Personal Data Protection

Scrplay Privacy Policy – Malaysian User Data Protection

Your privacy is our priority. This document clearly explains how scrplay collects, uses, stores and protects your personal data at all times.

Last Updated: 1 January 2026

Scrplay's Commitment to Your Privacy

Six core principles governing how we handle member personal data.

Advanced Encryption

All data transmitted between your device and Scrplay's servers is protected with 256-bit SSL encryption — the same security standard used by leading banking institutions.

Your Own Data Controls

You have the full right to access, correct, download, or request deletion of your personal data at any time via the account panel or by contacting support.

No Data Sales

Scrplay has never and will never sell, rent, or share your personal data with advertisers or third parties for marketing purposes without your explicit consent.

Minimum Data Retention

We only retain data that is strictly necessary for service operations and legal compliance. Data that is no longer needed is securely deleted on a regular schedule.

Malaysia PDPA Compliance

The scrplay Privacy Policy is designed to fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a local user are well protected.

Immediate Breach Notification

In the event of any security incident affecting your data, scrplay is committed to notifying you within 72 hours and taking immediate remedial action.

This Privacy Policy describes the privacy practices of scrplay and applies to all users of the scrplay.onl website and scrplay mobile app. By using our platform, you agree to the practices outlined in this document.

1. Introduction

Scrplay ("we", "Platform", "Company") respects the privacy of every user who accesses and uses our services. As an online entertainment platform operating in Malaysia, we are committed to handling your personal data with integrity, transparency, and security.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices. We want you to understand exactly what data we collect, why we need it, how we use it, and the rights you hold over that data.

If you have any questions about how we handle your personal data, do not hesitate to reach out to our privacy team — contact details are provided in the final section of this document.

2. Data We Collect

Scrplay collects your personal data through several means depending on how you interact with our platform. The following are the main categories of data we collect:

a) Data You Provide Directly

  • Full name as shown on your identity document.
  • Identity card or passport number.
  • Date of birth and gender.
  • Email address and mobile phone number.
  • Residential address.
  • Bank account details for deposit and withdrawal purposes.
  • Identity verification (KYC) documents uploaded.

b) Data Collected Automatically

  • IP address and estimated location information.
  • Device type, operating system, and web browser version.
  • Session data including pages visited and session duration.
  • Game activity and wagering logs.
  • Cookie and similar tracking technology data.
Data Category Example Requirements
Identity Name, IC, date of birth Mandatory – KYC & compliance
Contact Email, phone number Mandatory – account communications
Finance Bank details, transaction records Mandatory – payment processing
Technical IP, device type, session logs Automatic – security & analytics
Games Betting history, wins Automatic – platform records

3. How We Use Your Data

The personal data we collect is used only for lawful, defined purposes. scrplay will not use your data for any other purpose without first obtaining your consent. The primary purposes for data use are as follows:

  • Account management: Registering, verifying and managing your member account, including the KYC process.
  • Transaction processing: Processing deposits, withdrawals and your account's financial history.
  • Platform security: Detecting and preventing fraud, money laundering and suspicious activity.
  • Legal compliance: Meeting reporting and record-keeping obligations required under Malaysian law.
  • Customer support: Responding to your inquiries, complaints and providing technical assistance.
  • Service improvement: Analyzing usage patterns to improve the platform and user experience.
  • Marketing communications: Sending promotional information and exclusive offers — only if you have given your consent.
  • Responsible gaming: Monitoring gameplay patterns to identify and support users who may need assistance.

You can withdraw consent to receive marketing communications at any time by updating your notification settings in your account or by contacting our support team.

4. Basis for Data Processing

Scrplay only processes your personal data when a valid legal basis exists. Depending on the type of processing, the bases we rely on are:

  • Contract execution: Processing necessary to deliver the services you requested, such as transaction processing and account management.
  • Legal obligation: Processing required to comply with Malaysian law, including PDPA, AML (Anti-Money Laundering) and KYC requirements.
  • Legitimate interest: Processing for fraud prevention, system security and service improvement purposes that do not override your fundamental rights.
  • Consent: Processing for marketing communications and non-essential cookie use, where you have given explicit consent.

5. Data Sharing With Third Parties

Scrplay does not sell or rent your personal data. However, in certain limited situations, we may share your data with trusted third parties as follows:

  • Payment service providers: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, and GrabPay. These providers are bound by strict confidentiality agreements.
  • KYC service providers: Identity verification partners who help us validate documents and meet compliance requirements.
  • Technology service providers: Companies that provide technical infrastructure such as server hosting, analytics, and cybersecurity services.
  • Authorities and regulatory bodies: If required by Malaysian law or a valid court order.

