🔒 SCR88 Privacy Policy updated January 2026  |  Your data is safe with us 🛡️ 256-bit SSL protects all transactions & players' personal data  |  International banking-grade standards 🇲🇾 SCR88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA)  |  Local regulatory compliance 💳 Secure deposits via Touch 'n Go, GrabPay, DuitNow & FPX  |  All Malaysian payment methods 🚫 SCR88 never sells your personal data to third parties  |  Your privacy is our priority 🔒 SCR88 Privacy Policy updated January 2026  |  Your data is safe with us 🛡️ 256-bit SSL protects all transactions & players' personal data  |  International banking-grade standards 🇲🇾 SCR88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA)  |  Local regulatory compliance 💳 Secure deposits via Touch 'n Go, GrabPay, DuitNow & FPX  |  All Malaysian payment methods 🚫 SCR88 never sells your personal data to third parties  |  Your privacy is our priority
Official SCR88 Document – Updated January 2026

SCR88 Privacy Policy – Data Protection for Malaysian Players

SCR88 takes the privacy of Malaysian players seriously. This policy clearly explains what data we collect, how it is used, and how we protect it at all times.

Updated: January 2026 Bahasa Malaysia 12 Sections Reading time: ~7 minutes

SCR88 Privacy Policy Summary

The most important things you need to know about how SCR88 manages your data

256-bit SSL Protected Data

All data transmitted between your device and SCR88's servers is encrypted using 256-bit SSL technology — the same standard used by Malaysia's major banks.

Advanced Security
Never Sold to Third Parties

SCR88 never sells, rents, or discloses players' personal data to third parties for marketing or commercial purposes without your explicit consent.

Our Commitment
Right to Access & Correct Data

You have the right to view, amend, and request the deletion of your personal data held by SCR88 at any time by contacting our support team.

Your Rights
Compliant with Malaysia's PDPA 2010

SCR88 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring that all data management practices comply with local legal requirements.

PDPA 2010
Limited Use of Cookies

SCR88 uses cookies for functional and security purposes only — to ensure a smooth login experience and to protect your account from unauthorised access.

Cookies
Marketing Communications Preferences

You may opt out of marketing communications from SCR88 at any time through your account settings or by contacting our support team.

Your Choices
Last updated: 15 January 2026
1

Introduction & Scope

This Privacy Policy explains how SCR88 (scr88.xyz) collects, uses, stores, protects, and shares your personal information when you use our platform. We are committed to keeping your privacy protected at all times, and we operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all SCR88 platform users — including website visitors, registered players, and anyone who interacts with us via live chat, email, or other communication channels. By using the SCR88 platform, you agree to the collection and use of information as described in this Privacy Policy.

This Privacy Policy should be read together with Terms & Conditions SCR88. Together, these two documents form the complete agreement between you and SCR88 regarding your use of the platform.

If you have any questions about this Privacy Policy or how SCR88 handles your data, please contact our privacy officer at support@scr88.xyz. We are committed to responding to privacy-related enquiries within 3 business days.

2

Data We Collect

SCR88 only collects personal data that is necessary to provide Malaysian players with a safe, legitimate, and quality service. The data we collect falls into two main categories:

Data you provide directly:

  • Full name as shown on your Malaysian MyKad or passport.
  • Date of birth for age verification (21 years and above).
  • An active email address for account communications.
  • Malaysian phone number for verification and security purposes.
  • Payment method details — e-wallet account numbers or online banking details used for deposits and withdrawals (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, ShopeePay, Boost, Maybank2u, CIMB Clicks).
  • Identity verification documents (MyKad or passport) when required for the KYC process.

Data collected automatically when you use the platform:

  • IP address and device information (device type, operating system, web browser).
  • Platform usage data — pages visited, session duration, and in-game actions.
  • Complete betting records and financial transaction history.
  • Access logs and account security information.
  • Approximate location based on IP address (state/region within Malaysia).
SCR88 does not directly collect credit or debit card information. All financial transactions are processed through registered third-party payment service providers that maintain their own security compliance.
3

How We Collect Your Data

SCR88 collects your personal data through several key channels:

  • Registration form: When you register an SCR88 account, you provide the basic information required to create it.
  • KYC process: During identity verification, you will be asked to upload an identification document. This document is processed securely and deleted once verification is complete.
  • Financial transactions: Payment method details are collected when you make a deposit or submit a withdrawal request on the SCR88 platform.
  • Platform activity: Our system automatically records your gaming and betting activity for account record-keeping, fraud detection, and service improvement purposes.
  • Support communications: When you contact the SCR88 support team via live chat, WhatsApp, or email, the information you provide is retained for customer service record-keeping.
  • Cookies and tracking technologies: The SCR88 platform uses session cookies and preference cookies to enhance the user experience — further details are available in Section 8.

