Last Updated: January 2026

Surya898 Privacy Policy — Personal Data Protection for Malaysian Players

Surya898 takes the privacy and data security of every Malaysian player seriously. This page clearly explains how we collect, use, store and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

SSL 256-bit
Full Data Encryption
PDPA 2010
Malaysia Compliance
No Data Sales
Your data is never sold
Full Rights
You're in control

Key Summary: surya898 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your consent. All data is processed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the surya898 platform, you agree to this Privacy Policy.

1

Introduction and Scope of the Privacy Policy

This Privacy Policy is published by surya898 ("we", "our platform" or "surya898") and applies to all users who access or use the surya898 platform via surya898.biz and all related sub-domains and applications.

We understand that entrusting us with your personal information is a significant decision. surya898 is therefore committed to handling that data with full responsibility, transparency, and security. This Privacy Policy explains in detail:

  • Types of personal information we collect from you
  • How and why we collect your information
  • Who may receive or access your information
  • How we protect and securely store your data
  • Your rights regarding the personal data we hold
  • How you can contact us with any privacy concerns

This policy covers all your interactions with surya898 — from account registration and deposits via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, to gaming activities such as slots, live baccarat, and e-sports, through to your communications with our customer support team.


2

Categories of Personal Data Collected

Surya898 collects various types of personal information depending on your activity on the platform. The table below outlines the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, MyKad number, date of birth, gender Identity verification (KYC), fraud prevention
Contact Data Malaysian phone number, email address, state Account communications, transaction notifications
Financial Data Bank account number, bank name, e-wallet account Processing deposits and withdrawals in RM
Technical Data IP address, device type, browser, operating system Account security, prevention of unauthorised access
Activity Data Game history, betting records, bonus usage Auditing, dispute resolution, platform improvement
Communication Data Live chat logs, emails with customer support Improving customer service quality

Data Minimisation Principle: surya898 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive information unrelated to platform operations, such as religious beliefs or political affiliations.


3

How We Collect Your Information

Surya898 collects personal data through several key channels:

  • Account Registration: Information you provide when registering a new surya898 account — including your name, Malaysian phone number, date of birth, and payment account details.
  • Financial Transactions: Details provided when making deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u or CIMB Clicks, as well as during the processing of withdrawals to your Malaysian bank account.
  • Identity Verification (KYC): Documents uploaded for verification purposes — copies of MyKad, bank slips or proof of address where required.
  • Platform Activity: Data generated automatically as you play slots, baccarat, blackjack, Malaysia Super League football betting, or e-sports on the surya898 platform.
  • Communications: Information you provide when contacting surya898 customer support via live chat, email, or messaging channels.
  • Cookie Technology: Technical data collected automatically via cookies and similar tracking technologies when you browse the surya898 platform.

4

How Your Personal Data Is Used

Surya898 uses the personal data collected for the following purposes, all of which are based on valid legal grounds under Malaysia's PDPA:

  • Account Management: Creating, verifying, managing and protecting your surya898 account against unauthorised access.
  • Transaction Processing: Processing deposits from your Malaysian e-wallets and banks, and managing withdrawals of winnings in Malaysian Ringgit (RM) accurately and without delay.
  • Legal Compliance: Complying with legal requirements related to Anti-Money Laundering (AML), Counter-Financing of Terrorism (CFT), and age verification.
  • Platform Security: Detecting and preventing fraud, bot usage, collusion, and any activity that violates surya898's Terms & Conditions.
  • Customer Support: Enabling the surya898 team to assist you effectively with any enquiries or technical issues.
  • Responsible Gambling: Monitoring gameplay patterns to identify players who may need support and to enforce self-imposed limits.
  • Platform Enhancement: Analysing aggregated usage data (without identifying individuals) to improve the surya898 platform experience.
  • Service Communications: Sending important notifications related to your account, transactions, changes to terms, or promotions you have opted in to receive.

Marketing: surya898 will only send you marketing communications if you have given explicit consent. You may withdraw this consent at any time through the notification settings in your account or by contacting us directly.


5

Data Protection Security Measures

Surya898 implements a comprehensive range of technical and administrative security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

🔒
256-bit SSL Encryption

All communications between your browser and surya898's servers are encrypted using 256-bit SSL (Secure Socket Layer) — the same standard used by leading Malaysian banks such as Maybank and CIMB.

🛡️
Layered Access Control

Access to players' personal data within surya898's internal systems is granted only to staff who genuinely require it, based on the principle of least privilege.

🔑
Two-Factor Authentication

Surya898 accounts support two-factor authentication (2FA) via SMS OTP to your Malaysian phone number. We encourage all players to enable this additional security feature.

📊
24/7 Monitoring

The surya898 system is monitored around the clock, 24 hours a day, to detect any suspicious activity, unauthorised access attempts, or security anomalies that require immediate action.

💾
Secure Data Backup

Surya898 player data is securely backed up at data centres protected by strict physical controls. Backups are performed on a regular basis to ensure data recovery in the event of an emergency.

Breach Notification: If surya898 detects any security breach that may affect your personal data, we will notify you within a reasonable timeframe in accordance with applicable legal requirements.


6

Data Sharing and Disclosure to Third Parties

Surya898 does not sell, rent, or trade player personal data to third parties for marketing or commercial purposes. However, there are limited situations where we may need to share data to enable the platform to function properly:

  • Payment Service Providers: Transaction information required is shared with Malaysian payment providers such as FPX, Touch 'n Go, GrabPay, DuitNow, and others solely for the purpose of processing your financial transactions.
  • Game Providers: Minimum technical data required to operate games is shared with licensed game providers such as Pragmatic Play, PG Soft, and Evolution Gaming under strict data protection agreements.
  • Authorities: surya898 will disclose data to the relevant Malaysian authorities when required by law, court order, or for legitimate criminal investigation purposes.
  • Security Audits: Third-party security auditors bound by strict confidentiality agreements may access limited data for system audit and compliance purposes.

