Official Documents

Privacy Policy surgawin – Protecting Our Members' Data

At SurgaWin, your privacy is not merely a legal obligation — it is our commitment. This page transparently explains how we manage your personal data from the moment you register through every activity on the platform.

Effective date: January 1, 2026

This Privacy Policy applies to all services operated by surgawin, including our website, mobile app, and all official communication channels. By using surgawin's services, you agree to the collection and use of data as described in this document.

1 Introduction

Surgawin is fully committed to safeguarding the privacy and personal data security of every member on our platform. We understand that your trust is not something to be taken lightly — especially when it concerns personal and financial information.

This Privacy Policy is written in language we've made as clear as possible, so you truly understand what happens to your data — not just dense legal text that's hard to follow. We believe transparency is the best way to build lasting trust.

This document explains what types of data we collect, why we need it, how we store and protect it, when we may share it, and what your rights are as the data owner. If anything is unclear, our support team is available to answer your questions at any time.

Important note: This Privacy Policy is an integral part of Terms and Conditions surgawin. Reading both will give you a complete picture of your rights and responsibilities while using our platform.

2 Personal Data We Collect

We only collect data that is strictly necessary to provide you with a safe, legal, and high-quality service. Below are the categories of data we collect and their purposes:

Data Category Example Primary Purpose
Personal Identity Full name, date of birth, national ID number KYC verification, fraud prevention
Contact Email address, phone number Account communication, security notifications
Finance Bank account number, digital wallet Deposit and withdrawal process
Platform Activity Betting history, games played Service improvement, anomaly detection
Technical & Device IP address, browser type, operating system Account security, performance optimization
Verification Documents National ID photo, verification selfie Regulatory-required KYC process
Our commitment: We never collect data that is irrelevant to the services we provide. You will never be asked to provide information unrelated to the operation of the SurgaWin platform.

3 How We Collect Data

Your data is collected through several channels, all of which are transparent and conducted with your knowledge:

  • Account registration — When you complete the registration form, basic information such as your name, email, and phone number is immediately stored in our system with encryption.
  • KYC Process — When you upload identity documents for verification, the data is processed by our KYC team and stored in accordance with applicable security standards.
  • Financial transactions — Every deposit and withdrawal you make records the transaction data necessary for audit, security, and regulatory compliance purposes.
  • Gaming activity — Your interactions with games on the platform are automatically recorded for service analytics and suspicious behavior detection purposes.
  • Cookies & similar technologies — When you access our website or app, device and session technical information is automatically collected.
  • Support communications — Conversations with our support team (including live chat and email) may be stored for service quality improvement purposes.

4 How We Use Your Data

Every piece of data we collect has a clear and limited purpose. We do not use your data for purposes unrelated to surgawin's services. The full purposes of data use are as follows:

  • Account operations — Allow you to log in to your account, verify your identity, process deposits and withdrawals, and manage your account preferences.
  • Security and fraud prevention — Detect unusual activity, verify account ownership, and protect your funds from unauthorized access.
  • Legal obligation compliance — Comply with anti-money laundering (AML) regulations, KYC requirements, and report to relevant authorities when required.
  • Service improvement — Analyze usage patterns to improve the interface, speed up the system, and add features more relevant to our members.
  • Communication — Send important account notifications, security updates, and promotional information if you have provided your consent.
  • Responsible gaming — Monitor gameplay patterns to identify signs of problematic gaming behavior and offer appropriate assistance.
What we never do: We never sell your personal data to third parties for commercial purposes, do not use it for irrelevant third-party advertising, and do not share it with entities that have no legal basis to receive it.

5 Data Storage and Security

Surgawin uses enterprise-grade cloud infrastructure to store member data. All data is stored on servers located in certified data centers with multi-layered physical and digital security.

The security measures we implement include:

  • Data encryption at rest using AES-256
  • Data encryption in transit using TLS 1.3
  • Employee data access is restricted based on job requirements (principle of least privilege)
  • Audit logs for every access to sensitive member data
  • Regular security testing by internal teams and independent third parties
  • Intrusion detection system and 24/7 security monitoring

Your data is retained for as long as your account is active and for any period required by applicable regulations. Once the retention period ends, data is securely deleted using non-recoverable deletion methods.

