How Surge Handles Privacy and Personal Data
The Scope of Our Privacy Commitments
Surge handles personal information in connection with the operation of its services and interactions with users in Australia. This Privacy Policy describes the types of information that may be obtained, the purposes for which it may be used, and the circumstances in which it may be disclosed.
The information involved depends on how a person interacts with Surge. Some data is provided directly, while other information may be generated through account activity, devices, technical systems, or communications.
We handle personal data in accordance with applicable requirements and apply the principles described in this policy to information associated with our users.
Information Connected With Your Account
When an account is created or maintained, Surge may receive information such as a name, contact details, date of birth, account credentials, transaction-related information, and other details necessary for the services being used.
Additional information may be requested where identity, age, security, fraud prevention, responsible gambling, or other compliance checks are relevant. The information requested can depend on the circumstances and requirements applicable to the account.
If you contact Surge, we may also retain the information contained in your communication, together with details needed to respond to your request or maintain a record of the interaction.
Technical Information We Receive
Some information is collected automatically when our websites or digital services are accessed.
This may include an IP address, browser type, operating system, device characteristics, language settings, approximate location information, access times, pages or functions used, and technical event data. The specific information available to us can vary according to the device, browser, settings, and services involved.
Technical information may be used to operate our systems, maintain functionality, investigate errors, protect accounts, detect unusual activity, and understand how our services are being used.
How Surge Uses Personal Data
Surge may use personal information for purposes connected with providing and administering its services. These purposes can include creating and maintaining accounts, communicating with users, processing relevant transactions, responding to enquiries, and maintaining the technical operation of our systems.
Information may also be used for identity and age checks, fraud prevention, security monitoring, responsible gambling measures, dispute handling, and compliance with applicable legal or regulatory requirements.
Where communications or marketing are available, personal data may be used to manage those communications in accordance with applicable requirements and the preferences associated with the relevant account.
We do not treat every piece of information as having the same purpose. Data is handled according to the circumstances in which it was obtained and the reason it is required.
Surge, Verification and Account Protection
Certain account activities may require additional information or verification. This can occur where we need to confirm identity or age, protect an account, prevent misuse, investigate suspicious activity, or meet applicable obligations.
Information relevant to these processes may be reviewed internally or shared with appropriate service providers where necessary for the particular purpose.
We may also use information to identify patterns associated with fraud, unauthorised access, multiple-account activity, or other activity that could affect the security and integrity of our services.
When Information Is Shared
Surge may disclose personal information where doing so is necessary for the operation of our services or permitted or required by applicable law.
Depending on the circumstances, recipients may include companies providing technology, hosting, payment-related, identity verification, security, customer support, analytics, or other operational services. Such providers may receive only the information relevant to the services they perform for us.
Information may also be disclosed to competent authorities, regulators, courts, professional advisers, or other parties where disclosure is legally required or reasonably necessary to protect our rights, users, systems, or property.
Where services involve organisations located in another country, personal information may be processed or accessed internationally. The applicable arrangements depend on the service and the circumstances of the transfer.
Keeping Personal Data Secure and Available
We use administrative, technical, and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss, or misuse.
No online system can be treated as completely free from security risks. We therefore review and maintain our safeguards as part of the ongoing operation of Surge rather than treating security as a one-time measure.
Personal information is retained only for as long as it is reasonably required for the relevant purpose, subject to legal, regulatory, security, dispute-resolution, and operational requirements. The appropriate retention period can therefore vary depending on the type of information and the circumstances in which it was collected.
Cookies and Similar Technologies
Surge may use cookies and comparable technologies to support website functionality, remember certain settings, maintain sessions, understand technical activity, and analyse how our services are accessed.
The information obtained through these technologies can vary according to the technology being used and the relevant settings. Browser or device controls may allow users to manage certain cookies, although restricting them can affect the availability or operation of some website functions.
Where consent or another form of user choice is required for a particular technology, the applicable controls may be presented through the relevant website or service.
Your Privacy Choices in Australia
Depending on the circumstances and applicable law, users in Australia may have rights concerning personal information held by Surge. These may include requesting access to personal information, seeking correction of inaccurate information, or raising a concern about the way information has been handled.
Requests are considered according to the information available, the nature of the request, and any legal or regulatory requirements that apply. We may need to verify the identity of the person making a request before providing access to personal information or making changes.
Some information may need to be retained even where a user requests deletion or restriction, including where retention is required or permitted for legal, regulatory, security, or other legitimate purposes.
Contacting Surge About Privacy
Questions, concerns, or requests relating to personal information can be directed to Surge through the contact channels made available by the service.
When contacting us about privacy, providing enough information to identify the relevant account or request can help us respond appropriately. We may ask for additional information where reasonably necessary to verify identity or understand the matter being raised.
If our privacy practices or the services we provide change, this policy may also be updated to reflect those changes. The version published by Surge should be considered the applicable version for the relevant period.