Privacy Policy

1.Introduction

scrplay88 ("we", "us", "our", or "the Platform") respects your privacy and is committed to protecting the personal data you provide when using our services. This Privacy Policy sets out how we collect, use, store, share, and safeguard your personal information in connection with your use of the scrplay88 online casino and sports betting platform, accessible at scrplay88.cam.

This Policy applies to all personal data processed by scrplay88 in connection with Malaysian players and users accessing the Platform from within Malaysia or the broader Southeast Asian region. Our Platform is denominated in Malaysian Ringgit (MYR) and supports local payment methods including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, GrabPay, and Boost. Personal data processed in connection with these payment methods is handled as described in this Policy.

By registering an account, making a deposit, or using the scrplay88 Platform in any way, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we collect and process your personal data, you should not use the Platform.

2.Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means scrplay88, the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means any third party that processes personal data on behalf of scrplay88 under a written data processing agreement.
• "User" / "You" means any individual who accesses the Platform or registers an Account with scrplay88.
• "Account" means a registered user account on the scrplay88 Platform.
• "Cookies" means small data files stored on your device by the Platform to enable functionality and analytics.
• "KYC" means Know Your Customer — the identity verification procedures required prior to processing withdrawals or at the Platform's discretion.

3.Data We Collect

3.1 Data You Provide Directly

When you register an Account, make a deposit, contact support, or interact with the Platform, we collect personal data that you provide directly, including:

3.2 Data Collected Automatically

When you access the scrplay88 Platform, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, game sessions initiated, betting history, time spent on the Platform, click patterns, and navigation paths.
• Location Data: General geographic location derived from your IP address (e.g., city-level — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya). We do not collect precise GPS location data.
• Cookie & Tracking Data: Session identifiers, preference cookies, analytics identifiers, and marketing attribution tokens. See Section 7 for full details.

4.Data Processing & Legal Basis

scrplay88 processes your personal data one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and scrplay88, including managing your Account, processing deposits and withdrawals, verifying your identity (KYC), and providing access to games and betting markets.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, responsible gambling compliance, and fraud prevention measures.
• Legitimate Interests: Processing conducted in pursuit of scrplay88's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security, product improvement, and internal analytics.
• Consent: Where you have given explicit consent for a specific processing purpose, such as receiving promotional emails or SMS marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5.How We Use Your Data

scrplay88 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your scrplay88 Account; processing login requests; and managing account settings and preferences.
• Transaction Processing: Handling MYR deposits and withdrawals via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, GrabPay, and Boost; reconciling transaction records; and issuing refunds where applicable.
• Identity Verification (KYC): Verifying your identity, age (confirming you are 21 or above), and the legitimacy of payment methods associated with your Account, in fulfilment of our regulatory and responsible gambling obligations.
• Platform Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, abuse of bonuses, multi-accounting, and other Restricted Activities as defined in our Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance via live chat, email, and messaging platforms.
• Responsible Gambling: Monitoring account activity to identify signs of problem gambling behaviour; enforcing deposit limits, session limits, and self-exclusion requests; and proactively contacting players where risk indicators are identified.
• Personalisation: Tailoring your Platform experience based on your game preferences, betting history, and account tier; delivering relevant promotions and recommendations.
• Marketing Communications: Sending you promotional emails, SMS notifications, and in-platform messages about scrplay88 offers, new games, and sports betting promotions — where you have consented to receive such communications.
• Platform Analytics & Improvement: Analysing aggregated usage data to identify technical issues, improve game performance, and develop new features for Malaysian players.
• Legal Compliance: Meeting obligations under applicable law, responding to regulatory enquiries, and cooperating with lawful requests from competent authorities.

6.Data Sharing & Disclosure

scrplay88 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We may share your personal data with third parties only in the following circumstances:

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to support the operation of the scrplay88 Platform. These providers act as Data Processors under written agreements and may only process your personal data for the specific purposes for which they have been engaged. Categories of service providers include:

• Payment gateway operators and financial institutions facilitating MYR transactions (e.g., FPX network partners, DuitNow infrastructure providers).
• Identity verification and KYC service providers.
• Cloud hosting, database infrastructure, and cybersecurity service providers.
• Customer support platform operators (live chat software, ticketing systems).
• Email and SMS marketing delivery providers, where marketing consent has been obtained.
• Analytics and platform performance monitoring tools.

