Privacy Policy

Scrplay Privacy Policy — Malaysia Member Personal Data Protection

Scrplay is committed to protecting every member's personal data. This document transparently explains how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
Bahasa Malaysia
PDPA Compliance
Our Privacy Commitment
  • 256-bit end-to-end SSL encryption
  • Data is not sold to third parties
  • Member data access & deletion rights
  • 24/7 security monitoring

How scrplay Protects Your Personal Data

Banking-Grade Encryption

All data transmitted between your device and scrplay's servers is protected by 256-bit SSL encryption — the same banking-grade security technology used by leading financial institutions. Your financial data is never stored in plain text on any of our servers.

No Data Sales

Scrplay has never and will never sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your information belongs to you — we only use it for purposes you have directly consented to.

Data Control in Your Hands

Every scrplay member has the full right to access, amend, download, or request deletion of their personal data at any time. The process is straightforward — contact our support team and we will process your request within 5 business days in accordance with PDPA requirements.

Malaysia PDPA Compliance

The scrplay privacy policy is fully designed and updated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all data protection principles stipulated by local law, including lawful processing, data quality, and security.

KYC Identity Verification

Scrplay's KYC (Know Your Customer) process uses end-to-end encryption to protect all uploaded identity documents. Documents are stored on secure servers with restricted access and are used solely for identity verification and anti-money laundering compliance purposes.

24/7 Security Monitoring

The scrplay security team monitors system activity continuously around the clock. Any unusual or suspicious access to member accounts is automatically detected and immediate protective measures are taken, including temporary account suspension to safeguard your data.

1Personal Information We Collect

Scrplay only collects personal data that is strictly necessary to provide platform services to members. The information we collect falls into three main categories:

Information You Provide Directly:

  • Full name, date of birth, and identification card number (for KYC and age verification purposes).
  • Email address and mobile number provided during registration.
  • Bank account or e-wallet details registered for deposit and withdrawal purposes.
  • Identity verification documents such as a copy of MyKad or passport when required for KYC purposes.
  • Any additional information you provide to the scrplay support team during a Live Chat session or email communication.

Automatically Collected Information:

  • IP address, browser type, operating system, and device information used to access the scrplay platform.
  • Login history, game activity, betting records, and financial transaction history.
  • General location data based on IP address for legal compliance and security purposes.
  • Platform usage data including pages visited, session duration, and navigation patterns.

Information from Third-Party Sources:

  • Payment verification information from approved payment processors to confirm financial transactions.
  • Identity verification information from KYC service providers authorised by scrplay.
✓ Data Minimisation Principle: scrplay only collects data that is strictly necessary for platform operations. We do not collect data beyond the requirements of the services you use.
2How We Use Your Personal Data

All personal data collected by scrplay is used solely for legitimate and pre-defined purposes. Below is a summary table of our data usage:

Purpose of Use Type of Data Used Legal Basis
Account management & registration Name, email, phone number Contract performance
Deposit & withdrawal processing Banking details, transaction records Contract performance
KYC identity verification ID document, date of birth Legal obligation
Fraud prevention & AML IP, account activity, transactions Legitimate interest / legal obligation
Customer Support Communications, account history Contract performance
Promotional & bonus communications Email, phone number Member consent
Platform improvements Anonymised usage data Legitimate interest

You have the right to withdraw consent for marketing use of your data at any time by contacting the scrplay support team. Withdrawing consent does not affect data use for contractual purposes or other legal obligations.

3Information Sharing with Third Parties
Key Principles: scrplay does not sell, rent, or disclose members' personal data to third parties for commercial purposes. Data sharing only occurs in the limited circumstances set out below.

Member personal data may be shared with the following parties under limited circumstances:

  • Approved payment processors: Required financial information is shared with licensed payment processors such as FPX, TNG eWallet, and local banks solely for processing your transactions.
  • KYC service providers: Identity documents are shared with authorised identity verification service providers to fulfil legal compliance requirements.
  • Game service providers: Limited game session data is shared with scrplay's game providers for technical and compliance purposes only.
  • Relevant authorities: scrplay will disclose personal data to government authorities, law enforcement bodies, or courts when required to do so under applicable Malaysian law.

All third parties working with scrplay are bound by strict confidentiality agreements and are required to uphold data protection standards equivalent to or higher than those of scrplay itself.

