicable law.

Beyond age, surga eligibility also depends on whether you have been subject to legal restrictions, prior account closures, or sanctions. Users who have been banned from surga or other gaming platforms are not eligible to re-register. Using multiple accounts to circumvent a ban or closure is a violation of our terms and may result in permanent exclusion and forfeiture of funds. We monitor for multiple accounts and take action against users who attempt to evade our restrictions.

Local-law responsibility

surga's responsibility is to comply with the laws of the jurisdictions where we hold licenses and operate. However, each user is individually responsible for ensuring that their access and use of surga comply with the laws and regulations of their own jurisdiction. Laws change, and you must stay informed of current legal status in your location. Some regions prohibit all online gaming; others regulate it strictly; still others allow it with minimal restrictions.

surga provides service on an "as-is" basis to users in permitted jurisdictions. We do not guarantee that use of surga is legal, lawful, or risk-free in your specific location. If your jurisdiction prohibits, restricts, or heavily taxes online gaming, you are responsible for understanding those rules and complying with them. surga assumes no liability if you use our platform in violation of local law, and we cannot reimburse losses incurred in a region where our service is subsequently deemed illegal or restricted.

By creating and using a surga account, you confirm that you have verified the legality of online gaming in your jurisdiction and that you accept full responsibility for your compliance with local law. If you become aware that your jurisdiction does not permit surga access, you should discontinue use immediately and contact our support team to close your account and request withdrawal of any remaining balance.

Data and privacy scope

When you register on surga, we collect personal information including your legal name, email address, phone number, date of birth, and government-issued identification number (such as an Indonesian KTP or passport). This data is collected for account verification, identity confirmation (KYC compliance), fraud prevention, and anti-money-laundering (AML) purposes as required by applicable law and our licensing conditions.

We also collect gameplay data including your wagers, outcomes, IP address, device information, and account activity logs. This data is used to monitor for suspicious patterns, prevent cheating, detect fraud, and maintain the security of our surga tables and other games. We employ industry-standard encryption and security protocols to protect your data in transit and at rest.

Your personal data is not shared with third parties except as required by law, as necessary to complete your requested transactions (such as payment processing), or to comply with regulatory investigations or legal process. Payment processors, identity-verification vendors, and our licensed operators may access your data as part of their service to surga, but they are contractually bound to protect your privacy. For a complete explanation of our data handling practices, refer to the sections above in this privacy policy. You have the right to request access to, correction of, or deletion of your personal data, subject to legal and regulatory retention requirements. To exercise these rights, contact our support team in writing.

Contact for legal inquiries

If you have legal questions about surga, our licensing, regulatory status, your data rights, or your jurisdiction's laws, you may contact our legal and compliance team via the support email address or channels listed in our legal noticeWe aim to respond to legal inquiries within five to seven business days. For urgent compliance or regulatory matters, indicate the priority in your message, and our team will assess whether expedited handling is appropriate.

We cannot provide legal advice tailored to your specific jurisdiction or situation. If you need guidance on whether surga is legal in your location, how it may interact with your local tax or regulatory obligations, or your rights under local data-protection law, we recommend consulting a lawyer licensed in your jurisdiction. Our support team can only confirm whether surga offers service in your region based on our current service-availability database.

If you wish to file a data-privacy complaint, report suspected violations of law or surga's terms, or request investigation of a transaction or game outcome, you may submit a formal report through our in-app Help menu or via email to our compliance team. All reports are reviewed confidentially within two business days. Depending on the nature and severity of the report, we may suspend accounts, reverse transactions, refer the matter to law enforcement, or cooperate with regulatory authorities as required by law. surga is committed to maintaining fair play, protecting player data, and complying with all applicable laws in the jurisdictions where we operate.

↑