International Transfers: Where any of our service providers are based outside Malaysia, surya898 ensures that such data transfers are protected by safeguards equivalent to or exceeding the requirements of Malaysia's PDPA.


7

Cookies and Tracking Technologies

Surya898 uses cookies and similar tracking technologies to enhance your experience on the platform and ensure that essential functions operate correctly. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting aggregated information on how players use the surya898 platform — most visited pages, time spent — to help us continually improve the overall user experience.
  • Preference Cookies: Saving your preferences such as language (Bahasa Melayu), currency (RM), and display settings to streamline your experience on future visits.
  • Security Cookies: Helps identify and prevent fraudulent activity, bot usage, or multiple access attempts from the same source.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the surya898 platform and your gaming experience.


8

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data surya898 holds about you:

Right of Access

You have the right to request a copy of the personal data surya898 holds about you at any time.

Right to Rectification

You have the right to request the correction of any inaccurate or incomplete personal data held in surya898's records.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to legal record-keeping requirements.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time, with no penalty.

Right to Data Portability

You may request a copy of your personal data in a structured, machine-readable format.

Withdrawal of Consent

You may withdraw your consent to data processing at any time, though this may affect your access to certain services.

How to Submit a Request: To exercise any of the rights above, please contact the surya898 Data Privacy Officer by email at privacy@surya898.biz or via the platform's live chat. surya898 will process your request within 30 working days.


9

Data Retention Period

Surya898 retains your personal data for as long as necessary for the stated purposes, or as required under applicable Malaysian law. The following are general data retention guidelines:

  • Active Account Data: Retained for the duration your account is active and for 7 years after account closure for financial record-keeping and legal compliance purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering.
  • Security Logs: Retained for 2 years to support investigations in the event of a security incident or dispute.
  • Communication Records: Communication logs with customer support are retained for 2 years for quality assurance and dispute resolution purposes.
  • Marketing Data: Deleted within 30 days of you withdrawing consent for marketing communications.

Once the retention period expires, personal data will be securely deleted or anonymised so it can no longer be linked to any individual.


10

Child and Minor Protection

The surya898 platform strictly for individuals aged 18 and above. surya898 does not intentionally collect or process personal data from children or individuals under the age of 18.

All players are required to verify their age upon registration. Should surya898 discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that information and close the account in question.

Parent / Guardian Report: If you believe your underage child has registered for or used the surya898 platform, please contact us immediately at support@surya898.biz and we will respond within 24 hours.


11

Amendments to the Privacy Policy

Surya898 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new technologies, Malaysian legal requirements, or other legitimate operational reasons.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date shown at the top of this page.
  • Displaying clear notices on the surya898 platform to inform users of any changes made.
  • For material changes that significantly affect your privacy rights, we will send a notification directly to the email address or Malaysian phone number you registered with us.

You are encouraged to review this Privacy Policy periodically. Continued use of the surya898 platform following any posted changes will be considered your acceptance of the updated policy.


12

Contact the surya898 Data Privacy Officer

For any enquiries, concerns, or requests regarding this Privacy Policy or your personal data at surya898, please contact our Data Privacy Officer through the following channels:

  • Privacy Email: privacy@surya898.biz
  • General Support Email: support@surya898.biz
  • Live Chat: Via the surya898 platform (available 24/7 in Bahasa Melayu)

Surya898 is committed to processing all privacy-related enquiries within 30 working days from the date of receipt. If your enquiry is urgent, please include "URGENT PRIVACY" in your email subject line or at the start of your live chat message for immediate attention.

Right to Complain: If you are not satisfied with surya898's response to your privacy enquiry, you have the right to lodge a complaint with the Malaysian Ministry of Communications and Multimedia or the relevant Personal Data Protection Commissioner of Malaysia.

Last updated: 1 January 2026
Malay Version (ms-MY) | PDPA 2010
Why Your Privacy Is Safe with surya898
Six layers of protection ensuring your personal data is always safeguarded on the surya898 platform
Bank-Grade Encryption

All data transmitted between your device and surya898's servers is encrypted with SSL 256-bit — the same encryption technology used by Maybank2u and CIMB Clicks to protect online banking transactions.

Malaysia PDPA Compliance

Surya898 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection, storage, and usage is carried out in accordance with the established Malaysian legal framework.

No Data Sales

Surya898 has never sold, and will never sell, rent, or trade your personal data to third-party advertisers or marketing companies. Your data is used solely for platform operations.

Full Control in Your Hands

Surya898 players have the full right to access, correct, download, or request deletion of their personal data at any time. Requests are processed within 30 working days.

Data Minimisation

Surya898 only collects data that is strictly necessary to operate the platform. We do not request irrelevant information and do not retain data for longer than required by law.

Easy Marketing Controls

You can stop receiving surya898 marketing communications at any time with a single click in your account settings — no need to contact customer support or fill in any cumbersome forms.

Your Data Is Protected — Play with Peace of Mind

Surya898 ensures that all your personal information is protected with industry-leading technology and managed in full compliance with Malaysian law. Register now and enjoy a safe, secure and fair gaming experience alongside more than 500,000 Malaysian players who already trust surya898.

🔐
SSL 256-bit | PDPA 2010 | 18+
Bahasa Melayu