scrplay3 Privacy Policy

1. Who We Are

scrplay3 ("scrplay3", "we", "us", "our") is the operator of the online gaming platform accessible at scrplay3.org. scrplay3 operates under applicable international gaming authority licensing and is the data controller in respect of the personal data processed under this Privacy Policy.

For privacy-related enquiries, you may contact us at: [email protected] (plain text — not a clickable link). Our customer support team is available 24/7 to assist Malaysian players with all account and data-related queries.

2. Personal Data We Collect

scrplay3 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, national identity card number (MyKad or equivalent), and copies of identity documents provided for KYC verification purposes.
• Contact Data: Email address, Malaysian mobile phone number, and residential address (including postcode, city — e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang, or Bangsar).
• Account Data: Registered username, account preferences, communication preferences, and account security settings (e.g., 2FA status).
• Financial Data: Payment method details (e.g., last four digits of registered payment instruments, Touch 'n Go eWallet reference IDs, bank account reference details), deposit and withdrawal transaction records, wallet balance history, and bonus claim records.
• Transactional Data: Full history of bets placed, games played, amounts staked, game outcomes, and promotional participations on the scrplay3 platform.
• Technical Data: IP address, browser type and version, device type and operating system, session timestamps, login history, and referring URL.
• Usage Data: Information about how you navigate and interact with the scrplay3 website, including pages visited, time on page, click patterns, and feature usage.
• Communications Data: Records of communications you send to or receive from scrplay3 customer support, including live chat transcripts and support ticket correspondence.

3. How We Collect Your Data

scrplay3 collects personal data through the following means:

• Direct interactions: Data you provide when registering a scrplay3 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you visit scrplay3.org, via cookies, web beacons, server logs, and similar tracking technologies. See Section 9 (Cookies) for further detail.
• Third parties: Identity verification data from KYC service providers; fraud and risk signals from payment processors; technical data from analytics service providers — all processed under appropriate data processing agreements.

4. How We Use Your Personal Data

scrplay3 uses personal data for the following purposes:

• To register and manage your scrplay3 account, including authentication and account security;
• To process deposits, withdrawals, and wallet transactions in MYR;
• To conduct Know Your Customer (KYC) and age verification in compliance with our licensing obligations — all members must be aged 21 or above 21+;
• To fulfil anti-money laundering (AML) and counter-terrorist financing (CTF) obligations;
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct on the platform;
• To administer bonuses, promotions, and loyalty programmes;
• To operate and improve the scrplay3 platform, including personalising your gaming experience;
• To send you account-related notifications (e.g., transaction confirmations, security alerts) and, where you have opted in, marketing communications about scrplay3 products and promotions;
• To provide and improve customer support;
• To comply with applicable legal and regulatory requirements and respond to lawful requests from competent authorities.

5. Legal Basis for Processing

scrplay3 relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to provide scrplay3 gaming services, process transactions, and manage your account as set out in our Terms & Conditions.
• Legal obligation: Processing required to comply with KYC, AML, CTF, and other applicable regulatory requirements under our gaming licence and applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided specific, informed, and freely given consent. You may withdraw consent at any time by updating your communication preferences in your scrplay3 account settings.

6. Sharing Your Personal Data

scrplay3 does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Payment processors and financial institutions: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and card networks. These parties process data as independent controllers or as our processors under appropriate agreements.
• KYC and identity verification service providers: To verify the identity and age of members as required by our licensing obligations.
• Fraud prevention and risk management providers: To detect and prevent fraudulent activity on the platform.
• Gaming software and platform providers: Game studios and platform infrastructure partners who process limited transactional data under data processing agreements with scrplay3.
• Regulatory and law enforcement authorities: Where required by law, court order, or gaming authority, scrplay3 will disclose personal data to competent authorities. This includes mandatory reporting obligations under AML legislation.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all assets, member data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

7.1 Due to the nature of our gaming licence and the global infrastructure supporting the scrplay3 platform, personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, scrplay3 ensures that appropriate safeguards are in place — including standard contractual clauses, binding corporate rules, or reliance on adequacy decisions — to protect the security and integrity of your personal data.

