Scrplay1 Privacy Policy

1 Introduction

Scrplay1 ("we", "us", "our") operates an online gaming and sports betting platform accessible at scrplay1.cam. This Privacy Policy describes our practices regarding the personal data of users ("you", "your") who register an account, browse the site, or otherwise interact with Scrplay1.

We process personal data to deliver our services, verify identity and age, process payments in Malaysian Ringgit (MYR), manage bonuses and loyalty rewards, prevent fraud and money laundering, meet responsible gambling obligations, and fulfil any applicable legal requirements. We do not process more data than is necessary for those purposes.

This policy applies to data collected through the Scrplay1 website, any mobile-optimised version, customer support channels, email correspondence, and payment flows. It does not apply to third-party services you may access via links referenced elsewhere in our documentation; those services operate under their own privacy notices.

2 Definitions

The following terms carry the meanings defined below throughout this Privacy Policy:

• Personal Data — any information that identifies or can identify a natural person, directly or indirectly, including name, identity document number, email address, phone number, device identifiers, or financial account details.
• Processing — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• Data Subject — the identifiable natural person to whom personal data relates; in this policy, the registered Scrplay1 account holder.
• Third-Party Processor — a company or service provider that processes personal data on behalf of Scrplay1 under a written agreement and strictly for the purpose we specify.
• KYC (Know Your Customer) — identity and age verification procedures required to confirm a user's eligibility and protect against financial crime.
• Cookies — small text files placed on a user's device by the Scrplay1 platform to record preferences, session information, or analytical data.

3 Personal Data We Collect

We collect personal data through different channels depending on how you interact with Scrplay1. The categories below describe what we collect and the typical source:

3.1 Account Registration Data

When you create a Scrplay1 account, we collect your chosen username, password (stored in hashed form), email address, phone number, date of birth, and residential location (such as Kuala Lumpur, Penang, or Johor Bahru). This information is required to create and maintain your account, confirm you are at least 21 years old, and route platform communications to you.

3.2 Identity Verification Data

To comply with age verification, anti-money-laundering, and fraud-prevention obligations, we may request a copy of a government-issued identity document (such as a Malaysian MyKad or passport), a recent proof of address, or supporting source-of-funds documentation. Where third-party identity-verification services are engaged, those providers act as processors under binding data-protection agreements.

3.3 Payment and Transaction Data

When you deposit or withdraw via GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, or another supported method, we record transaction amounts in MYR, dates and times, payment method identifiers, transaction references, and processing status. We do not store complete card numbers or full online banking credentials; sensitive payment authentication is handled by the respective payment provider.

3.4 Gameplay and Wagering Data

We maintain records of game sessions, sports markets and outcomes (including EPL, Liga Super Malaysia, UFC, and live football markets), wager amounts, win and loss records, bonus usage, and loyalty point balances. This data is used to settle bets, calculate cashback and reload bonuses, generate account statements, and detect irregular or prohibited betting patterns.

3.5 Technical and Device Data

We automatically collect IP address, browser type and version, operating system, screen resolution, referring URL, pages visited, session duration, and device identifiers. This technical data supports platform security, fraud screening, and performance monitoring. Location-inference from IP data may be used to enforce geo-based eligibility rules.

3.6 Communications Data

When you contact our 24/7 support team via live chat or email, we retain records of those communications — including the content of messages, timestamps, and account references — to resolve disputes, train support staff, and maintain service quality.

4 How We Use Your Data

Scrplay1 uses personal data only for the purposes described below. We do not sell personal data to marketing companies, data brokers, or advertising networks.

• Account administration: creating, maintaining, and securing your Scrplay1 account; processing login, password changes, and session authentication.
• Payments: facilitating MYR deposits and withdrawals through supported methods including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, and direct bank transfer; reconciling transaction records.
• Platform services: providing access to sports betting markets, live casino games, slots, live football, lottery, and arcade products; settling wagers; applying bonuses and loyalty rewards.
• Identity and regulatory compliance: verifying minimum age (21+), confirming identity, screening against sanction lists, and meeting anti-money-laundering obligations.
• Responsible gambling: enforcing self-exclusion requests, applying deposit limits, monitoring for potential problem-gambling indicators, and maintaining cooling-off records.
• Security and fraud prevention: detecting and investigating suspicious login attempts, payment fraud, account compromise, bonus abuse, and prohibited conduct.
• Communications: sending service-critical notifications such as account verification emails, withdrawal confirmations, and material policy updates — not promotional messages unless separately consented to.
• Platform improvement: analysing aggregated, anonymised usage patterns to improve product design, navigation, and game selection.

5 Legal Basis for Processing

Scrplay1 processes personal data on one or more of the following bases, depending on the specific purpose:

• Performance of a contract: processing necessary to provide the account and gaming services you have requested, including payment processing and wager settlement.
• Legal obligation: processing required to comply with age-verification rules, anti-money-laundering requirements, record-keeping obligations, and directions from competent regulatory or legal authorities.
• Legitimate interests: fraud prevention, platform security, dispute investigation, and service quality improvement, provided those interests do not override your fundamental rights in the circumstances.
• Consent: where we rely on your consent — for example, for optional marketing communications or certain cookie categories — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Third Parties

We do not sell, rent, or trade personal data. We may share data with third parties only in the limited circumstances below:

6.1 Payment Service Providers

Processors such as GrabPay, Touch 'n Go eWallet, Boost, DuitNow, and bank partners receive only the data necessary to authorise and complete a transaction. They operate under their own privacy notices and applicable financial-regulation requirements.