Retention period: Financial transaction data is retained for a minimum of 5 years in accordance with AML regulatory requirements. KYC data is retained for the duration of an active account plus 3 years after account closure. Technical data and activity logs are generally retained for 12 months.

6 Sharing Data with Third Parties

We do not sell or rent your personal data to anyone. However, in the course of operating the platform, there are situations where we need to share certain data with trusted third parties:

  • Payment service providers — To process deposits and withdrawals, relevant financial data is shared with banks and digital wallet providers partnering with us, bound by strict confidentiality agreements.
  • KYC verification service providers — Technology partners assisting with identity verification only receive the data necessary and are held to the security standards we set.
  • Gaming platform providers — Minimal technical data required to run games may be shared with game provider partners in accordance with existing technical integrations.
  • Legal authority — We will share data with authorized legal authorities if required by applicable law, court order, or financial crime investigation.
Our partner standards: All third parties who receive surgawin member data are bound by strict data processing agreements and are required to maintain security standards equal to or higher than our own. We regularly evaluate our partners' compliance with applicable privacy standards.

8 Your Rights as a Data Owner

As a surgawin member, you hold a number of rights regarding your personal data that we fully respect. You may exercise these rights at any time through our support team:

Right to Access

You have the right to know what data we hold about you and how it is being used.

Right to Rectification

If any data is inaccurate or no longer relevant, you have the right to request that we correct it.

Right to Erasure

Under certain conditions, you have the right to request deletion of your personal data from our systems.

Right to Restriction of Processing

You have the right to request that we restrict how we process your data in certain circumstances.

Right to Data Portability

You have the right to receive the data you provided to us in a machine-readable format.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

How to submit a request: To exercise any of the rights above, contact the surgawin support team via live chat, available 24/7. We will respond to your request within 30 business days. Some requests may require additional identity verification before they can be processed.

9 Minor User Protection

Surgawin's services are strictly intended for individuals aged 18 and above. We do not knowingly collect or store personal data from individuals who do not meet this minimum age requirement.

If we become aware that data from users under 18 years of age has entered our system, we will immediately delete that data and close the account in question. Our KYC process is designed to detect and prevent registration by underage users.

Minor user reports: If you know or suspect that someone under 18 is using SurgaWin's services, contact our support team immediately. We will follow up on such reports with high priority.

10 Privacy Policy Updates

Surgawin may update this Privacy Policy from time to time to reflect changes in our operational practices, regulatory updates, or service improvements. Any material changes will be communicated to members via platform notifications or registered email.

The "Effective Date" at the top of this page will always reflect the latest active version. We encourage you to periodically review this page to stay informed about how your data is managed.

Continued use of surgawin's services after an updated Privacy Policy is published constitutes acceptance of the revised policy. If you do not agree with the changes, you may stop using the services and submit an account closure request to our team.

Privacy questions? The surgawin support team is available 24/7 to answer any questions regarding our Privacy Policy and how your data is managed. We are always committed to transparency in every communication.

Surgawin's Genuine Commitment to Protecting Your Privacy

Your privacy is not a formality — it is an operational standard we uphold every day.

Military-Grade Encryption for Your Data

All data you provide is encrypted using AES-256 at rest and TLS 1.3 in transit — the same standards used by international banking and government institutions.

Restricted Data Access

Not all surgawin employees can access your data. Only teams that genuinely need it for their assigned responsibilities are granted access — and every access is recorded in an audit log.

No Data Sales

Your personal data has never been, and will never be, sold to data brokers, advertisers, or any third party for commercial purposes. This is a principle we do not compromise on.

Fast and Secure KYC

Our KYC verification process is completed within 24 hours using a secure document verification system. KYC data is encrypted and accessible only by our licensed verification team.

Regular Security Audits

Our systems and infrastructure are regularly audited by internal security teams and external independent testers to ensure there are no exploitable vulnerabilities.

Fast Response to Privacy Inquiries

Privacy inquiries and data access requests will be responded to within a maximum of 30 business days. Our support team is available 24/7 to receive and process your requests.

Related Policy Pages

Learn more about surgawin's commitments through the following policy documents.

Your Data Is Protected

Join SurgaWin – A Platform That Protects Your Privacy

With multi-layered security and a genuine commitment to privacy, you can play with peace of mind knowing your data and funds are in safe hands.

Bahasa Indonesia