scrplay3 Privacy Policy

1.Introduction and Scope

scrplay3 ("we", "us", or "scrplay3") is committed to protecting the privacy and personal data of all individuals who interact with the scrplay3 Platform, accessible at scrplay3.net and through any associated mobile or web application (collectively, the "Platform").

This Privacy Policy describes what personal data scrplay3 collects from members, visitors, and prospective members; how that data is used and processed; with whom it may be shared; how long it is retained; and what rights individuals have in relation to their personal data. This Policy applies to all personal data processed by scrplay3 in connection with the operation of the Platform, including data processed via the scrplay3 website, member account systems, customer support channels, and any marketing communications.

By registering a scrplay3 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the scrplay3 Platform immediately.

2.Data Controller Information

scrplay3 acts as the data controller in respect of all personal data collected through the Platform. As data controller, scrplay3 determines the purposes and means of processing your personal data in accordance with applicable data protection legislation.

For all data protection enquiries, you may contact the scrplay3 Data Protection team via the live chat function available 24/7 within the scrplay3 account dashboard, or by email at [email protected]. Please mark the subject line of any email correspondence as "Data Protection Enquiry" to ensure prompt routing to the relevant team.

3.Personal Data We Collect

scrplay3 collects personal data from you in the following categories, depending on the nature of your interaction with the Platform:

Category	Data Types	Collection Method
Identity Data	Full name, date of birth, gender, nationality, MyKad or passport number	Registration form, KYC verification
Contact Data	Email address, Malaysian mobile number, residential address	Registration form, account settings
Financial Data	Bank account details, e-wallet identifiers (Touch n Go, Boost), transaction history	Payment processing, deposit/withdrawal activity
Technical Data	IP address, device type, browser type, operating system, session logs	Automatic collection via Platform infrastructure
Usage Data	Game history, bet history, session duration, pages visited, features accessed	Platform activity monitoring
Communications Data	Live chat transcripts, support ticket content, email correspondence content	Customer support interactions
Marketing Data	Communication preferences, promotional opt-in/opt-out records	Account preferences, marketing consent forms

scrplay3 does not collect special categories of personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) unless you voluntarily provide such information in the context of a responsible gaming self-assessment or support interaction, in which case such data is processed solely for the purpose of providing appropriate support to you.

4.How We Use Your Personal Data

scrplay3 processes your personal data for the following purposes:

1. Account creation and management: To register your scrplay3 account, verify your identity, maintain your member profile, and administer your account throughout the membership relationship.
2. Service delivery: To provide access to scrplay3 gaming products including the sportsbook, live casino, online slots, e-sports betting, and Toto 4D; to process deposits and withdrawals in MYR; and to maintain the operational integrity of the Platform.
3. Regulatory compliance and fraud prevention: To comply with applicable anti-money laundering obligations, age verification requirements (strictly 21+), Know Your Customer (KYC) obligations, and to detect, investigate, and prevent fraudulent, abusive, or illegal conduct on the Platform.
4. Customer support: To respond to member enquiries, resolve account issues, and process complaints submitted via scrplay3's English-speaking 24/7 support team operating on Malaysia Standard Time (UTC+8).
5. Responsible gaming: To monitor member activity for indicators of potential gambling-related harm, to administer self-exclusion requests, and to enforce member-set deposit and loss limits.
6. Marketing and communications: Where you have provided consent, to send you promotional communications about scrplay3 offers, bonuses, and new product features via email or in-Platform notifications. You may withdraw this consent at any time through your scrplay3 account settings.
7. Platform improvement: To analyse usage patterns, conduct internal research, and improve the functionality and user experience of the scrplay3 Platform for Malaysian members.

5.Legal Bases for Processing

scrplay3 processes your personal data on one or more of the following legal bases as appropriate to each processing activity:

• Contractual necessity: Processing required to perform the scrplay3 Member Agreement, including account administration, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering legislation, age verification obligations, and regulatory reporting requirements.
• Legitimate interests: Processing carried out in scrplay3's legitimate business interests, such as fraud prevention, platform security, and platform improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.Disclosure of Personal Data

scrplay3 does not sell your personal data to third parties. scrplay3 may disclose your personal data to the following categories of recipients where strictly necessary for the purposes described in this Policy:

1. Payment service providers: Malaysian banking institutions and e-wallet operators (including Maybank, CIMB, Public Bank, RHB, Touch n Go eWallet, and Boost) for the purpose of processing deposits and withdrawals.
2. Identity verification and KYC providers: Third-party identity verification services engaged to verify member identity documents and age as required by applicable regulations.
3. Game content providers: scrplay3's licensed game software providers receive limited technical data (session tokens, game result data) necessary for the delivery of game content. No personal identity data is shared with game providers beyond what is technically required.
4. Regulatory and law enforcement authorities: Where scrplay3 is legally obligated to disclose personal data to a government authority, regulatory body, or law enforcement agency pursuant to a valid legal request, court order, or applicable law.
5. Professional advisors: Lawyers, auditors, and other professional advisors engaged by scrplay3 on a confidential basis in connection with the operation of the business.

