Privacy Policy SCR888 – Personal Data Protection for Malaysian Players

SCR888 (operated under the domain scr888.xyz, hereinafter referred to as "SCR888", "we" or "the platform") respects the privacy of every player and user on our platform. This Privacy Policy explains how SCR888 collects, uses, discloses and protects your personal information.

As an online Sports Betting and casino platform built specifically for Malaysian players, SCR888 understands that trust is the foundation of our relationship with every member. That trust cannot exist without full transparency about how we handle the information you provide — from your name and phone number at registration, to your deposit transaction records via Touch 'n Go or GrabPay.

This Privacy Policy applies to all users of the SCR888 platform, including registered players, website visitors, and anyone who interacts with our services whether via web browser or mobile app. It should be read together with Terms & Conditions SCR888.

SCR888 collects personal data from several sources and in various situations when you use our platform. Below are the categories of data we collect and why they are needed:

Data you provide directly: This includes information you provide when registering your SCR888 account, during the KYC verification process, when making a deposit via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX, and when contacting our support team.

Automatically collected data: When you use the SCR888 platform, our systems automatically record technical information such as your IP address, device type, and web browser. This data is used primarily for security and fraud prevention purposes.

SCR888 uses the personal data collected for the following purposes, all aimed at providing a better, safer and more relevant gaming experience for players in Malaysia:

• Account management: Creating and managing your SCR888 account, processing registrations, verifying identity and age, and updating account information.
• Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, processing winnings withdrawals to your Malaysian bank account or e-wallet, and maintaining accurate financial records.
• Service providers: Enables you to access all features on the SCR888 platform, including Sports Betting on the Malaysia Super League, EPL and badminton, live casino baccarat and roulette, and virtual sports.
• Security and fraud prevention: Detecting and preventing unauthorised access to your account, identifying fraudulent activity, multiple account usage and bonus system abuse.
• Customer support: Provides relevant assistance when you contact SCR888's Malay-language support team via email or Live Chat.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may need support.
• Marketing communications: Sending you information about SCR888 promotions, bonuses, and offers that may be relevant to you — you may opt out of these communications at any time.
• Platform improvements: Analysing usage patterns on an aggregate (not individual) basis to improve platform design, introduce new features, and ensure optimal performance.

SCR888 will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent.

SCR888 does not sell, rent or trade your personal data to any third party for their own marketing purposes. This is a commitment we do not compromise on.

However, in the following limited circumstances, SCR888 may need to share your personal data with selected third parties:

• Payment service providers: To process your deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, the necessary transaction details are shared with the respective payment providers. They are governed by their own privacy policies and are not permitted to use your data for any other purpose.
• Live casino providers: To operate SCR888's live casino tables, minimal session information is shared with providers such as Evolution Gaming, Pragmatic Play Live and SA Gaming. This is strictly limited to the data required to run the games.
• Legal authority: Where required by Malaysian law or a valid court order, SCR888 may disclose the necessary data to the relevant authorities. SCR888 will notify you of any such disclosure unless prohibited by law.
• Fraud prevention: In cases of suspected fraud or illegal activity, SCR888 may share relevant information with the appropriate authorities or industry fraud prevention agencies.

SCR888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. This is not just talk — it is real infrastructure that we build and maintain every day.

• 256-bit SSL encryption: All communications between your device and SCR888 servers are encrypted using 256-bit SSL – the same standard used by major Malaysian banks such as Maybank and CIMB. This means all transmitted data, including login credentials and transaction details, cannot be accessed by unauthorised parties.
• Database encryption: Sensitive data stored in SCR888's databases, including financial information and personal identification details, is encrypted using the strongest current encryption standards. Your password is never stored in a readable form.
• 24/7 security monitoring: SCR888's systems are continuously monitored around the clock by a security team to detect any suspicious activity, intrusion attempts or unauthorised access.
• Two-factor authentication: SCR888 offers two-factor authentication (2FA) to all players as an additional layer of protection. We encourage all players to enable 2FA from their account settings.
• Periodic security assessments: The SCR888 platform undergoes regular security assessments and audits conducted by independent third parties to identify and address any potential vulnerabilities.
• Internal access controls: Only SCR888 staff who require access to specific data to perform their duties are permitted to do so. All access is logged and monitored.

