Data Privacy · Security · Your Rights
At surga19, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains what personal data surga19 collects, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law. Please read this policy carefully before registering or using any surga19 service.
The key principles that guide how surga19 handles your personal data — full details follow in the policy below.
surga19 processes all personal data in full compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and its implementing rules and regulations issued by the National Privacy Commission (NPC).
All data transmitted between your device and the surga19 platform is protected by industry-standard 256-bit SSL encryption. Your personal and financial information is never transmitted in plain text over any network.
surga19 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Your information is used solely for the purposes described in this Privacy Policy and for no other commercial purpose.
surga19 collects only the personal data that is necessary for the specific purposes described in this policy. We do not collect data speculatively or in excess of what is required to operate the platform and comply with our legal obligations.
As a data subject under Philippine law, you have the right to access, correct, delete, and object to the processing of your personal data. surga19 provides clear channels for exercising all of these rights without unnecessary delay.
surga19 does not store full payment card numbers or GCash PINs on its servers. Payment transactions are processed through certified payment gateways that maintain their own PCI-DSS compliance standards.
surga19 ("surga19," "we," "us," "our") is the operator of the online gaming platform accessible at surga19.one (the "Platform"). surga19 acts as the data controller in respect of all personal data collected from users of the Platform, meaning we determine the purposes and means by which your personal data is processed.
This Privacy Policy applies to all personal data collected by surga19 through the Platform, including data collected during account registration, identity verification, gameplay, payment processing, customer support interactions, and marketing communications.
This Privacy Policy should be read together with the surga19 Terms & Conditions, which govern your overall use of the Platform. By registering a surga19 account, you acknowledge that you have read and understood this Privacy Policy.
surga19 collects the following categories of personal data from players and visitors to the Platform:
| Data Category | Examples | Required? |
|---|---|---|
| Identity & Contact | Name, DOB, address, mobile, email | Mandatory for registration |
| Financial | GCash name, bank account, transaction history | Mandatory for deposits/withdrawals |
| Gaming & Account | Game history, bonus records, support logs | Generated automatically during use |
| Technical & Usage | IP address, device info, page visits | Collected automatically via cookies |
surga19 collects personal data directly from you when you register an account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings.
When you access and use the surga19 Platform, certain technical and usage data is collected automatically through cookies, web beacons, and similar tracking technologies. This data is collected regardless of whether you are logged into your account. Please refer to Section 7 for full details on our use of cookies.
surga19 may receive personal data about you from the following third-party sources:
surga19 uses your personal data for the following specific purposes:
surga19 processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012 (RA 10173):
surga19 does not rely on consent as the legal basis for processing that is necessary for the performance of your account contract or for compliance with our legal obligations. Withdrawing marketing consent will not affect the lawfulness of processing carried out for those other purposes.
surga19 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients only where necessary and only to the extent required for the stated purpose:
surga19 engages carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:
All third-party service providers engaged by surga19 are contractually required to process personal data only in accordance with surga19's instructions and to maintain appropriate technical and organizational security measures.
surga19 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), the National Bureau of Investigation (NBI), or any other competent Philippine authority where such disclosure is required by law, court order, or lawful regulatory directive.
In the event of a merger, acquisition, restructuring, or sale of all or part of surga19's business, your personal data may be transferred to the acquiring entity as part of that transaction. surga19 will provide reasonable notice of any such transfer and will ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Privacy Policy.
surga19 does not transfer your personal data outside the Philippines unless appropriate safeguards are in place as required by the Data Privacy Act and NPC regulations. Where cross-border transfers are necessary (for example, to a cloud hosting provider with servers outside the Philippines), surga19 ensures that contractual data transfer agreements meeting NPC standards are in place.
