Privacy Policy SCR Casino – Malaysian Player Data Protection

Scr casino is an online entertainment platform built specifically for Malaysian players, offering Sports Betting (Malaysia Super League, EPL, badminton, cricket, e-sports), Live Casino (baccarat, roulette, blackjack), slots and a variety of other table games. In the course of these operations, we collect certain personal data necessary to deliver a smooth, secure and responsible experience to each of our members.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and internationally recognised data protection principles. scr casino regards privacy protection not merely as a legal obligation, but as a moral responsibility to the Malaysian player community that has entrusted us with their personal data.

Scr casino collects only the information genuinely necessary to provide services to you and to fulfil applicable legal obligations. The information we collect can be categorised as follows:

A. Personal Identification Information

• Full name as stated on your MyKad or Malaysian passport
• National identity card number (MyKad) or passport number
• Date of birth and gender
• Malaysian residential address
• Nationality and residency status

B. Contact Information

• An active Malaysian phone number (used for OTP verification)
• A valid, accessible email address
• Username chosen during registration

C. Financial & Transaction Information

• Payment method used (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay)
• Bank account number or eWallet ID (stored in encrypted format)
• Deposit and withdrawal history in Malaysian Ringgit (RM)
• Complete transaction records for all financial activity on the platform

D. Platform Usage Data

• Types of games played (football, baccarat, live casino, slots, and others)
• Betting history and winnings
• Duration and frequency of gaming sessions
• Deposit and betting limits set by the member

E. Technical Data

• Your device's IP address
• Device type (Android, iPhone, computer) and operating system
• Browser type and version
• Cookie and login session data
• General geolocation information (state within Malaysia)

This information is collected through various channels, including registration forms, the KYC (Know Your Customer) process, interactions with the platform during gaming sessions, communications with the scr casino support team, and automatically via tracking technologies such as cookies.

Scr casino uses the personal information collected solely for the following legitimate and stated purposes. We will not use your data for any other purpose without first obtaining your renewed consent:

We analyse usage patterns in aggregate and anonymised form to understand gaming trends among Malaysian players — such as the relative popularity of Super League football betting versus live baccarat — for product improvement purposes. This analysis does not identify any individual member.

Scr casino does not sell, rent, or disclose your personal data to third parties for their own commercial marketing purposes. However, in certain limited and controlled situations, scr casino may share some of your data with the following parties:

• Payment Service Providers: Information required to process deposit and withdrawal transactions is shared with approved payment providers (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay). These providers are bound by strict data protection agreements.
• Game Providers: To enable you to play live casino games such as baccarat and roulette, the minimum session information required is shared with the relevant game providers. These providers are audited and licensed by international gaming regulatory bodies.
• Legal Authorities: scr casino will disclose required information when directed to do so by a court or lawful Malaysian law enforcement authority through proper legal procedure.
• Anti-Fraud Services: Certain information may be shared with licensed fraud prevention and anti-money laundering service providers to meet scr casino's legal compliance obligations.

Scr casino employs multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL Encryption: All data transmitted between your browser or app and scr casino's servers is protected with bank-grade encryption.
• Stored Data Encryption: Sensitive data such as financial information and identification numbers is stored in encrypted form using secure hashing algorithms.
• Two-Factor Authentication (2FA): scr casino provides and actively encourages the use of two-factor authentication for all member accounts.
• 24/7 Monitoring: scr casino's systems are monitored around the clock by a trained cybersecurity team to detect and respond to any threats swiftly.
• Regular Security Audits: scr casino conducts regular independent security audits to identify and address any vulnerabilities in our systems.
• Role-Based Access Control: Only staff with a specific operational need are permitted to access certain data categories, and all such access is recorded.
• Incident Response Plan: scr casino maintains a documented security incident response procedure to ensure any data breach is addressed promptly and that affected members are notified within the timeframe required under Malaysian law.

Scr casino uses cookies and similar tracking technologies to enhance your experience on our platform and to gather analytics data that helps us understand how Malaysian players use our services.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as maintaining login sessions and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymous information about how you use the platform — pages visited, time spent, games played — to help us improve the user experience.
• Functional Cookies: Saves your preferences such as language (Bahasa Melayu) and display settings so you do not have to reconfigure them each time you visit the platform.
• Analytics Cookies: Helps us understand aggregate usage patterns — such as the most popular game categories among Malaysian players — to make better-informed product decisions.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the scr casino platform. Third-party cookies from analytics providers are governed by each respective provider's own privacy policy.

