Scr2u Privacy Policy – How We Protect the Personal Data of Malaysian Players

01Introduction & Scope of Privacy Policy

Scr2u ("we", "the platform", or "scr2u") respects the privacy rights of every individual who uses our services. This Privacy Policy is designed to ensure you have a clear and full understanding of how your personal information is managed in a transparent and responsible manner.

This Policy applies to all scr2u platform users, including website visitors, registered members, and individuals who interact with our services on any device — whether laptop, mobile (Android or iOS), or tablet. It also covers all in-platform activity, including betting on the Malaysia Super League and EPL, Live Casino games such as Baccarat and Roulette, jackpot slots, blackjack, e-sports, and cricket.

This policy is to be read together with scr2u Terms & Conditions and in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA).

02Types of Personal Data We Collect

Scr2u only collects data that is necessary to provide a quality, secure, and responsible service. The following are details of the data we may collect:

Registration & Identity Data

When you register a scr2u account, we collect information such as your full name, date of birth, email address, phone number, and encrypted password. This information is required to create and verify your account.

Identity Verification (KYC) Data

To meet legal compliance requirements and prevent fraud, scr2u may request identity verification documents such as a copy of your Malaysian Identity Card (MyKad), passport, proof of address, and proof of payment method. These documents are stored with the highest security and are only accessible by authorised personnel.

Financial Transaction Data

We record all financial activity associated with your account, including deposits, withdrawals, bets, and winnings. This includes payment methods used such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks). We do not store full credit/debit card numbers where applicable.

Platform Activity & Usage Data

Scr2u collects data on how you use our platform, including games played, bets placed, session duration, features accessed, and your account settings preferences.

03Purpose & Legal Basis for Using Your Data

Scr2u uses your personal data only for legitimate and necessary purposes. We do not process your data beyond what is required for the following:

• Service Delivery: To process registrations, manage your account, and enable you to use all scr2u platform features, including Sports Betting and Live Casino games.
• Payment Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay, and managing your withdrawals securely and accurately.
• Legal Compliance: Fulfilling scr2u's obligations under the PDPA 2010, anti-money laundering (AML) laws, and identity verification (KYC) requirements as set out by the relevant authorities.
• Security & Fraud Prevention: To detect and prevent unauthorised access, fraud, account misuse, and activities that violate scr2u's Terms & Conditions.
• Responsible Gaming: Monitoring usage patterns to identify players who may need support related to problem gambling, and providing appropriate self-control tools.
• Service Communications: Sending important notices regarding your account, changes to terms, security alerts, and transaction information. This is not marketing — it is necessary service communication.
• Platform Improvements: Analyzing aggregated usage data (without identifying you individually) to improve the functionality, speed, and overall experience of the scr2u platform.

04Sharing Data with Third Parties

Scr2u does not sell, rent, or distribute your personal data to third parties for commercial purposes. However, in certain limited circumstances, we may need to share specific information with the following parties:

Authorised Service Providers

We work with third-party service providers that help us operate the platform — including cloud infrastructure providers, payment processing companies (such as FPX gateway, Touch 'n Go, and GrabPay providers), live casino software providers (such as Evolution Gaming and Pragmatic Play Live), and analytics service providers. All these partners are bound by strict confidentiality agreements and are only permitted to use your data for agreed purposes.

Legal & Regulatory Requirements

Scr2u may be required to disclose certain information when mandated by Malaysian law, court order, or direction from a competent authority. In such cases, we will disclose only the minimum information necessary and, where permitted by law, will endeavour to notify you in advance.

05scr2u Data Security Measures

Scr2u continually invests in security infrastructure to keep your data protected at all times. Key security measures we employ include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers.
• Role-Based Access Control (RBAC) ensuring that only authorised and relevant personnel can access sensitive data.
• Two-Factor Authentication (2FA) available on user accounts as an added layer of protection.
• 24/7 Security Monitoring through an automated anomaly detection system that identifies suspicious access attempts.
• Regular Data Backups at secure, separate locations to ensure service continuity.
• Regular Security Audits by independent cybersecurity experts to identify and address any vulnerabilities.

However, no system is entirely risk-free. You also play an important role in protecting your scr2u account — use a strong password, never share your login credentials, and report any suspicious activity to us immediately.

06Data Retention Period

Scr2u retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by Malaysian law. General guidelines on retention periods are as follows:

• Active Account Data: Retained for the duration your account is active and for an additional period following account closure as required by applicable legal obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian accounting regulations and AML compliance requirements.
• Security & Access Logs: Retained for three (3) months for security threat detection and investigation purposes where required.
• Support Communication Data: Retained for two (2) years to facilitate dispute resolution and the improvement of customer support services.

Once data is no longer needed and there is no legal obligation to retain it, scr2u will securely delete or anonymise it.

07Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and the scr2u privacy policy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact us at support@scr2u.bet stating the right you wish to exercise along with sufficient information to verify your identity. scr2u will respond within 14 working days.

08Cookies & Tracking Technologies

Scr2u uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

You can manage cookie settings through your browser. However, disabling essential cookies may affect the functionality of the scr2u platform. For optional cookies, you may change your preferences via the cookie notice displayed on your first visit.

09Children's Privacy

The scr2u platform is restricted to individuals aged 18 years and above only. We do not knowingly collect personal data from anyone under the age of 18. If you believe we may have collected information from someone under 18, please contact us immediately at support@scr2u.bet and we will take prompt action to delete that information.

Scr2u applies an age verification process during registration and reserves the right to request further proof of age at any time. Accounts found to have been registered by underage individuals will be terminated immediately and all winnings will be voided.

10Privacy Policy Amendments

Scr2u reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. When amendments are made:

• The "Last Updated" date at the top of this document will be revised accordingly.
• For significant changes, we will notify you via an in-platform notice or to the email address you have registered with us.
• Your continued use of the scr2u platform after any changes take effect will be considered your acceptance of the updated policy.

We encourage you to review this page periodically to stay informed on how scr2u manages your privacy.

11Contact the scr2u Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how scr2u handles your personal data, please reach out to us through the following channels:

You may also refer to other relevant pages: