Surya777 Privacy Policy

1Introduction

This Privacy Policy (the "Policy") is issued by Surya777 ("surya777", "we", "us", or "our"), the operator of the online gambling and sports betting platform accessible at surya777.cam (the "Platform" or "Website"). This Policy applies to all users who visit, register on, or otherwise interact with the surya777 Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations from which the Platform is accessed.

This Policy describes: (a) the categories of personal data we collect and process; (b) the purposes for and legal bases on which we process that data; (c) the circumstances in which we may share your data with third parties; (d) the security measures we apply to protect your data; and (e) the rights you have in respect of your personal data and how to exercise them.

By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which are incorporated by reference.

2Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes, but is not limited to, name, email address, phone number, identification document number, IP address, and payment account details.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. surya777 acts as the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller, pursuant to documented instructions.
• "Cookies" — Small text files stored on your device by your web browser when you visit the Platform, used to retain session information, preferences, and analytical data.
• "KYC Data" — Documentation collected as part of the Know Your Customer identity verification process, including government-issued identification and proof of address.

3Categories of Personal Data We Collect

surya777 collects the following categories of Personal Data from players and Platform visitors:

4How We Collect Your Data

surya777 collects Personal Data through the following means:

• Direct Provision: Information you actively provide during registration, KYC verification, deposit and withdrawal requests, customer support interactions, and completion of any forms on the Platform.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and analytics tools. See Section 8 (Cookies & Tracking) for full details.
• Third-Party Sources: Identity verification and fraud screening data received from our licensed KYC and anti-money-laundering (AML) service providers, and payment confirmation data received from payment processors including DuitNow, FPX, and banking partners.
• Public Sources: In limited circumstances relating to fraud prevention and compliance, surya777 may cross-reference information against publicly available registers or databases.

5Legal Basis for Processing

surya777 processes your Personal Data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to perform the contract between surya777 and the Player — including account creation, processing deposits and withdrawals via Maybank, CIMB, Touch 'n Go eWallet and other payment methods, operating your gaming account, and providing customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML screening, responsible gambling regulatory obligations, and data retention requirements mandated by law.
• Legitimate Interests: Processing carried out in pursuit of surya777's legitimate business interests where those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, product improvement, and internal analytics. We conduct a balancing test before relying on this basis.
• Consent: Processing carried out with your freely given, specific, and informed consent — primarily for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6How We Use Your Personal Data

surya777 uses your Personal Data for the following purposes:

6.1 Account Management & Service Delivery

To create and administer your Account; verify your identity and eligibility; process deposits and withdrawals; maintain accurate transaction records; provide access to all gaming and betting services on the Platform; and respond to your customer support requests via live chat or email.

6.2 Compliance & Fraud Prevention

To conduct KYC and AML checks in accordance with applicable legal requirements; detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited activities; comply with requests from regulatory authorities or law enforcement agencies where legally required; and enforce our Terms & Conditions.

6.3 Responsible Gambling

To monitor player behaviour patterns for indicators of problem gambling; apply player-requested deposit limits, session limits, and self-exclusion instructions; and communicate important responsible gambling information in accordance with our Responsible Gambling Policy. surya777 is strictly for players aged 21 and above.

6.4 Platform Improvement & Analytics

To analyse aggregate, anonymised usage data for the purpose of improving platform performance, game selection, user experience, and customer support quality. No individual player is personally identified in our internal analytics reporting.

6.5 Marketing Communications

Where you have provided your explicit consent, to send you promotional emails or notifications about new games, bonus offers (including deposit bonuses, cashback promotions, and refer-a-friend rewards), sports betting markets (Liga Super Malaysia fixtures, EPL match-day offers, UFC events), and other platform features. You may opt out of marketing communications at any time.