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognize your device on subsequent visits and to store certain preferences or session information. surga19 uses cookies and similar tracking technologies (such as web beacons and local storage) on the Platform.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the surga19 Platform. Instructions for managing cookies in common browsers are available through your browser's help documentation. surga19 does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.
surga19 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | PAGCOR regulatory requirement / AMLA |
| Financial transaction records | 10 years from transaction date | Anti-Money Laundering Act (RA 9160) |
| KYC verification documents | Duration of account + 5 years after closure | PAGCOR / AMLC regulatory requirement |
| Customer support records | 3 years from last interaction | Legitimate interests / dispute resolution |
| Technical and usage logs | 12 months from collection | Security and fraud prevention |
| Marketing consent records | Until consent is withdrawn + 3 years | Legal obligation to demonstrate consent |
Upon expiry of the applicable retention period, surga19 will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.
surga19 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
While surga19 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your surga19 login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by surga19. surga19 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.
Request a copy of the personal data surga19 holds about you, along with information about how it is being used.
Request correction of any inaccurate or incomplete personal data surga19 holds about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Request that surga19 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
Lodge a complaint with the National Privacy Commission (NPC) if you believe surga19 has processed your personal data in violation of the Data Privacy Act.
To exercise any of the above rights, please contact the surga19 Data Protection Officer (DPO) using the contact details provided in Section 15. surga19 will respond to all data subject requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, surga19 may extend this period by a further thirty (30) days, with prior notice to you.
Please note that certain rights are subject to limitations under the Data Privacy Act. For example, the right to erasure does not apply where surga19 is required to retain your data to comply with a legal obligation (such as AMLA record-keeping requirements) or to establish, exercise, or defend a legal claim.
The surga19 Platform is strictly restricted to individuals who are at least twenty-one (21) years of age, in accordance with Philippine law and PAGCOR regulations governing online gambling. surga19 does not knowingly collect personal data from any person under the age of 21.
If surga19 discovers or is notified that personal data has been collected from a person under 21 years of age, surga19 will immediately close the associated account, delete all personal data collected from that individual, and return any deposited funds to the payment source. surga19 will also report the matter to the appropriate Philippine authorities where required by law.
If you are a parent or guardian and believe that your child under 21 has registered on the surga19 Platform, please contact the surga19 DPO immediately using the contact details in Section 15.
surga19 will only send you direct marketing communications — including promotional emails, SMS notifications about bonuses, and in-platform promotional messages — where you have given your explicit consent to receive such communications during the registration process or through your account settings.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent will take effect within five (5) business days. Please note that withdrawing marketing consent does not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.
surga19 does not share your personal data with third-party marketers or permit third parties to use your data for their own marketing purposes. All marketing communications you receive in connection with surga19 will come directly from surga19.
The surga19 Platform may contain links to third-party websites or services. This Privacy Policy applies only to the surga19 Platform and does not extend to any third-party websites or services that may be linked from the Platform. surga19 is not responsible for the privacy practices of any third-party website and recommends that you review the privacy policy of any third-party site you visit.
surga19 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, surga19 will provide reasonable advance notice to registered players via email or an in-platform notification before the changes take effect.
The date of the most recent revision to this Privacy Policy is displayed at the top of this page. surga19 recommends that you review this Privacy Policy periodically. Your continued use of the surga19 Platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.
This Privacy Policy was last reviewed and updated in January 2026. surga19 is committed to keeping this policy current and transparent. If you have questions about any recent changes, please contact our Data Protection Officer.
surga19 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing surga19's compliance with data privacy obligations and for handling data subject requests and complaints.
To exercise your data subject rights, raise a privacy concern, or make a complaint about surga19's data processing practices, please contact the surga19 DPO through the following channels:
surga19 will acknowledge all privacy-related inquiries within three (3) business days and will provide a substantive response within thirty (30) days of receipt.
If you are not satisfied with surga19's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available through official Philippine government channels.
🔒 Your Privacy, Our Priority
Now that you know exactly how surga19 handles your personal data, you can play with full confidence. surga19 is built on transparency, security, and respect for every Filipino player's privacy rights.
21+ Adults 21 and above only. Please play responsibly. ⚠️ Gambling is addictive. Know when to stop.
surga19 – Secure,
Transparent, Filipino-First