While SCR888 implements all reasonable security measures, no system can guarantee 100% absolute security. If you suspect your account has been compromised or notice any suspicious activity, please contact SCR888's support team at support@scr888.xyz immediately.

SCR888 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit the SCR888 platform.

• Essential cookies (required): These cookies are required for the SCR888 platform to function properly. Without them, core features such as login, navigation between live casino tables and bet processing cannot operate. These cookies cannot be disabled.
• Performance cookies: These cookies help us understand how players use the platform — which pages are visited most, how long players spend at particular live casino tables, and where technical issues may arise. All data is collected in aggregate form and does not identify individuals.
• Preference cookies: These cookies store your personal settings, such as your preferred language, default chip size in the Live Casino, and other display preferences, so you don't have to reconfigure them each time you use SCR888.
• Session cookies: Used to maintain your login session while you are using the SCR888 platform. This cookie is automatically deleted when you close your web browser.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the SCR888 platform. For more information on how to manage cookies on your device, refer to your web browser's help documentation.

SCR888 recognises and respects your rights over your personal data. As an SCR888 player, you hold the following rights, which you may exercise at any time by contacting us at support@scr888.xyz:

To exercise any of the above rights, contact the SCR888 support team at support@scr888.xyz with the email subject "Privacy Rights Request". We will respond within 14 business days. For complex cases, this period may be extended to up to 30 days, with prior notice to you.

SCR888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory requirements.

• Active account data: For as long as your SCR888 account remains active, and for a reasonable period following account closure to fulfil any applicable legal obligations.
• Financial transaction records: Deposit, withdrawal and transaction records are retained for the minimum period required under applicable Malaysian financial regulations – generally at least 7 years.
• Support communication records: Correspondence records with the SCR888 support team are retained for 3 years to allow reference in the event of any dispute or claim.
• Security log data: Access logs and technical security data are retained for 12 months for fraud detection and security analysis purposes.
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies are stored for the duration specified for each cookie, typically ranging from 30 days to 2 years.

Once the relevant retention period has expired, SCR888 will securely delete or anonymise your personal data using appropriate methods to prevent recovery or reuse.

SCR888 is an entertainment platform for adults aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18.

SCR888 employs multiple age verification mechanisms, including date-of-birth checks at registration and KYC verification processes, to ensure all players meet the minimum age requirement. Should we discover that personal data of an underage individual has been inadvertently collected, we will delete that data immediately and close the account in question.

SCR888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. All amendments will be posted on this page with the latest update date clearly indicated.

For material amendments – meaning changes that significantly affect how we use your personal data – SCR888 will endeavour to provide advance notice via email to the address registered to your account, or through an in-platform notification, before the changes take effect.

Continued use of the SCR888 platform after any amendments to this Privacy Policy are published will be considered acceptance of those changes. We encourage you to review this page periodically to stay informed on how we protect your privacy.

If you have any questions, concerns, or requests regarding SCR888's Privacy Policy or how we handle your personal data, our team is ready to assist you. All privacy-related enquiries are handled with the utmost priority and confidentiality.

• Email: support@scr888.xyz – use the subject line "Privacy Enquiry" to ensure your request reaches the right team.
• Live Chat: Available 24/7 via the SCR888 platform for privacy enquiries that require an immediate response.
• Response time: SCR888 is committed to responding to all privacy-related inquiries within 2 business days. Requests relating to player rights (access, correction, deletion) will be processed within 14 business days.

SCR888's Bahasa Melayu-speaking support team is ready to help you understand your privacy rights and process any personal data requests quickly and professionally. Your privacy is our priority — not just a formality.