Privacy Policy SCR888 – Our Commitment to Protecting Your Data

1 Introduction

SCR888 (scr888.site) takes the privacy of every member and user seriously. As an online casino and Sports Betting platform operating exclusively for the Malaysian market, we are committed to handling your personal data responsibly, transparently, and in accordance with applicable Malaysian law.

This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out in detail how SCR888 collects, stores, uses, discloses and protects the personal information you provide to us when registering for or using SCR888's services.

This document applies to all registered SCR888 members, visitors to our website and any party that interacts with the SCR888 platform or its services. By registering an account or continuing to use our platform after this Privacy Policy has been updated, you are deemed to have read, understood and consented to the data handling practices described herein.

2 Types of Personal Data We Collect

SCR888 only collects personal data that is necessary to provide our platform's services safely and effectively. The categories of data we collect are as follows:

Identity Data:

• Full name as stated on your official Malaysian identification document (MyKad or Passport)
• Date of birth (for age verification – 18 years and above)
• MyKad or passport number (collected during the KYC process where required)

Contact Data:

• An active Malaysian mobile number
• Email address (if provided during registration)

Financial Data:

• Payment method details used – DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks, and other banks)
• Deposit and withdrawal records including date, amount and transaction method
• Bank account number for withdrawal processing (only the last digits are retained in our system once the transaction is complete)

Platform Activity Data:

• Gaming records, including game types played, bet amounts, and game outcomes
• Sports betting records, including selected markets and stake amounts
• Bonus and promotion claim history
• Active session timestamps and session duration logs

Technical Data:

• IP address of the device used
• Web browser type and operating system
• Cookie and similar tracking technology data (see Section 9)
• Device information, including phone model and operating system version

3 How We Collect Your Personal Data

SCR888 collects your personal data through several different channels depending on how you interact with our platform:

• During Registration: When you register a new SCR888 account, you directly provide us with your name, phone number, and password.
• During the KYC Process: For identity verification on your first withdrawal or large withdrawal amounts, we may request additional identification documents.
• During Financial Transactions: Every time you make a deposit via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, or FPX, or submit a withdrawal request to your bank account, your transaction details are collected automatically.
• While Using the Platform: All gaming activity, betting actions, and platform interactions are automatically recorded for security purposes, dispute resolution, and service improvement.
• Via Cookies & Similar Technologies: When you browse the SCR888 website, cookies and tracking technologies collect technical data about your device and browsing behaviour.
• Via Customer Support Interactions: Every time you contact our support team via live chat or email, the conversation record is retained for quality and training purposes.

4 How We Use Your Personal Data

SCR888 uses collected personal data solely for legitimate purposes directly related to the provision of our platform services. The primary purposes are as follows:

• Account Management: Creating and managing your member account, including identity verification, password setup and profile updates.
• Transaction Processing: Processing deposits and withdrawals securely and efficiently via your preferred Malaysian payment method.
• Provision of Gaming Services: Enabling you to access and enjoy all casino games, slots, live casino, sports betting on football, badminton, e-sports and all other services available on the SCR888 platform.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, the use of multiple accounts and any misuse of the platform that could compromise the safety of other members.
• Legal Compliance: Complying with Malaysian legal requirements, including anti-money laundering (AML) and know your customer (KYC) obligations as prescribed by the relevant authorities.
• Service Communications: Sending you important notifications about your account, policy changes, security updates and transaction information via SMS or email.
• Marketing (With Consent): Sending you information about SCR888's latest promotions, bonuses and offers — only where you have given consent to receive marketing communications.
• Platform Improvement: Analysing aggregated usage data (in non-identifiable form) to improve the SCR888 platform's interface, performance, and content.
• Dispute Resolution: Using activity records as evidence to fairly resolve any disputes relating to transactions or game outcomes.

5 Sharing of Personal Data

SCR888 takes a highly cautious approach to sharing members' personal data. We do not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, in certain limited and legitimate situations, we may need to share your personal data with the following parties:

• Payment Service Providers: E-wallet and online banking service providers — including DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX — for the purpose of processing your financial transactions. Data sharing is kept to a minimum and limited strictly to transaction purposes.
• Game Providers: Game providers that partner with SCR888 may receive the minimum data required to ensure games run correctly and securely. These providers are held to the same privacy standards as SCR888.
• Legal Authorities: Where required by Malaysian law, a court order or a legitimate request from a competent law enforcement agency, SCR888 may need to disclose certain personal data. We will notify you of any such disclosure to the extent permitted by law.
• Independent Auditors: Qualified third-party auditors conducting security checks, game fairness reviews or compliance assessments may access the data required solely for audit purposes, subject to strict confidentiality agreements.