All third-party recipients of scrplay3 member data are required to process such data in accordance with applicable data protection laws and are prohibited from using the data for any purpose other than the specific purpose for which it was disclosed.

7.Cookies and Tracking Technologies

scrplay3 uses cookies and similar tracking technologies on the Platform to operate essential Platform functions and to improve member experience. The categories of cookies used by scrplay3 are as follows:

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, authentication, and security. These cookies cannot be disabled.
• Performance cookies: Used to collect aggregated, anonymised data about how members use the Platform — for example, which pages are visited most frequently — to enable scrplay3 to improve Platform performance and user experience.
• Functional cookies: Allow the Platform to remember your preferences such as language settings, display configurations, and game history to personalise your scrplay3 experience.
• Analytics cookies: Used by scrplay3's internal analytics systems to understand member behaviour patterns across the Platform. Data collected via analytics cookies does not identify individual members personally.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the scrplay3 Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate.

8.Data Retention

scrplay3 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Member account data: Retained for the duration of the membership and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Customer support communications: Retained for a minimum of three (3) years from the date of the most recent interaction.
• Marketing consent records: Retained for the duration of the member relationship and for three (3) years following the withdrawal of marketing consent, as evidence of prior consent where required.

Upon expiry of the applicable retention period, scrplay3 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9.Security Measures

scrplay3 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all data transmitted between your device and scrplay3's servers — the same standard applied by Malaysia's major financial institutions.
• Multi-factor authentication options available for all scrplay3 member accounts.
• Restricted access controls ensuring that member personal data is accessible only to scrplay3 personnel who require it to perform their legitimate job functions.
• Regular security assessments, penetration testing, and vulnerability management processes applied to scrplay3 Platform infrastructure.
• Formal data breach response procedures in place to detect, report, and remediate personal data breaches in a timely manner.

While scrplay3 takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security against all threats. You are responsible for maintaining the confidentiality of your scrplay3 account credentials and for notifying scrplay3 promptly if you suspect unauthorised access to your account.

10.Your Rights as a Data Subject

Subject to applicable law, you have the following rights in respect of your personal data held by scrplay3:

1. Right of access: You may request a copy of the personal data scrplay3 holds about you.
2. Right to rectification: You may request correction of any inaccurate or incomplete personal data scrplay3 holds about you.
3. Right to erasure: You may request deletion of your personal data where scrplay3 no longer has a legitimate basis for retaining it, subject to overriding legal obligations such as anti-money laundering record-keeping requirements.
4. Right to restriction of processing: You may request that scrplay3 restricts the processing of your personal data in certain circumstances.
5. Right to data portability: Where processing is based on your consent or a contractual necessity, you may request that scrplay3 provide your personal data in a structured, machine-readable format.
6. Right to object: You may object to scrplay3's processing of your personal data where that processing is based on scrplay3's legitimate interests.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, please contact the scrplay3 Data Protection team via live chat in your scrplay3 account dashboard or by email at [email protected]. scrplay3 will respond to verified data subject requests within thirty (30) calendar days of receipt.

11.Children and Minors

The scrplay3 Platform is strictly intended for adults aged 21 years and above. scrplay3 does not knowingly collect, process, or retain personal data from persons under 21 years of age. Where scrplay3 becomes aware that personal data has been collected from a person under 21, scrplay3 will promptly delete such data and take appropriate steps to prevent further access by that individual to the Platform.

If you are a parent or guardian and have reason to believe that a minor in your care has provided personal data to scrplay3 without authorisation, please contact the scrplay3 support team immediately.

12.Changes to This Policy

scrplay3 reserves the right to amend this Privacy Policy at any time. Where changes are material, scrplay3 will provide reasonable advance notice via a notice posted on the Platform or communicated to your registered email address. The most current version of this Privacy Policy will always be accessible at scrplay3.net/privacy-policy. Your continued use of the scrplay3 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13.Contact and Complaints

For any questions, concerns, or complaints regarding this Privacy Policy or scrplay3's personal data processing practices, please contact the scrplay3 Data Protection team:

• Live chat: Available 24 hours a day, 7 days a week on Malaysia Standard Time (UTC+8) inside your scrplay3 account dashboard — typically the fastest channel for all account and data queries.
• Email: [email protected] — please use the subject line "Data Protection Enquiry" for efficient routing.

scrplay3 is committed to resolving all privacy-related complaints promptly and fairly. If you are not satisfied with scrplay3's response to your complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances.