LEGAL REFERENCE

Your privacy is our foundation

We built surgaplay slot around one rule: your account data, payment details and account activity stay protected every moment you're on our platform. This policy shows you exactly...

Data SecurityAccount ProtectionPayment PrivacyTransparencyYour Control

Explore Games Read FAQ

How we collect and protect your information

When you open your account with surgaplay slot, we collect the personal and payment information you provide directly — name, email, phone, address and banking details. We use secure encryption (SSL/TLS) for all transactions. Your DANA, OVO, GoPay and QRIS payments are processed through certified payment gateways. We never sell your data to third parties. In supported Indonesian regions, we comply with

local data protection standards. Your account credentials remain encrypted in our database. We retain transaction records for audit and support purposes only.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PLAYER SUPPORT

Questions about your privacy?

PLATFORM TRUST SIGNALS

Our privacy commitments

Encrypted Transfers

Every deposit, withdrawal and payment confirmation moves through 256-bit SSL encryption. Your DANA, OVO, GoPay and QRIS details are never stored in plain text on our servers.

Third-Party Audit

We commission annual security reviews from independent auditors. Results inform our encryption upgrades and access control improvements.

Compliance Framework

surgaplay slot maintains compliance with data protection standards applicable to supported regions. Your account is treated under the highest regional safeguards.

Access Logs

Every login, payment and account change is logged with timestamp and IP. You can review your security history in your account settings anytime.

No Data Sales

We do not sell, rent or lease your personal information to advertisers, brokers or analytics firms. Your data belongs to you and supports only your account.

Incident Response

If a breach occurs, we notify affected users within 48 hours and provide step-by-step guidance. Our incident team works 24/7 to isolate and resolve security events.

Privacy standards across our brand

Account Settings

You control what marketing emails you receive, which devices can log in, and whether your account is visible in leaderboards.

Cookie Transparency

We use cookies only for session management, fraud prevention and account recognition. No tracking pixels for external marketers.

Payment Gateway Partners

DANA, OVO, GoPay and QRIS partners are PCI DSS certified. We share only transaction IDs and amounts — never your full banking credentials.

Affiliate & Referral Privacy

If you refer a friend, only their email and first name are shared with you. We do not expose their transaction history or account balance.

Retention Timeline

Account data is kept for 5 years after your last activity. Deletion requests are processed within 30 days. Transaction records are archived for 7 years for regulatory compliance.

Device & Location

We log your device type, browser and approximate location (city level) for fraud detection. Exact location data is never collected or stored.

Inheritance & Deceased Accounts

If you pass away, a designated beneficiary can request your account details through our legal support team with proof of inheritance or guardianship.

What shapes our privacy approach

Mobile-First Data Design

Your account syncs across devices. We minimize data stored on your phone — session tokens are cleared each time you log out.

Lobby & Preference Sync

Your game history, favourite slots, live table settings and sport markets are tied to your encrypted account. No local files left behind.

Payment Confirmation Flow

Every DANA, OVO, GoPay and QRIS transaction shows a confirmation page you can screenshot. We store your receipt in your account history forever.

Two-Factor Option

Enable SMS or email verification for login and withdrawal. You control the security level. Disabled by default but recommended for high-balance accounts.

Session Timeout Protection

Your session expires after 30 minutes of inactivity. On shared devices, you can force all other sessions to log out instantly from your settings.

Data Download & Portability

Request a full export of your account data, bets, deposits, withdrawals and profile in CSV or JSON format. We send it within 7 days.

Privacy questions answered

No. Payment gateways process and store your banking details separately. We store only a transaction token — not your account number or card data. You can verify this by checking our PCI DSS attestation in your account settings.

Yes. Go to Account Settings, choose 'Delete Account', and confirm. We remove your personal profile, preferences and game history within 30 days. Regulatory records (deposits, withdrawals) are archived for 7 years but de-identified.

Your session is encrypted end-to-end, so eavesdroppers cannot see your login or transactions. We recommend enabling two-factor authentication for extra protection on shared networks. Your payment data never leaves our encrypted tunnel.

No. surgaplay slot does not sell or share your account data, payment history or personal information with other platforms or third-party gambling brands. Your data stays within our ecosystem only.

We use 256-bit SSL encryption, PCI DSS compliance, automated fraud detection and manual review for high-value transactions. Enable two-factor login in your settings for an extra layer. We also log every login — check your security history anytime.

We use cookies only for session management and fraud prevention — not for external tracking or advertising. No third-party pixels collect your browsing outside surgaplay slot. You can disable non-essential cookies in your privacy preferences.

We notify all affected users within 48 hours via email and in-account alert. We provide remediation steps, reset your password, and offer complimentary account monitoring. We also file a report with relevant authorities in supported regions.