7.2 By registering and using the scrplay3 platform, you acknowledge that your personal data may be processed outside Malaysia in accordance with the safeguards described in this section.

8. Data Retention

8.1 scrplay3 retains personal data for as long as your account remains active and for a period thereafter as required by our licensing and legal obligations. Regulatory and AML requirements typically mandate retention of transaction records and KYC documentation for a minimum of five (5) years following the end of the customer relationship.

8.2 Technical and usage data is retained for shorter periods consistent with its operational purpose. Marketing data (where consent-based) is retained until you withdraw consent or request deletion.

8.3 Where you request account closure, scrplay3 will cease active processing of your data for gaming purposes but will retain data for the applicable regulatory retention period before secure deletion or anonymisation.

9. Cookies & Tracking Technologies

9.1 scrplay3.org uses cookies and similar technologies (web beacons, pixel tags, local storage) to operate core platform functions, improve user experience, analyse traffic, and deliver relevant content.

9.2 The following categories of cookies are used on the scrplay3 platform:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled and include session management, authentication, and security tokens.
• Functional cookies: Remember your preferences (e.g., language, remembered login) to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how visitors use scrplay3.org to help us improve the platform.
• Performance cookies: Monitor platform performance and detect technical issues.

9.3 You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the scrplay3 platform.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by scrplay3:

To exercise any of these rights, contact scrplay3 support at [email protected]. scrplay3 will respond within 30 days of receiving a verified request. Requests from unverified requestors (i.e., where identity cannot be confirmed) may not be actioned.

11. Children's Privacy

The scrplay3 platform is strictly intended for adults aged 21 and above. 21+ scrplay3 does not knowingly collect personal data from individuals under the age of 21. If scrplay3 becomes aware that a person under 21 has registered an account or provided personal data, the account will be immediately closed, data will be deleted to the extent permissible by law, and any funds held will be dealt with in accordance with applicable regulatory requirements.

If you believe a minor has registered on the scrplay3 platform, please notify us immediately at [email protected].

12. Security Measures

scrplay3 implements a multi-layered approach to data security, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the scrplay3 platform;
• Encrypted storage of passwords using industry-standard salted hashing algorithms — scrplay3 does not store plaintext passwords;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular third-party security audits and penetration testing as part of our licensing compliance obligations;
• Automated monitoring for suspicious login activity and anomalous account behaviour;
• Optional two-factor authentication (2FA) available to all members via account settings.

Despite these measures, no internet transmission or electronic storage system is 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, scrplay3 will notify affected members and relevant authorities as required by applicable law.

13. Third-Party Services

The scrplay3 platform may integrate with third-party services — including game studios, payment processors, and analytics providers — whose own privacy practices are governed by their respective privacy policies. scrplay3 uses contractual mechanisms (data processing agreements) to ensure these third parties handle your data to a standard consistent with this Privacy Policy. scrplay3 is not responsible for the independent data practices of third-party services accessed outside the scrplay3.org domain.

14. Changes to This Privacy Policy

14.1 scrplay3 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. The "Last updated" date at the top of this policy will be revised accordingly.

14.2 For material changes, scrplay3 will notify registered members via email or a prominent on-site notice prior to the changes taking effect. Continued use of the scrplay3 platform following notification of changes constitutes acceptance of the revised policy.

14.3 We encourage you to review this Privacy Policy periodically to stay informed about how scrplay3 protects your personal data.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by scrplay3, please contact us through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 via the chat support widget on the scrplay3 platform

scrplay3 is committed to responding to all privacy-related enquiries within 30 days. Where a request is complex or high in volume, we may extend this period by an additional 30 days, with notice provided to you in advance.