7Data Sharing & Disclosure

surya777 does not sell your Personal Data. We may share Personal Data with carefully selected third parties only in the circumstances described below:

• Payment Processors: We share necessary financial data with payment service providers (including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network operators) to process your transactions. These parties act as Data Processors under binding agreements.
• Identity Verification Providers: We engage licensed KYC and AML service providers who process identity documents on our behalf for the purpose of verifying your identity and screening against financial crime databases.
• Technology Service Providers: We work with cloud hosting, data storage, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal & Regulatory Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of surya777's assets, Personal Data may be transferred to the successor entity. Affected players will be notified in advance of any such transfer.

All third-party Data Processors engaged by surya777 are subject to contractual obligations to process data only on our documented instructions, maintain appropriate security standards, and not use Personal Data for any purpose other than those specified.

8Cookies & Tracking Technologies

surya777 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies enable core functions such as maintaining your login session, processing transactions, and applying security measures. They cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Remember your preferences and settings (such as language preference, game display settings, and notification choices) to provide you with a more personalised experience on subsequent visits.
• Analytical Cookies: Used to collect anonymised, aggregated data about how players navigate the Platform — which pages are visited most, how long sessions last, and which features are used most frequently. This data is used exclusively for internal platform improvement.
• Security Cookies: Assist with fraud detection, session integrity verification, and protection against cross-site request forgery (CSRF) attacks.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may affect the availability and security of certain Platform features. surya777 does not use cookies to serve third-party advertising on behalf of external advertisers.

9Data Retention

surya777 retains Personal Data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Account and Transaction Data: Retained for a minimum of five (5) years following Account closure or the last transaction date, in compliance with applicable AML and record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of Account closure or the date the document was submitted, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of each interaction, or longer where the interaction is related to an unresolved dispute or legal proceeding.
• Marketing Data: Retained until you withdraw your marketing consent, or for two (2) years following your last login to the Platform, whichever occurs first.
• Technical & Usage Data: Anonymised and aggregated after twelve (12) months; raw logs are deleted after ninety (90) days.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

10Data Security

surya777 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including payment credentials and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access Personal Data.
• Regular security assessments, penetration testing, and vulnerability scanning of our Platform and infrastructure.
• Multi-factor authentication requirements for all internal systems that store or process Personal Data.
• Incident response procedures providing for prompt detection, containment, and notification in the event of a data breach.

11Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in respect of your Personal Data held by surya777:

To exercise any of the rights listed above, please submit a written request to [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We will acknowledge your request within forty-eight (48) hours and provide a substantive response within thirty (30) calendar days. We may request proof of your identity before processing your request to prevent unauthorised access to your data.

12Children's Privacy

surya777 is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. If you are under 21, you must not register or use the Platform under any circumstances.

If surya777 becomes aware that Personal Data has been collected from an individual under the age of 21 without appropriate consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the Platform, please contact us at [email protected] immediately.

13Third-Party Links & Services

The surya777 Platform may from time to time display references to or integrate with third-party services, such as game providers and payment processors. Where data is transferred to or processed by these third parties as Data Processors on our behalf, it is governed by binding data processing agreements. surya777 takes reasonable steps to ensure that third-party Data Processors maintain adequate data protection standards.

surya777 is not responsible for the privacy practices of any third-party website or service that is not operated by us. We encourage you to review the privacy policies of any third-party service you interact with independently of the surya777 Platform.

14Changes to This Privacy Policy

surya777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes will be communicated to registered players via the email address associated with their Account and/or through a prominent notice on the Platform, with a minimum of fourteen (14) days' advance notice where reasonably practicable.

The "Last Updated" date displayed at the top of this page will be revised each time the Policy is amended. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should cease using the Platform and close your Account.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way surya777 handles your Personal Data, please contact us through the following channels:

• Privacy Enquiries Email: [email protected] — please include "Privacy Enquiry" or "Data Rights Request" in the subject line for fastest routing.
• Live Chat: Available 24 hours a day, 7 days a week, directly on the surya777 Platform. Our support team is bilingual in English and Bahasa Malaysia.
• Operating Region: Malaysia — serving players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide.