Scrplay8 Privacy Policy – Personal Data Protection for Malaysia Members

Scrplay8 ("we", "platform") operates the scrplay8.best website and all related services provided to Malaysia members. As an online casino platform operating in Malaysia, we collect and process certain personal data when you use our services — from account registration to deposit processing via Touch 'n Go eWallet or DuitNow, from gaming activities such as poker and baccarat to interactions with our customer support team.

This Privacy Policy has been drafted in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and transparently sets out in full: what data we collect from you, why we need it, how we use it, who may have access to it, how long we retain it, and what rights you hold over your personal data as a scrplay8 member.

This Policy applies to all channels of interaction between you and scrplay8 — including the website, any associated mobile applications, email communications, customer support live chat, and any other communication channels that scrplay8 may use from time to time.

Scrplay8 collects your personal data through three main channels — information you provide directly when registering or interacting with us, information collected automatically while you use the platform, and information received from third parties required to verify your identity or process your payments.

Information You Provide Directly:

• Full name as stated on your official Malaysian identification document (MyKad or passport)
• An active and regularly used email address
• A Malaysian mobile number registered in your name
• Date of birth for age verification
• Your current residential address in Malaysia
• Malaysian bank account or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) used for deposits and withdrawals
• A copy of your identification document when requested for KYC (Know Your Customer) verification

Automatically Collected Information:

• Your device's IP address
• Type and version of the web browser or application used
• Device operating system (Android, iOS, Windows)
• Login session records including time and date
• Gaming activity records — tables joined, bets placed, game outcomes
• Complete financial transaction records including deposits and withdrawals
• Interaction log data with the customer support team
• Cookie and related tracking technology information (see Section 9)

Scrplay8 only uses your personal data for legitimate and necessary purposes. We do not process your data beyond what is required for the stated purposes. The primary uses of scrplay8 members' personal data are as follows:

Account Operations & Services:

• Creating, managing and maintaining the security of your scrplay8 account
• Processing deposits via your chosen Malaysian payment method
• Processing winnings withdrawals to your bank account or e-wallet
• Verifying your identity during the industry-standard KYC process
• Providing access to games — live baccarat, Texas Hold'em poker, Malaysia Super League Sports Betting, virtual sports, lottery, and more

Security & Compliance:

• Detecting and preventing fraud, money laundering and other unlawful activities
• Meeting AML (Anti-Money Laundering) and KYC compliance requirements
• Complying with directions from lawful enforcement authorities when required
• Detecting unauthorised access attempts on member accounts

Communications & Support:

• Sending important account-related notifications — withdrawal approvals, deposit confirmations, security alerts
• Providing customer support when you contact us
• Sending information about scrplay8 promotions, bonuses and offers (subject to your communication preferences)

Platform Improvement:

• Analysing usage patterns in aggregate and anonymised form to better understand the needs of Malaysian players
• Improving the interface design and user experience of the scrplay8 platform
• Developing new features relevant to the needs of local players

Under the Personal Data Protection Act Malaysia 2010 (PDPA), scrplay8 processes your personal data on a valid legal basis. Depending on the purpose of processing, the applicable legal basis is as follows:

• Contract Fulfillment — data processing required to fulfill the service agreement between you and scrplay8, including account management and financial transaction processing.
• Legal Obligation — processing required to comply with applicable Malaysian law, including AML and KYC requirements.
• Legitimate Interests — processing for the purposes of platform security, fraud prevention, and service improvement, where these interests do not override your fundamental privacy rights.
• Consent — for marketing communications and certain cookies that are not technically necessary, we rely on the consent you have provided, which you may withdraw at any time.

For every data processing activity we carry out, scrplay8 ensures that an appropriate legal basis exists and is documented. This is part of our commitment to substantive PDPA compliance — not merely surface-level adherence.

Scrplay8 does not sell your personal data. However, in the course of operating our platform, there are certain circumstances where your personal data may be shared with selected and trusted third parties:

• Payment Processing Providers — payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX receive only the transaction information strictly necessary to process your deposits and withdrawals. They are bound by strict confidentiality agreements and their own privacy policies.
• Game Providers — game provider companies partnering with scrplay8 may receive the minimum session data required to enable gameplay. They do not receive your personally identifiable information directly.
• Technology Service Providers — cloud infrastructure providers, security systems, and other technical service providers that support the operation of the scrplay8 platform. All such providers are bound by strict data processing agreements.
• Law Enforcement Authorities — where required by a valid court order or direction from a Malaysian enforcement authority with relevant jurisdiction, scrplay8 will disclose only the information required within the scope of that order.

