Last updated: 1 January 2026

Surya303 Privacy Policy — Malaysia Member Personal Data Protection

At surya303, your privacy is more than a legal obligation — it is our genuine commitment. This document transparently explains how we manage your personal data from start to finish.

256-bit SSL Encryption

All data transmitted between your device and surya303 servers is protected with 256-bit SSL encryption — the same standard used by leading banks in Malaysia.

Strict Access Control

Your personal data is accessible only to authorized personnel. A role-based access control (RBAC) system ensures no unnecessary internal data exposure.

No Data Sales

Surya303 has never and will never sell, rent, or trade your personal data to third parties for advertising or any other commercial purposes without your consent.

Secure Data Storage

Data is stored in ISO 27001-certified data centers with layered protection — including firewalls, intrusion detection systems, and encrypted automatic backups.

Legal Compliance

This Policy complies with the Malaysia Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews to ensure our data management practices remain current.

Full User Rights

You have the full right to access, correct, transfer, or request deletion of your personal data at any time through surya303 support channels.

1 Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how surya303 ("Company", "We", "Platform") collects, uses, discloses, and protects your personal information when you use the surya303.win website and all related services including our mobile app.

We operate with a full commitment to transparency. This policy is written in clear, plain language so you truly understand what happens with your data — not just another lengthy document nobody reads. We believe you have the right to know.

By registering an account, using our services, or simply browsing the surya303 platform, you acknowledge that you have read and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform.

This Privacy Policy is subject to the Malaysia Personal Data Protection Act 2010 (PDPA) and its amendments as in force from time to time.
2 Types of Personal Data We Collect

Surya303 collects only the data necessary to provide a safe, seamless, and legally compliant service. The following are the categories of data we collect:

Data Category Sample Information Required?
Personal Identity Full name, date of birth, MyKad/passport number Yes (KYC)
Contact Information Phone number, email address, residential address Yes
Financial Data Bank account number, e-wallet details, transaction records Yes (payment)
Usage Data Game logs, betting records, account activity Automatic
Technical Data IP address, device type, web browser, OS Automatic
Communication Data Support chat records, emails, feedback Where applicable
3 How We Collect Your Data

Your personal data is collected through several different channels depending on the nature of your interaction with the surya303 platform:

Directly from You: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, or submit any information on our platform.

Automatically: Through technologies such as cookies, tracking pixels, and server logs that record your technical data and usage patterns each time you use the platform. This data is collected automatically to ensure platform performance and security.

From Third Parties: In certain cases, we receive information from identity verification providers, payment processors, and fraud prevention agencies for AML compliance and KYC verification purposes. All third-party providers adhere to strict data protection standards.

4 Purpose of Using Your Personal Data

We use your personal data only for legitimate and necessary purposes. Every use of data has a clear justification:

  • Account Management: Creating and maintaining your account, processing registrations, and managing account settings
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately
  • Identity Verification: Complying with KYC and AML requirements mandated by law to prevent money laundering and fraud
  • Platform Security: Detecting and preventing fraudulent activity, unauthorized access, and cybersecurity threats
  • Customer Support: Helping resolve inquiries, complaints, and technical issues you report to our team
  • Product Improvement: Analyzing usage patterns to improve the platform, add new features, and enhance the overall experience
  • Service Communications: Sending important notices related to your account, transactions, terms changes, and security updates
  • Responsible Gaming: Monitoring gameplay patterns to identify and assist members who may be experiencing gambling-related issues
We do not use your data for third-party advertising or sell user profiles to other companies. Your data belongs to you.
5 Data Sharing and Disclosure

Surya303 does not sell or rent your personal data. However, in certain circumstances we may need to share data to enable the platform to operate securely and in compliance with the law:

Trusted Service Providers: We only share the minimum necessary data with partners who help us run our operations — such as payment processors (banks and e-wallets), identity verification providers, and cloud infrastructure. All parties are bound by strict data protection agreements.

Legal Requirement: We may be required to disclose your data to the relevant authorities when mandated by Malaysian law, court order, or an official investigation by enforcement agencies.