4Data Storage & Security

Scrplay continuously invests in security infrastructure to ensure members' personal data remains protected at all times. The technical and organisational security measures we implement include:

  • 256-bit SSL/TLS encryption for all data in transit between member devices and scrplay servers.
  • Encryption of data at rest using AES-256 standards for all databases containing member personal information.
  • Role-based access control (RBAC) — only authorised staff may access member personal data, and only to the extent necessary to perform their duties.
  • Mandatory two-factor authentication (2FA) for all administrative access to scrplay systems.
  • Periodic security audits by independent third parties to identify and patch any system vulnerabilities.
  • Automated data backup system with full encryption to ensure data is not lost due to technical failure.
  • Real-time cyber threat monitoring with an intrusion detection system (IDS) active 24 hours a day.
⚠ Security Note: While scrplay takes all reasonable security measures, no system can guarantee 100% absolute security. Members are also responsible for safeguarding their own account passwords and login credentials.
5Member Rights Regarding Personal Data

As a scrplay member and in accordance with Malaysia's PDPA, you have the following rights regarding your personal data:

Right of Access
You have the right to request a copy of all personal data we hold about you.
Right to Rectification
You have the right to request correction of any inaccurate or outdated personal data.
Right to Erasure
You may request deletion of your personal data, subject to applicable legal obligations.
Right to Object
You may object to the processing of your personal data for direct marketing purposes.
Right to Portability
You have the right to receive your data in a machine-readable format for portability purposes.
Right to Restriction
You may request a restriction on data processing while a dispute regarding data accuracy is ongoing.

To exercise any of the above rights, contact the scrplay team via Live Chat or email. All requests will be processed within 5 business days. No fees are charged for reasonable requests.

6Cookies & Tracking Technologies

Scrplay uses cookies and similar tracking technologies to enhance the user experience on our platform. The types of cookies we use are as follows:

  • Essential Cookies: These cookies are required for core platform functions such as secure login, session management, and security. They cannot be disabled.
  • Performance Cookies: Used to gather information on how members use the scrplay platform for improvement purposes. This data is collected anonymously.
  • Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and login details (if you choose to save them).

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the scrplay platform. For more information on managing cookies, refer to your browser's help guide.

7Children's Data Protection
⚠ Warning: The scrplay platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors.

Scrplay takes child protection very seriously. We implement a rigorous age verification process during registration and through our KYC process to ensure our platform cannot be accessed by minors.

If scrplay detects or is notified that personal data of an individual under 18 has been collected unintentionally, the account will be closed immediately and all related data will be deleted within 48 hours. Parents or guardians who suspect their child has registered an account on scrplay are advised to contact our support team immediately.

8Cross-Border Data Transfers

In the course of platform operations, some member personal data may be transferred to or processed on servers located outside Malaysia. Such transfers only occur when:

  • The recipient country or region has an adequate level of data protection equivalent to Malaysia's standards.
  • Scrplay has implemented appropriate safeguards such as standard data transfer agreements or approved contractual clauses.
  • The transfer is necessary for the performance of a contract between you and scrplay, such as processing international payments.

Scrplay ensures that all cross-border data transfers comply with the relevant provisions of Malaysia's PDPA and applicable data protection laws in the respective jurisdictions.

9Data Retention Period

Scrplay retains members' personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. Our data retention guidelines are as follows:

  • Active account data: Retained for the duration of active membership on the scrplay platform.
  • Financial transaction data: Retained for 7 years from the transaction date in accordance with Malaysia's financial legal requirements.
  • KYC documents: Retained for 5 years after account closure or in accordance with applicable AML legal requirements.
  • Customer support communication logs: Retained for 2 years for dispute resolution purposes.
  • Closed account data: Basic data is retained for 5 years for fraud prevention and legal compliance purposes, after which it will be permanently deleted or anonymised.

Upon expiry of the retention period, personal data will be securely deleted or fully anonymised so that it can no longer be linked to any specific individual.

10Changes to the Privacy Policy

Scrplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or improvements to our data protection standards.

When material changes are made to this Privacy Policy, scrplay will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a clear notice on the scrplay platform homepage for a minimum of 14 days.
  • Sending notifications to members via their registered email for significant changes that affect member privacy rights.

Continued use of the scrplay platform after the effective date of any policy changes constitutes acceptance of the new privacy terms. If you do not agree with the changes, please contact our team to discuss available options, including account closure.

11Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the scrplay Data Protection Officer (DPO) team is ready to assist:

  • Live Chat: Reach us 24/7 via the chat icon on the scrplay platform for an immediate response.
  • Privacy Email: [email protected]
  • Support Email: [email protected]
  • Response time: Within 2 minutes via Live Chat; within 5 business days for written requests.

For more information on how we manage your account, please refer to Terms and Conditions scrplay. For responsible gaming guidance, visit our Responsible Gaming us. Any frequently asked questions can be answered on our FAQ us.

Ready to Get Started?

Register with scrplay Today — A Safe & Trusted Platform

Your personal data is fully protected by scrplay. Register now and enjoy a safe, fair, and enjoyable online gaming experience alongside millions of members in Malaysia.

Bahasa Melayu