Scrplay8 invests seriously in data security infrastructure to ensure members' personal information is always protected to the highest standards. The security measures we have implemented include:

• 256-bit SSL Encryption on all communications between your browser and scrplay8 servers — all data in transit is fully protected
• Data encryption at rest for all sensitive data stored in our databases — including passwords stored as irreversible hashes
• Two-factor authentication (2FA) available to all member accounts as an additional security layer, which we strongly encourage you to enable
• 24/7 security monitoring by scrplay8's cybersecurity team, which monitors and responds to security threats in real time
• Penetration testing conducted periodically by independent cybersecurity firms to identify and remediate vulnerabilities before they can be exploited
• Internal access controls strict policies ensure that only authorised personnel can access member data, with every access logged for audit purposes

While scrplay8 takes all reasonable steps to protect your data, no security system can guarantee absolute protection. We encourage members to take their own precautions as well — such as using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Scrplay8 does not retain members' personal data longer than is necessary for the lawful processing purposes or as required under Malaysian law. scrplay8's data retention policy is as follows:

• Active account data — retained for as long as your account is active and for 7 years after account closure, in line with financial record-keeping requirements under Malaysian law
• Financial transaction records — retained for a minimum of 7 years in accordance with AML compliance requirements and Malaysian financial regulations
• Customer support communication logs — retained for 3 years for dispute resolution and service quality improvement purposes
• Gameplay activity data — retained for 2 years after the relevant session, unless a longer period is required for the purposes of an ongoing investigation or unresolved dispute
• Technical data & system logs — retained for 1 year for security purposes and technical troubleshooting

Once the applicable retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. scrplay8 conducts regular reviews to ensure that data past its retention period is deleted promptly and securely.

As a scrplay8 member and an individual protected under Malaysia's PDPA, you have the following rights regarding the personal data we hold:

To exercise any of the rights above, submit a written request to us by email at support@scrplay8.best with the subject line "Privacy Rights Request", along with your full name, scrplay8 account number, and a clear description of your request. We may require additional identity verification before processing your request in order to protect your account from misuse.

Please note that the right to data deletion is subject to certain restrictions — where a legal obligation exists to retain specific data (such as financial records under AML laws), we are unable to fulfill deletion requests for that data until the mandatory retention period has expired.

Scrplay8 uses cookies and similar tracking technologies to ensure the platform operates correctly and to enhance your experience. Cookies are small text files stored on your device when you visit scrplay8.best. The following are the categories of cookies we use:

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view stored cookies, delete specific cookies, and block cookies from certain sites. Please refer to your browser's documentation for specific instructions. Please note that disabling essential cookies will affect the functionality of the scrplay8 platform and you may be unable to log in or use certain features properly.

The scrplay8 platform is exclusively for individuals aged 18 and above. scrplay8 does not knowingly collect or process personal data from individuals under the age of 18.

Should scrplay8 discover that personal data belonging to an individual under 18 has been collected without our knowledge — whether through identity fraud or any other means — we will take immediate steps to:

• Closing the relevant account immediately
• Deleting all personal data belonging to that individual from our systems
• Reporting the incident to the relevant authorities where necessary

Scrplay8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements or technological developments. Any significant changes to how we collect or use your personal data will be communicated to you via:

• Email notifications sent to your registered email address
• Prominent notices within the scrplay8 platform when you log in
• Updating the "Last Updated" date at the top of this document

Minor changes that do not affect your fundamental privacy rights may be made without specific notification, but the document's update date will always reflect the latest version currently in effect.

We encourage you to review this Privacy Policy periodically so you remain informed about how we protect your information. Your continued use of the scrplay8 platform after any changes take effect constitutes your acceptance of the revised policy.

For any questions, concerns or requests relating to your privacy and personal data protection at scrplay8, please contact us through the following channels:

• Privacy Email: support@scrplay8.best — use the subject line "Data Privacy Inquiry"
• Security: security@scrplay8.best — for account security issues or data breach concerns
• Live Chat: available 24 hours a day within the scrplay8 platform

We are committed to addressing all privacy-related inquiries within a reasonable timeframe — typically within 14 business days for formal written requests, and faster for general inquiries via live chat. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the procedures established under the PDPA 2010.

Effective Date: 1 January 2026 | Version: 3.0 | scrplay8.best