Interest Protection: Data may be disclosed to prevent fraud, enforce our Terms and Conditions, or protect the rights and safety of our platform users.

In all data sharing scenarios, we ensure only the minimum necessary information is disclosed. We never sell data to advertisers or third-party data brokers.
6 Data Retention Period

Surya303 retains your personal data for as long as your account is active or as long as required to provide our services. Following account closure, we retain certain data for periods stipulated by law:

  • Financial transaction records: Minimum 7 years (AML and tax requirements)
  • Identity verification documents (KYC): 5 years after account closure
  • Support communication logs: 3 years
  • Activity and security logs: 2 years
  • Cookies and technical data: 12 months

Once the defined retention period has lapsed, data will be securely deleted or anonymised so it can no longer be linked to you personally.

7 Cookies and Tracking Technologies

Surya303 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Essential Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential for the platform to operate.

Performance Cookies: Collecting information on how users interact with the platform — such as frequently visited pages and time spent. This data is used to improve the user experience.

Preference Cookies: Saving your preferences such as language, theme, and display settings so you do not need to reset them every time you log in.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and performance of the surya303 platform.

8 Your Rights as a User

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data. Surya303 fully respects and upholds these rights:

👁️
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.

✏️
Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction through your account settings or our customer support.

🗑️
Right to Erasure

You may request the deletion of your data, subject to mandatory legal retention requirements we are obliged to comply with.

🚫
Right to Object

You may object to the processing of your data for specific purposes, including unwanted marketing communications.

📦
Right to Data Portability

You have the right to receive a copy of your data in a machine-readable format for transfer to another service provider.

9 Data Security Measures

Surya303 continuously invests in security infrastructure to protect your data from unauthorized access, loss, or misuse. Our security measures include:

  • 256-bit SSL/TLS encryption for all data transmissions between client and server
  • Encryption of data at rest in databases using AES-256
  • Two-factor authentication (2FA) is available and encouraged for all accounts
  • Intrusion detection system (IDS) and next-generation firewall active 24/7
  • Regular security audits by accredited independent firms
  • Mandatory cybersecurity training for all staff with access to data
  • Tested and documented security incident response procedures
While we take every reasonable precaution, no system is 100% secure. In the event of a data breach affecting you, we will notify you within 72 hours of the incident being identified.
10 Child and Minor User Protection

Surya303 is a platform designed exclusively for adult users aged 18 and above. We do not intentionally collect, store, or process personal data of individuals under the age of 18.

Our registration process includes strict age verification steps. If we find that data collected belongs to a minor, it will be deleted immediately and the account in question will be terminated.

If you are a parent or guardian and believe your child has registered an account on surya303, please contact our support team immediately. We will take prompt action to resolve the matter.

11 Amendments to the Privacy Policy

Surya303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The "Updated" date at the top of this page reflects the last time this policy was reviewed.

For significant amendments — such as changes to how we use or share your data — we will notify you via a prominent notice on the platform or by registered email before the changes take effect.

Continued use of the surya303 platform after any amendments to the Privacy Policy constitutes acceptance of the updated policy. We recommend you review this page periodically.

12 Contact Us About Privacy

If you have any questions, concerns, or wish to submit a request related to your personal data, the surya303 privacy team is here to help.

We are committed to responding to all privacy inquiries within 5 business days. For urgent account security issues, please use the live chat on our platform, available 24/7 for immediate assistance.

✉️
Privacy Email
💬
Live Support
Live Chat 24/7

Related Policy Documents

Also read other documents related to your rights and responsibilities at surya303

📋
Terms and Conditions

Platform terms of use, account policies, deposits, withdrawals, and bonuses that you need to know.

Read Terms
❤️
Responsible Gaming

Self-control tools, deposit limits, and support resources to ensure a healthy gaming experience.

Read Policy
❓
Frequently Asked Questions (FAQ)

Answers to frequently asked questions about accounts, privacy, security, and payments.

View FAQ

Play with Confidence at Surya303

Your data is protected. Your gaming is secure. Join over 500,000 Malaysian members who trust surya303 as their preferred online gaming platform.

Bahasa Melayu