Privacy Policy scrplay2 – Malaysia Personal Data Protection

This Privacy Policy describes the privacy practices of scrplay2 ("Company", "We") in relation to the collection, use, disclosure, storage and protection of personal information you provide to us when using our online casino platform at scrplay2.bet.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in commercial transactions in Malaysia. We take this responsibility seriously because we understand that your trust is the most valuable asset to scrplay2.

This policy applies to all users of the scrplay2 — including website visitors, registered members, active players, and former members. This covers all data collected through our website, mobile app, email communications, live chat, WhatsApp, and any other channels we operate.

By using the scrplay2 platform scrplay2, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of our platform and contact us to request deletion of your data.

scrplay2 collects various types of information for different purposes. Below is a full breakdown of the information we may collect from you:

We may also receive information about you from authorised third-party sources, such as identity verification providers or fraud prevention agencies we work with, strictly for legal compliance purposes.

scrplay2 uses the personal information collected for the following purposes, and only for these purposes:

• Account Management: Creating, verifying and managing your scrplay2 account, including the age and identity verification required by law.
• Payment Processing: Processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and manages withdrawals to your Malaysian bank account.
• Legal Compliance: To fulfil legal obligations under the PDPA 2010, Anti-Money Laundering (AML), and Counter Financing of Terrorism (CFT) requirements applicable in Malaysia.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, player collusion, and any other unauthorised use of the platform.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support, and enforcing limits you have set for yourself.
• Customer Support: Provides assistance and support in Bahasa Melayu whenever you reach our team via live chat, WhatsApp or email.
• Service Communications: Sends important account-related notifications such as transaction confirmations, security alerts and policy updates.
• Platform Improvements: Analyses anonymised usage data to improve the gaming experience, platform performance and content relevance.
• Marketing (With Consent): Sending promotional offers, bonuses, and new game updates exclusively to members who have given explicit consent to receive marketing communications.

scrplay2 will not use your information for any purpose beyond those stated above without first obtaining your fresh consent.

Your privacy is our priority scrplay2. We does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Trusted Service Providers: We share necessary data with third-party service providers who help us operate the platform — including payment processors (FPX gateway, Touch 'n Go), cloud service providers and KYC verification companies. All providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.
• Legal Obligations: scrplay2 may disclose your personal information to the relevant Malaysian authorities when required by law, including in response to court orders, subpoenas, or legitimate investigation requests.
• Rights & Safety Protection: We may disclose information where we have a good-faith belief that such disclosure is necessary to protect the rights, property, or safety of scrplay2, our members, or the public.
• Business Transfers: In the event of a merger, acquisition or sale of company assets, user information may be transferred to the parties involved. We will notify you before your data becomes subject to a different privacy policy.

scrplay2 implements comprehensive technical and organisational security measures to protect your personal information against unauthorised access, misuse, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your device and scrplay2 servers are encrypted using TLS 1.3 protocol with AES-256 encryption.
• Stored Data Encryption: Sensitive data such as financial details and identity information is encrypted at rest within our databases.
• Two-Factor Authentication (2FA): We provide and encourage the use of 2FA for all scrplay2 member accounts as an added layer of protection against unauthorised access.
• Internal Access Controls: Only scrplay2 staff who require access to specific data in order to carry out their assigned duties are authorised to do so. All access is logged and monitored.
• 24/7 Monitoring: The scrplay2 security team continuously monitors our platform and infrastructure for any threats or suspicious activity.
• Regular Security Audits: We conduct regular vulnerability assessments and penetration testing to identify and address potential security risks.
• Incident Response Plan: scrplay2 has a formal procedure for handling data breaches. In the event of a serious breach, we will notify affected users within 72 hours.

scrplay2 retains your personal information only for as long as necessary to fulfil the purpose of collection, or as required under applicable Malaysian law:

• Active Account Data: Retained for the duration your account remains active and for any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian legal requirements relating to financial records and AML/CFT compliance.
• KYC Data (Identity Verification): Retained for the duration of the active account period plus five (5) years after account closure, or longer if required by applicable legislation.
• Communication Logs (Customer Support): Retained for two (2) years from the date of communication for reference and dispute resolution purposes.
• Game Data: Retained for the duration of the active account and two (2) years after account closure for responsible gambling compliance and audit purposes.
• Technical Log Data: Security and system access logs are retained for a maximum of 12 months.

Once the retention period expires, we will securely delete or anonymise your data in accordance with industry standards. You may request details on the specific retention period for a particular data category by contacting our Privacy Officer.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information held by scrplay2:

To exercise any of the rights above, submit a written request to our Privacy Officer at privacy@scrplay2.bet. Requests will be processed within 21 business days. We may require identity verification before processing your request in order to protect your privacy.

Platform scrplay2 uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies we use:

You can manage cookies through your browser settings. However, disabling essential cookies may impair core platform functionality scrplay2 and you may be unable to log in or use certain features.

scrplay2 strictly prohibits individuals under the age of 18 from using our platform. This platform is not designed for or directed at children or minors.

We do not knowingly collect personal information from individuals under the age of 18. If we discover that we have inadvertently collected information from a minor, we will take immediate steps to delete that information and close the associated account.

If you believe a child has registered an account or provided personal information to scrplay2, please contact us immediately at privacy@scrplay2.bet so that we may take the appropriate action.

scrplay2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform improvements.

For any material amendments — that is, changes that significantly affect how we use your personal information — we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered members scrplay2 at least 14 days before the changes take effect.
• Displaying a prominent notice on our platform's main page.

Continued use of the platform scrplay2 continued use of the platform after an amended Privacy Policy takes effect constitutes acceptance of the revised policy. If you do not agree with the amendments, you have the right to close your account and request deletion of your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal information by scrplay2, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: privacy@scrplay2.bet
• General Support Email: support@scrplay2.bet
• Live Chat: Available 24/7 on the scrplay2 platform (select "Privacy & Data" under the support category)

We are committed to addressing all privacy complaints seriously and within a reasonable timeframe. All data rights requests will be processed within 21 business days of receipt.

If you feel that your complaint has not been handled to your satisfaction by scrplay2, you have the right to lodge a formal complaint with the Department of Personal Data Protection (JPDP) Malaysia.