All third parties who receive your data are required to handle it in accordance with data protection standards equivalent to this Privacy Policy and are not permitted to use that data for any other purpose.

In cases where data needs to be transferred outside Malaysia for technical processing purposes, scrplay ensures that such transfers are protected by appropriate data transfer agreements and adequate safeguards.

6. Cookies & Tracking Technologies

Scrplay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Cookie categories we use:

  • Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance cookies: Collecting information on how you use the platform to help us improve our services. All data is aggregated and does not identify individuals.
  • Functional cookies: Saving your preferences such as language and display settings to provide a more personalized experience.
  • Analytics cookies: Helping us understand website traffic and usage patterns for continuous improvement.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect your ability to fully use certain platform features.

7. Data Security

Scrplay continuously invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we implement include:

  • 256-bit SSL/TLS encryption for all data in transit.
  • Encryption of sensitive data stored in our databases.
  • Role-based access control — only authorized staff can access user data.
  • 24/7 security monitoring with a real-time intrusion detection system.
  • Regular penetration testing by independent security experts.
  • Mandatory security awareness training for all scrplay staff.
  • Regular data backup procedures to prevent data loss.

While we take all reasonable precautions, no system is 100% secure. You also play an important role — please ensure your account password is strong and unique, and never share your login credentials with anyone.

8. Data Retention Period

Scrplay does not retain your personal data longer than necessary. Data retention periods are determined based on the type of data and applicable legal requirements:

  • Active account data: Retained for as long as your account is active and in use.
  • Financial transaction records: Retained for seven (7) years in accordance with Malaysian legal requirements relating to financial reporting and AML.
  • KYC Documents: Retained for five (5) years after account closure.
  • Support communication logs: Retained for three (3) years for reference and dispute resolution purposes.
  • Analytics data: Aggregated and anonymised after 12 months.

Once the retention period expires, your data will be securely deleted or permanently anonymised using methods that meet industry standards.

9. Your Rights

Under Malaysia's PDPA and scrplay's privacy policy, you have the following rights regarding your personal data:

1
Right of Access

Request a copy of the personal data we hold about you at any time.

2
Right to Rectification

Request correction of inaccurate or incomplete data at no charge.

3
Right to Erasure

Request deletion of your data when it is no longer needed for its original purpose.

4
Right to Restrict Processing

Object to the processing of your data for direct marketing purposes at any time.

5
Right to Data Portability

Receive your data in a structured, machine-readable format for portability.

6
Right to Withdraw Consent

Withdraw consent for consent-based processing at any time.

To exercise any of the above rights, contact our privacy team via email or live chat. We will process your request within 14 business days. In complex cases, this period may be extended to up to 30 days with prior notification to you.

10. Children's Data

The scrplay platform is strictly for adult users aged 18 and above. We do not knowingly collect or process personal data of individuals under 18 years of age.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. If you believe a child has registered on our platform, please contact us immediately.

Parents and guardians are encouraged to use appropriate parental control software to prevent children from accessing online gaming platforms. scrplay fully supports efforts to maintain a safe online environment for young people.

11. Privacy Policy Amendments

Scrplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The latest update date will always be displayed at the top of this document.

For significant amendments that affect how we use your data, we will provide clear notice through:

  • Email to the address registered in your account.
  • Prominent in-platform notifications on scrplay.
  • Updates to this Privacy Policy page with the effective date clearly stated.

Continued use of the scrplay platform after amendments take effect signifies your acceptance of the updated policy. If you disagree with any changes, please stop using the platform and contact us to close your account.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the scrplay privacy team is here to help:

We aim to respond to all privacy-related enquiries within 72 hours. For formal data rights requests, please use our privacy email and clearly state the type of request and your account details for faster processing.

All Scrplay privacy communications are handled in Bahasa Malaysia. There is no need to switch to another language — our team understands the needs of local users and is ready to assist in the language you are most comfortable with.

Your Data Is Safe. Ready to Get Started?

Join over 500,000 active scrplay members in Malaysia who enjoy online gaming entertainment with complete confidence — our platform protects your privacy at every step.

256-bit SSL Encryption
Malaysia PDPA Compliance
No Data Sales

For adults aged 18 and above only. Please play responsibly.

Bahasa Melayu