Privacy Policy

Scrplay888 ("we", "us", "our", "the Platform") takes the privacy of its Members very seriously. This Privacy Policy ("Policy") describes the categories of personal data we collect from you, the purposes for which we process that data, the parties with whom we may share it, and the rights you hold in relation to your personal information.

This Policy applies to all personal data processed by Scrplay888 in connection with your use of the gaming and sports betting platform at scrplay888.cam, including any associated mobile interfaces, customer support channels, and promotional communications. It applies to all registered Members and visitors regardless of their location within Malaysia — including users from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions.

By registering an account or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood its contents. This Policy should be read together with Scrplay888's Terms and Conditions and Responsible Gambling Policy.

For the purposes of applicable data protection legislation, Scrplay888 acts as the Data Controller in respect of the personal data it collects from Members and Platform visitors. As the Data Controller, Scrplay888 determines the purposes for which personal data is processed and the manner in which such processing is carried out.

Queries regarding data processing, requests to exercise data subject rights, and formal complaints relating to this Policy should be directed to the Scrplay888 data protection contact as set out in Section 15 of this Policy.

Scrplay888 collects the following categories of personal data from Members and Platform users:

We collect personal data through the following means:

• Direct Provision: Data you submit voluntarily during account registration, the KYC verification process, deposit and withdrawal requests, contact form submissions, or live chat interactions.
• Automated Collection: Technical and usage data gathered automatically via cookies, web server logs, and tracking pixels when you access and navigate the Platform.
• Payment Processors: Transaction confirmation data received from Malaysian payment service providers including FPX, DuitNow, Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, and Mastercard.
• Identity Verification Services: Data returned by third-party KYC providers used to verify identity documents such as MyKad, passport, and proof of address.
• Fraud Prevention Services: Risk signal data from anti-fraud and anti-money-laundering screening services used to protect the integrity of the Platform.
• Analytics Providers: Aggregated and anonymised platform usage statistics derived from analytics tools operating within the Platform environment.

Scrplay888 processes your personal data for the following specific purposes:

• Account Management: Creating, verifying, maintaining, and administering your Member account, including management of your MYR wallet balance and transaction records.
• Identity Verification (KYC): Confirming your identity and age (21+) prior to enabling withdrawals and ensuring compliance with responsible gambling obligations.
• Payment Processing: Facilitating MYR deposits and withdrawals via your chosen payment method, including e-wallets and bank transfers.
• Service Delivery: Providing access to live casino, sports betting (EPL, Liga Super Malaysia, UFC, etc.), slot games, and other Platform features.
• Customer Support: Responding to account queries, processing complaints, and resolving disputes submitted via live chat or email.
• Legal Compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory reporting obligations as required.
• Fraud Prevention and Security: Detecting and preventing fraud, multi-accounting, bonus abuse, money laundering, and other prohibited conduct under the Terms and Conditions.
• Responsible Gambling: Implementing and monitoring deposit limits, loss limits, cooling-off periods, and self-exclusion requests.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates to Members who have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, user interface, game selection, and overall Member experience.

Scrplay888 processes your personal data on the following legal bases, applied as relevant to each specific processing activity:

• Contractual Necessity: Processing required to perform the contract with you — including account operation, payment processing, and service delivery — forms the primary legal basis for most core data activities.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC obligations, AML reporting, and age verification requirements.
• Legitimate Interests: Processing carried out in pursuit of Scrplay888's legitimate business interests, including fraud prevention, platform security, and analytics — provided these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Scrplay888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share personal data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: Transaction data shared with Malaysian payment processors (including FPX, DuitNow, Touch n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) to facilitate deposits and withdrawals.
• Identity Verification Partners: Identity document data shared with KYC service providers for the purpose of age and identity verification as required prior to withdrawal processing.
• Fraud and AML Screening: Relevant account and transaction data shared with fraud prevention and anti-money laundering screening services for risk assessment purposes.
• Technology and Infrastructure Providers: Platform hosting, database management, and technical support service providers who process data solely on Scrplay888's documented instructions under confidentiality obligations.
• Game Studio Partners: Limited session and technical data shared with licensed game content providers to facilitate game delivery, RNG integrity verification, and dispute resolution.
• Regulatory and Law Enforcement Authorities: Personal data disclosed to competent authorities where required by applicable law, court order, or binding regulatory direction — without prior notice to you where legally required or permitted.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of Scrplay888's assets, Member data may be transferred to the acquiring entity subject to equivalent data protection obligations.