6.2 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or permitted to do so — including in connection with fraud investigations, anti-money laundering enquiries, or court orders. scrplay88 will endeavour to notify affected users of such disclosures where legally permissible.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of scrplay88's business assets, personal data held by us may be transferred to the acquiring entity. We will notify affected users prior to any such transfer and ensure the receiving party is bound by privacy obligations no less protective than those set out in this Policy.

7.Cookies & Tracking Technologies

The scrplay88 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. The categories of cookies we deploy are as follows:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality. Disabling analytics or marketing cookies will not prevent you from accessing core features.

8.Data Retention

scrplay88 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or accounting obligations. Our standard retention periods are:

• Account Data: Retained for the duration of your active Account, plus a minimum of five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years following the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant support interaction.
• Marketing Data: Retained until you withdraw consent to marketing communications or request erasure, subject to any overiding legal retention obligations.
• Cookie & Analytics Data: Retained in accordance with the durations specified in Section 7.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an individual.

9.Data Security

scrplay88 implements appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the scrplay88 Platform is encrypted using 256-bit SSL/TLS encryption, consistent with banking-grade security standards.
• Encryption at Rest: Sensitive personal data, including identity documents and financial information, is encrypted in our database storage systems.
• Access Controls: Access to personal data within scrplay88 is restricted on a strict need-to-know basis. Staff accessing personal data undergo mandatory data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: Account access is protected by optional two-factor authentication (2FA) for players, and mandatory 2FA for all internal staff systems.
• Security Audits: We conduct regular internal and third-party security assessments, penetration testing, and vulnerability scans to maintain the integrity of our infrastructure.
• Incident Response: We maintain a formal data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, scrplay88 will notify affected users without undue delay, to the extent required by applicable law.

10.User Rights

You have the following rights in relation to your personal data held by scrplay88. These rights may be subject to certain limitations under applicable law, including where processing is required for legal compliance or fraud prevention purposes.

To exercise any of these rights, please contact us via live chat within the scrplay88 Platform or by emailing [email protected]. We will respond to verified requests within a reasonable timeframe, typically within thirty (30) calendar days.

11.Protection of Minors

The scrplay88 Platform is strictly for persons aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. As part of our registration and KYC processes, we verify the age of all players.

If we become aware that a registered Account belongs to a person under the age of 21, we will: (a) immediately suspend the Account; (b) void all associated bets and bonus claims; (c) return any deposited funds net of any withdrawals already processed; and (d) permanently close the Account. Any personal data collected from a minor during the registration process will be securely deleted.

If you believe that a minor has accessed or registered with the scrplay88 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12.Cross-Border Data Transfers

The scrplay88 Platform serves users primarily based in Malaysia. However, as an online platform, some of our service providers and infrastructure partners may operate data centres or process data in jurisdictions outside Malaysia. Where personal data is transferred outside Malaysia, scrplay88 takes appropriate safeguards to ensure that such transfers comply with applicable data protection standards, including:

• Engaging service providers that are contractually bound to data protection standards equivalent to those applied within Malaysia.
• Where applicable, implementing standard contractual clauses or equivalent transfer mechanisms approved under relevant frameworks.
• Selecting cloud infrastructure providers with internationally recognised security certifications (e.g., ISO 27001) and data residency controls where possible.

By using the scrplay88 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

13.Policy Amendments

scrplay88 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered users via the email address associated with your Account or through a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the scrplay88 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we protect your personal data.

14.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by scrplay88, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the scrplay88 Platform — fastest way to reach us for data-related requests.
• Email: [email protected] — for data access requests, erasure requests, and privacy concerns. We aim to respond within 30 calendar days.

When submitting a data request by email, please include your registered username and the email address associated with your scrplay88 Account so that we can verify your identity before processing the request.

This Privacy Policy was last revised on 1 January 2026. Your continued use of the scrplay88 Platform after this date constitutes acceptance of the Policy as revised.