In all data-sharing situations described above, SCR888 ensures that receiving parties are bound by confidentiality obligations equal to or stricter than our own standards. We will not permit any third party to use your personal data for their own purposes beyond the stated scope.

6 Data Security Measures

Protecting the personal data of SCR888 members from unauthorised access, disclosure, alteration, or destruction is our absolute priority. We implement multiple layers of technical and organisational security measures to this end:

• 256-bit SSL Encryption: All data transmitted between your browser and SCR888's servers is encrypted using 256-bit TLS/SSL protocol — the same industry standard used by Malaysia's leading banking institutions.
• Secure Data Storage: Members' personal data is stored on servers protected by multi-layered access controls, enterprise-grade firewalls and intrusion detection systems.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of security on their accounts. All staff access to data systems also requires 2FA.
• Internal Access Controls: Access to members' personal data is restricted to SCR888 staff who require it to perform their duties only, in accordance with the least privilege principle.
• Regular Security Audits: SCR888 conducts regular internal and independent security audits to identify and address any vulnerabilities within our security systems.
• 24/7 Monitoring: Our security monitoring systems operate around the clock to detect and respond to any threats or suspicious activity promptly.

7 Data Retention & Deletion

SCR888 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by Malaysian law, whichever is longer.

In general, data retention periods are as follows:

• Active Account Data: Throughout the period your account remains active with SCR888, and for a defined period following account closure, for audit and legal compliance purposes.
• Financial Transaction Records: Minimum 7 years from the date of transaction, in accordance with Malaysian accounting and anti-money laundering legal requirements.
• Security Logs: Up to 2 years from the date the log was recorded, for the purposes of security investigations and dispute resolution.
• Marketing Data (with Consent): Until you withdraw your consent to receive marketing communications from SCR888.
• Cookie Data: In accordance with the specific retention period for each cookie type as stated in Section 9 of this document.

Once the specified retention period has lapsed and there is no legal requirement to retain the data further, SCR888 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or traced back to you.

8 Your Personal Data Rights

As a data subject under Malaysia's PDPA, you hold the following rights in relation to the personal data SCR888 holds about you:

• Right to Access: You have the right to request and receive a copy of the personal data we hold about you. All such requests will be processed within 14 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You may also update your basic profile information directly through your account settings.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Please note, however, that we may need to retain certain data for legal reasons or legitimate operational requirements.
• Right to Opt Out of Marketing: You may withdraw your consent to receive marketing communications from SCR888 at any time by contacting us or using the unsubscribe option in our marketing emails.
• Right to Lodge a Complaint: If you believe SCR888 has violated your privacy rights under Malaysia's PDPA, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the SCR888 data protection team by email at support@scr888.site by clearly stating the type of request and providing the information needed to verify your identity. We will acknowledge receipt of your request within 3 business days and complete it within 14 business days.

9 Cookies & Tracking Technologies

The SCR888 website uses cookies and similar tracking technologies to enhance the user experience, maintain session security and analyse usage patterns on our platform. The types of cookies we use are as follows:

You can manage your cookie preferences through your web browser. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the SCR888 platform. Cookies required for security cannot be turned off without impacting your ability to log in to your account.

10 Protection of Children's Data

SCR888 is an entertainment platform for adults only. We do not knowingly collect or process the personal data of any individual under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will immediately take the following steps:

• Immediate closure of the relevant account
• Permanently delete all personal data belonging to that individual from our systems
• Cancel all transactions and return any remaining balance via an appropriate method
• Reporting incidents to the relevant authorities where required

If you are a parent or guardian and believe your underage child has registered an account with SCR888, please contact us immediately at support@scr888.site. We will take the appropriate action within 24 hours of receiving your report.

11 Amendments to the Privacy Policy

SCR888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, updates to Malaysian law or developments in the industry. All amendments will be communicated to members through one or more of the following methods:

• In-platform notifications on SCR888 when you log in after an amendment has been made
• Email or SMS to the address or phone number registered to your account
• Updating the "Updated" date at the top of this document

Material or significant amendments will be communicated at least 14 days before taking effect, giving you sufficient time to read and understand the changes. Minor amendments such as spelling corrections or clarifications that do not alter the original meaning may take effect immediately.

By continuing to use the SCR888 platform after an updated Privacy Policy takes effect, you are considered to have accepted the changes. If you do not agree with any amendments, you should stop using the platform and contact us to close your account before the amendments take effect.

The latest version of this Privacy Policy is always available on this page and is clearly dated. We recommend checking this page periodically. Previous versions can be requested via email at support@scr888.site if needed for reference.

12 Contact Us About Your Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by SCR888, we encourage you to reach out to us directly. Our data protection team is ready to assist you.