surga22 Casino & Sportsbook Data Care

This page describes what we collect when you use surga22 and how we keep that data protected. Our privacy practices are designed around account security, regulatory compliance, and transparency. We collect only what is necessary to operate our platform, process deposits and withdrawals, verify your identity, and prevent fraud.

surga22 operates under jurisdiction-restricted access, which means we comply with the data protection and gaming laws applicable in the regions where we provide services. Players from Jakarta, Surabaya, Bandung, Medan, and other supported areas should understand what information we hold and how we use it. This policy covers email addresses, payment details, verification documents, game history, and account activity.

We do not sell your data to marketing partners. We do not share your information except where required by law or to process your legitimate requests—such as payments via DANA, e-wallet, mobile banking, or local payment virtual account. If you have questions about our data practices, our support team is available via email or contact form

What Data We Collect

We collect your email address when you create a surga22 account. We require your name, date of birth, and national ID number for account verification (KYC). We also collect proof of address—a utility bill or government-issued document—to confirm your identity and jurisdiction eligibility.

When you fund your surga22 account, we record which payment method you used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual account—mobile banking, local payment, online payment, e-wallet). We store transaction amounts, timestamps, and deposit/withdrawal confirmations. This data is necessary to process your requests and reconcile your account balance.

We log your gameplay on surga22—which games you access (sportsbook, table games, slots, esports markets), your bets, outcomes, and balance changes. We track your IP address, device type, and browser information for security and fraud prevention. We also store any communications you send us through our support channels.

Data we collect on surga22

Email, name, date of birth, national ID, and proof of address for account verification
Payment method and transaction history (mobile banking, local payment, online payment, bank transfers, etc.)
Gameplay records: bets, game outcomes, balance changes across all categories
Technical data: IP address, device type, browser, login timestamps
Support communications: emails, chat logs, account inquiries

How We Use Your Data

We use your email to send account notifications, password resets, and support responses. We use your KYC documents to verify your identity and confirm that you are in a jurisdiction where surga22 services are available under applicable law. This is mandatory for compliance with gaming regulations across the regions where we operate.

We use your payment data to process deposits and withdrawals. When you request a withdrawal, we route funds back to your original payment method—e-wallet, mobile banking virtual account, local payment, or whichever method you used. Our payment processors (the banks and e-wallet providers) handle the actual transfer; we provide them only the information necessary to complete your transaction.

We use your gameplay data to update your balance, generate your account history, and detect fraudulent activity. If we notice suspicious patterns—rapid account creation, unusual withdrawal requests, or markers of compromise—we investigate and may require additional verification before processing withdrawals.

We use technical data (IP address, device type) for security purposes. This helps us identify unauthorized access attempts and protects your account from abuse. We use your communications with support to improve our service and resolve disputes. We never use your data for marketing purposes unless you explicitly opt in, and we do not sell your information to third parties.

Third Parties and Data Processors

Our payment processors handle your financial transactions. When you deposit via online payment, e-wallet, mobile banking, or bank virtual account (local payment, online payment, e-wallet, mobile banking), those providers have access to the minimum data required to complete your transfer—typically your account identifier and amount. We do not control these processors' privacy practices; you should review their policies directly.

We may use third-party service providers for email delivery, customer support platforms, and fraud detection. These vendors are bound by data protection agreements and are forbidden from using your data for any purpose other than providing their service to us.

We may disclose your data if required by law—for example, to comply with court orders, regulatory investigations, or anti-money-laundering requirements. We will notify you of such disclosures where legally permitted. Our servers may be located outside Indonesia; this means your data may be stored or processed internationally, though we maintain the same security and privacy standards regardless of location.

Data Retention and Your Rights

We retain your account data for as long as your surga22 account is active. If you close your account, we keep records of transactions and gameplay for a minimum of seven years to comply with financial and gaming regulations. After that period, we delete or anonymize data unless we are required by law to retain it longer.

You have the right to access your data. You can download your account history, balance statements, and transaction records from your surga22 dashboard at any time. You can request a copy of all data we hold about you by contacting our support team.

You have the right to correct inaccurate data. If your name, address, or payment details are wrong, contact us to update your account. You have the right to withdraw consent for non-essential processing—for instance, you can opt out of marketing emails (though you cannot opt out of transaction and security-related communications).

You have the right to request deletion of your account and associated data, subject to our retention obligations. We will delete account information seven years after closure if no legal holds apply. If you have questions about your rights or wish to exercise them, contact our support team via email

KYC (Know Your Customer): Identity verification required before account funding on surga22; involves email confirmation and document submission (ID, address proof).
Data processor: Third party (like local payment, online payment, or email service) that handles data on our behalf under strict data protection agreements.
Retention period: Time we keep your data; surga22 retains active account data indefinitely, transaction records for seven years post-closure.
Jurisdiction-restricted: surga22 services available only where local law permits; we verify your location during account setup via KYC and payment method.

Cookies and Tracking

Our website uses cookies to remember your login status, language preference, and browsing activity on surga22. These are necessary for platform functionality. We also use analytics cookies to understand how users interact with surga22—which pages are visited, which games are popular during Liga 1 weeks versus Piala AFF tournaments, and where users encounter issues.

We do not use tracking cookies for advertising purposes. You can disable cookies in your browser settings; however, some surga22 features may not work properly without them. We do not use third-party advertising networks, so you will not see surga22 ads retargeting you across other websites.

Contact and Policy Updates

If you have questions about our privacy practices, contact our support team via email or FAQWe respond to data requests within 30 days where legally required. Our support team can assist with account access requests, data corrections, and withdrawal assistance across all payment methods (DANA, e-wallet, mobile banking, local payment virtual account).

We update this privacy policy periodically to reflect changes in our practices or applicable law. We notify account holders of material changes via email. Your continued use of surga22 after a policy update constitutes acceptance of the new terms. Check back here or contact support if you are unsure whether a change applies to you.

surga22 operates under jurisdiction-restricted access. Our data practices comply with the regulations applicable in supported regions including Jakarta, Surabaya, and other areas where gaming is permitted by local law. If you believe we have mishandled your data or violated this policy, contact us immediately so we can investigate and resolve the issue.