scrplay1 Privacy Policy – How We Handle Your Data

1. About This Policy

1.1 scrplay1 is committed to handling the personal data of its players, visitors, and prospective players with transparency, integrity, and in accordance with applicable data protection law. This Policy sets out the basis on which personal data collected from you — or that you provide to us — will be processed by scrplay1.

1.2 This Policy should be read alongside scrplay1's Terms and Conditions, which govern your use of the platform as a whole. In the event of a conflict between this Policy and the Terms, the Terms shall prevail except where this Policy expressly addresses a data protection matter.

1.3 The scrplay1 platform is operated for players in Malaysia and other permitted jurisdictions. If you are accessing scrplay1 from outside Malaysia, please be aware that your data may be processed in a different jurisdiction with different data protection laws to your own.

2. Data We Collect

scrplay1 collects personal data in the following categories:

• Registration Data: Full name, date of birth, nationality, email address, mobile number, and residential address provided when you create a scrplay1 account.
• Identity Verification Data: Copies of government-issued identity documents (e.g., MyKad, passport), selfie photographs, and proof of address documents submitted as part of the KYC process.
• Financial Data: Payment method details (e.g., bank account number, e-wallet account identifier), transaction history, deposit amounts, withdrawal requests, and balance information.
• Gaming Activity Data: Records of bets placed, games played, session durations, win/loss history, and bonus usage across the scrplay1 platform.
• Device & Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and unique device identifiers collected automatically when you access scrplay1.
• Communication Data: Records of your interactions with scrplay1 customer support, including live chat transcripts, emails, and any feedback submitted through the platform.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications from scrplay1 by email, SMS, or push notification.

3. How We Use Your Data

scrplay1 uses personal data for the following purposes:

• Account Management: To create and maintain your scrplay1 account, verify your identity, and facilitate login and authentication.
• Service Delivery: To process deposits and withdrawals in MYR, credit bonus amounts, settle bets, and provide access to all features of the scrplay1 platform.
• Legal & Regulatory Compliance: To fulfil obligations under applicable anti-money-laundering (AML) law, gaming regulations, and international data protection standards, including KYC verification, transaction monitoring, and suspicious activity reporting.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, and other conduct that breaches scrplay1's Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and improve the quality of our support service.
• Responsible Gaming: To identify patterns of play that may indicate problem gambling, to enforce self-exclusion requests, and to monitor compliance with deposit and loss limits set by players on the scrplay1 platform.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve game selection, interface design, loading performance, and overall player experience on scrplay1.
• Marketing (where consent given): To send you information about scrplay1 promotions, bonuses, new game releases, and platform updates via email, SMS, or push notification, where you have opted in to receive such communications.

4. Legal Basis for Processing

4.1 Contractual Necessity. The majority of scrplay1's data processing is necessary to perform the contract between you and scrplay1 — specifically, to operate your account, process transactions, and provide access to the platform's games and services.

4.2 Legal Obligation. Certain processing activities — particularly KYC verification, AML transaction monitoring, and record-keeping — are carried out to comply with legal obligations applicable to scrplay1 as a gaming operator.

4.3 Legitimate Interests. scrplay1 processes certain data (such as device fingerprinting and login history) on the basis of its legitimate interest in maintaining the security of the platform and protecting both scrplay1 and its players from fraud.

4.4 Consent. Where scrplay1 relies on your consent as the basis for processing — in particular, for sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

5.1 scrplay1 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. scrplay1 may share your personal data with the following categories of recipient solely as necessary to deliver its services or comply with its legal obligations:

• Payment Processors: Malaysian e-wallet providers (e.g., Touch n Go eWallet, Boost) and banking partners involved in processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers engaged by scrplay1 to verify player identity documents and age.
• Game Providers: Software providers whose games are hosted on the scrplay1 platform may receive limited gameplay data necessary to operate the games and calculate payouts.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, regulation, or valid legal process, scrplay1 will disclose personal data to the relevant authority.
• Professional Advisors: Legal, accounting, and auditing firms engaged by scrplay1 in connection with specific matters, subject to confidentiality obligations.

5.2 All third-party service providers engaged by scrplay1 are required by contract to handle personal data only as instructed by scrplay1 and in accordance with applicable data protection law.

6. International Data Transfers

6.1 The operation of the scrplay1 platform may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, scrplay1 takes appropriate steps to ensure that your data is protected to a standard equivalent to that required under applicable data protection law, including the use of contractual safeguards where required.

6.2 By using the scrplay1 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this Policy.

7. Data Retention

7.1 scrplay1 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements.

7.2 Account data is retained for the duration of the account relationship and for a period of at least five (5) years thereafter, as required by applicable AML and gaming regulations.

7.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Cookies & Tracking Technologies

8.1 scrplay1 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the operation of the scrplay1 platform, including session management and security functions. These cannot be disabled.
• Functional Cookies: Used to remember your language preferences, display settings, and other personalisation choices.
• Analytics Cookies: Used to understand how players navigate the scrplay1 platform, which features are most used, and where technical errors occur, in order to improve the platform over time.

8.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the scrplay1 platform.

9. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by scrplay1:

• Right of Access: You may request a copy of the personal data scrplay1 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to scrplay1's legal obligations to retain records for AML and regulatory purposes.
• Right to Restrict Processing: You may request that scrplay1 restrict the processing of your data in certain circumstances, such as while a dispute is under investigation.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to scrplay1, where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests, and you have an absolute right to opt out of direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact scrplay1's data team via live chat or email at support@scrplay1.co. We will respond within 30 days of receiving a verified request.

10. Security Measures

10.1 scrplay1 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include TLS encryption for data in transit, encryption-at-rest for sensitive fields, role-based access controls limiting internal access to personal data on a need-to-know basis, and regular third-party security assessments of the scrplay1 platform infrastructure.

10.2 In the event of a data breach that is likely to result in a high risk to the rights and freedoms of affected players, scrplay1 will notify affected players without undue delay and in accordance with its obligations under applicable data protection law.

11. Children & Minors

11.1 The scrplay1 platform is strictly restricted to persons aged 21 and above. scrplay1 does not knowingly collect personal data from individuals under the age of 21. Where scrplay1 becomes aware that personal data has been collected from a minor, it will take immediate steps to delete that data and close the associated account.

11.2 If you are aware of a minor attempting to access or use the scrplay1 platform, please contact us immediately via live chat.

12. Changes to This Policy

12.1 scrplay1 reserves the right to update this Privacy Policy at any time. The current version will always be available at scrplay1.co/privacy-policy with the effective date noted at the top of the page. Where changes are material, scrplay1 will notify registered players via the contact details held on their account. Your continued use of the platform following the effective date of any revision constitutes acceptance of the updated Policy.

13. Contact & Complaints

13.1 If you have any questions about this Privacy Policy or the way scrplay1 handles your personal data, please contact our support team via 24/7 live chat on the scrplay1 platform, or write to us at support@scrplay1.co.

13.2 If you are not satisfied with scrplay1's response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.