Scrplay888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. Specific retention periods applicable to Scrplay888's core data categories are as follows:

• Active Account Data: Retained for the duration of the Member relationship and for a period of five (5) years following account closure, to satisfy AML record-keeping requirements and potential dispute resolution needs.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the date of each transaction, consistent with financial record-keeping obligations.
• KYC Documentation: Retained for five (5) years post-account closure or such longer period as required by applicable AML/CTF regulations.
• Support Communications: Retained for three (3) years from the date of the relevant communication, for quality assurance and dispute resolution purposes.
• Technical and Usage Logs: Retained for up to twelve (12) months in identifiable form, after which data is aggregated and anonymised.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to any minimum statutory retention period.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with Scrplay888's internal data deletion procedures.

Scrplay888 implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption applied to all data transmissions between your device and the Platform.
• Passwords stored exclusively in hashed, salted format using industry-standard cryptographic algorithms. Scrplay888 staff cannot access your plain-text password at any time.
• Role-based access controls ensuring that internal staff can access personal data only to the extent required for their specific job function.
• Two-factor authentication (2FA) available to all Members to protect account access.
• Regular security vulnerability assessments and penetration testing of the Platform infrastructure.
• Isolated database environments and encrypted backups with access restricted to authorised infrastructure personnel.
• Real-time fraud and anomaly detection systems monitoring for suspicious account activity, unusual transaction patterns, and potential account takeover indicators.

Scrplay888 uses cookies and similar tracking technologies (including web beacons and local storage objects) on its Platform to deliver core functionality, improve performance, and personalise your experience. By continuing to use the Platform after being presented with cookie information, you consent to the use of cookies as described in this section.

The following categories of cookies are used on the Scrplay888 Platform:

Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data held by Scrplay888. To exercise any of these rights, please contact us as described in Section 15.

Scrplay888 does not knowingly collect or process personal data belonging to persons under the age of 21. The Platform is strictly prohibited to underage users, and our account registration process includes an age declaration requirement. KYC verification is conducted on all Members prior to withdrawal processing to confirm age eligibility.

If we become aware that personal data has been collected from a person under the age of 21 — whether through false declaration at registration or otherwise — we will take immediate steps to terminate the associated account, securely delete the relevant personal data to the extent permitted by applicable legal obligations, and report the matter as required.

In certain circumstances, the provision of services by our technology and infrastructure partners may involve the transfer of personal data to servers or processing environments located outside of Malaysia. Where such transfers occur, Scrplay888 takes appropriate steps to ensure that the transferred data benefits from a level of protection equivalent to that applied within Malaysia, through contractual safeguards including standard data processing agreements with the relevant service providers.

Scrplay888 does not transfer personal data to jurisdictions that do not provide adequate data protection guarantees without first implementing contractually binding data transfer safeguards. Payment data processed through Malaysian payment providers (FPX, Touch n Go eWallet, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank) remains within the Malaysian domestic financial infrastructure.

Scrplay888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or our data processing practices. All updates will be published on this page with an updated effective date.

Where changes are material — meaning they significantly affect your rights or the way in which we process your personal data — we will provide advance notice via the email address registered to your account or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We recommend reviewing this Policy periodically to remain informed of how your data is being processed.

If you wish to exercise any of your data subject rights, have a question about this Privacy Policy, or wish to raise a formal complaint regarding Scrplay888's data processing practices, please use one of the following contact methods. Email addresses are provided as plain text only and are not clickable links.