Scr casino pays particular attention to the security of financial data given its sensitivity. All deposit and withdrawal transactions at scr casino are conducted in Malaysian Ringgit (RM) and processed through secure local Malaysian payment methods.

Payment Methods & Data Protection:

• DuitNow: DuitNow transfer information is shared with Bank Negara Malaysia (BNM) through a secure payment network. scr casino does not store your full bank account details.
• FPX (Maybank2u, CIMB Clicks): You are redirected to your own bank's portal for verification — scr casino never sees your online banking password.
• Touch 'n Go eWallet, GrabPay, Boost, ShopeePay: Transactions are processed via the eWallet provider's secure API. eWallet account details are stored in encrypted form and used only for transactions you initiate.

A complete record of all financial transactions on your scr casino account is accessible at any time through the "Transaction History" section of your account. These records are retained for the period required under Malaysian laws governing financial record-keeping and anti-money laundering.

Scr casino does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Identity & Account Data: Retained for the duration of your active membership and for up to 7 years after account closure to meet Malaysian audit and legal compliance requirements.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
• Platform Usage Data: Retained for 2 years for analytics and product improvement purposes, after which it is aggregated and anonymised.
• Support Communication Logs: Live chat history and emails with the scr casino support team are retained for 2 years for quality control and dispute resolution purposes.
• Cookie Data: It depends on the type of cookie — session cookies are deleted as soon as you close your browser, while persistent cookies are stored for a set period (typically between 30 and 365 days).

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered by any party.

As a scr casino member and as an individual protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Requests can be submitted by email to support@scrcasino.com and will be processed within 14 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request an immediate correction. You may also update certain information directly through your scr casino account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, when it is no longer needed for the original purpose of collection. However, this right is subject to statutory retention obligations binding on scr casino.
• Right to Withdraw Consent: Where the processing of your data is based on consent (such as opting in to receive promotional emails), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.
• Right to Object: You may object to your data being processed for direct marketing purposes. Simply click "Unsubscribe" in any scr casino marketing email or reach out to our support team.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider, to the extent technically feasible.

Scr casino strictly prohibits use of the platform by individuals under the age of 21. Our platform is not designed for children or minors, and we do not knowingly collect personal data from any individual under the age of 21.

Scr casino enforces a strict age verification process as part of KYC procedures during registration and prior to processing any withdrawals. Should we find that data belonging to a minor has been collected without valid consent, we will:

• Suspend the account in question immediately
• Delete all associated personal data without delay
• Withhold any balance or winnings associated with the account
• Report the incident to the relevant authorities where required

Scr casino reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, updates to applicable Malaysian law, or developments in the services we offer. Any amendments will be communicated to members through the following channels:

• Email notifications sent to the registered address of all active members
• In-platform pop-up notification on scr casino upon login after an amendment takes effect
• Update of the "Last Updated" date at the top of this Privacy Policy

Material amendments will be notified at least 14 days before taking effect. Continued use of the scr casino platform after the amendment's effective date constitutes your acceptance of the updated privacy policy. If you disagree with any amendment, you have the right to close your account before the effective date and request deletion of your data.

The latest version of the scr casino Privacy Policy is always available on this page. We recommend checking back periodically to stay informed about how we handle your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how scr casino handles your personal data, we encourage you to reach out to us directly. Our team is available in Bahasa Melayu 24 hours a day, 7 days a week.

• Privacy Email: support@scrcasino.com (subject: "Privacy Policy Enquiry")
• Live Chat: Accessible directly from the scr casino platform — chat icon at the bottom right corner
• WhatsApp: Available 24/7 with an average response time of under 3 minutes

For requests relating to your privacy rights (access, correction, deletion), please include the following details in your communication: full name, scr casino account number, type of request, and a brief reason for your request. This helps us process your request more quickly and accurately.

Scr casino is committed to acknowledging receipt of every privacy request within 3 business days and resolving requests within 14 business days, in line with the requirements of Malaysia's Personal Data Protection Act 2010.