6.2 Identity and Fraud Verification

Where we engage specialist third-party providers for KYC screening, sanctions checking, or fraud-signal analysis, those providers act as processors under written data-processing agreements, with access limited to what is required for the contracted service.

6.3 Game Software Providers

To deliver live casino, slot, and sports-market products, limited technical data (such as session tokens and game-result references) may be exchanged with licensed game-software providers. No financial payment details are passed to game providers.

6.4 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulators, courts, or other government authorities where we are required to do so by applicable law, valid court order, or lawful regulatory instruction. We will notify you of such a disclosure where legally permitted to do so.

6.5 Business Restructuring

In the event of a merger, acquisition, or business transfer, user data may form part of transferred assets. Affected users will be notified, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

7 Data Retention

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and financial-record obligations. The indicative retention periods shown in the table in Section 3 apply. Where data is no longer required, it is deleted or anonymised in a manner that prevents re-identification.

If you close your Scrplay1 account, we will retain records required for financial audit, anti-money-laundering compliance, dispute resolution, and responsible-gambling obligation records. Copies of identity documents may be held for the minimum statutory period applicable to our operating obligations, which is typically no less than five years from the date of verification.

8 Security Measures

Scrplay1 applies industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and Scrplay1 servers.
• Password hashing using industry-accepted algorithms — we do not store plain-text credentials.
• Access controls that limit internal access to personal data on a strict need-to-know basis, with access logging and periodic review.
• Fraud monitoring systems that detect and flag anomalous login attempts, payment patterns, and account behaviour in real time.
• Segregated data environments separating player funds records from operational system data.

No method of electronic transmission or storage is completely secure. While we take data protection seriously, we cannot guarantee that systems will never be compromised. In the event of a data breach that poses a significant risk to data subjects, we will take prompt remediation steps and notify affected users in accordance with applicable law.

9 Cookies and Tracking Technologies

Scrplay1 uses cookies and similar technologies to operate the platform, remember session preferences, and understand how users navigate the site. Cookies are placed in the following categories:

• Strictly Necessary Cookies: essential for login sessions, navigation, and security checks. These cannot be disabled without impairing core functionality.
• Functional Cookies: remember user preferences such as language selection and last-visited game category to personalise your experience.
• Analytical Cookies: collect anonymised, aggregated data about how pages are used — such as pages visited, time on site, and error rates — to help us improve platform performance. No personally identifying information is included in analytical reports.

We do not use third-party behavioural advertising cookies to track users across external websites. You may manage cookie settings through your browser. Blocking strictly necessary cookies will affect platform functionality, including login and payment flows.

10 Your Rights as a Data Subject

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by Scrplay1:

• Right of Access: request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: request correction of inaccurate or incomplete personal data.
• Right to Erasure: request deletion of personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
• Right to Restriction: request that we limit processing of your data in certain circumstances while a dispute is resolved.
• Right to Data Portability: request a machine-readable copy of data you provided to us, where technically feasible and legally applicable.
• Right to Object: object to processing based on legitimate interests where your individual circumstances warrant; we will assess and respond to the objection.
• Right to Withdraw Consent: where processing is based on consent (for example, optional communications), withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, contact our support team using the plain-text email address shown in the footer. We will respond within a reasonable time and may need to verify your identity before fulfilling a request. We will not charge a fee for routine requests; repeated, unfounded, or excessive requests may attract an administrative charge where permitted by law.

11 Minors and Age Restriction

Scrplay1 is strictly an adults-only platform. Users must be 21 years of age or older to register, deposit, wager, or redeem any bonus or reward. We do not knowingly collect or process the personal data of any person below this minimum age.

Where we identify that data has been collected from a person below the required age — whether through our own detection, a parental notification, or a regulatory inquiry — the account will be closed immediately, all balances suspended pending review, and the relevant personal data erased in accordance with our legal obligations.

Parents and guardians are encouraged to use device parental controls to prevent minors from accessing gambling platforms. If you have reason to believe that a minor may have registered with Scrplay1, please contact our support team immediately using the plain-text email shown below.

12 Changes to This Policy and Contact Information

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data-processing practices. Material changes will be communicated by displaying the updated effective date at the top of this page. Continued use of Scrplay1 after a revision constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If any clause of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions continue in full effect. The most current version of the policy governs the relationship between Scrplay1 and its users.

For all data-protection enquiries — including right-of-access requests, data correction, deletion requests, or questions about our security practices — please contact the Scrplay1 support team. The support email address is shown as plain, non-clickable text in the footer of this page. Our team aims to respond to all privacy-related enquiries within 5 business days, with more complex requests acknowledged promptly and resolved as soon as practicable.