SCR88 does not purchase or acquire personal data about you from external sources. All data we hold is either provided directly by you or generated through your use of the SCR88 platform.

4

Purpose of Data Use

SCR88 uses your personal data solely for legitimate and necessary purposes. We do not use your data for anything unrelated to the services you use. Our data use purposes are as follows:

Purpose Description Legal Basis
Account Management Creating, verifying, and managing SCR88 player accounts Contract fulfilment
Payment Processing Processing deposits and withdrawals via Malaysian payment methods Contract fulfilment
Identity Verification (KYC) Verifying player age and identity in accordance with compliance requirements Legal obligation
Fraud Detection Monitoring suspicious activity to protect both players and the platform Legitimate interests
Customer Support Providing assistance and resolving issues reported by players Contract fulfilment
Service Communications Sending important notifications related to your account, security, and platform updates Legitimate interests
Marketing (Optional) Sending SCR88-related promotions and offers — with your consent only Consent
Platform Improvements Analysing usage patterns to improve SCR88's products and services Legitimate interests

SCR88 does not use your data to make automated decisions that could significantly affect your rights without human review. Any decision relating to your account — such as a suspension or closure — involves a review by our human team.

5

Data Sharing

SCR88 does not sell, rent, or disclose your personal data to third parties for their marketing or commercial purposes. We only share data in the following limited and necessary circumstances:

  • Payment service providers: To process your deposits and withdrawals, SCR88 is required to share the necessary payment information with service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX. This sharing is limited to what is strictly necessary to complete each transaction.
  • Game providers: Gaming platforms such as Evolution Gaming and Pragmatic Play receive the session data necessary to deliver their games. These providers are subject to their own privacy policies and confidentiality agreements with SCR88.
  • Security and verification services: SCR88 works with specialist third-party services for identity verification and fraud detection. Data shared with these parties is strictly limited to what is necessary for those purposes.
  • Legal requirements: SCR88 may be required to disclose your data to the relevant Malaysian authorities where mandated by law, court order, or a lawful regulatory directive.
SCR88 does NOT share your data with insurance companies, banks, employers, educational institutions, or any third party for purposes unrelated to providing you with the SCR88 platform services.

All third parties that receive data from SCR88 are bound by strict data protection agreements and are required to handle that data to a security standard equal to or higher than SCR88's own.

6

Data Security

SCR88 continuously invests in security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we employ include:

  • 256-bit SSL Encryption: All data transmitted between your browser and the SCR88 platform is encrypted using 256-bit TLS/SSL — the same standard used by Malaysia's leading online banks.
  • Two-Factor Authentication (2FA): Players can enable 2FA for an added layer of protection on their SCR88 account, requiring verification via an OTP code sent to their registered phone number.
  • Secure password storage: Your password is never stored in plain text — we use strong hashing algorithms to ensure it remains unreadable, even to SCR88's internal team.
  • 24-hour security monitoring: Our systems are continuously monitored to detect and respond to security threats in real time.
  • Internal access restrictions: Only SCR88 staff who require access to specific data in order to perform their duties are permitted to do so — and all access is logged for audit purposes.
  • Regular security testing: SCR88 conducts regular penetration testing and security audits carried out by independent third-party specialists to identify and address any vulnerabilities.
While SCR88 takes all reasonable steps to protect your data, no system can be guaranteed to be 100% free from cyber threats. We encourage players to also take their own precautions, such as using strong, unique passwords and never sharing their login credentials with anyone.
7

Data Storage & Retention

SCR88 retains your personal data for as long as it is needed for the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. Our general data retention principles are as follows:

  • Active account data: Retained for as long as your account remains active on the SCR88 platform.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial compliance requirements — this covers all deposit and withdrawal records.
  • KYC Documents: Retained for the period required under anti-money laundering (AML) regulations — typically 5 years after account closure.
  • Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
  • Platform usage data and security logs: Retained for 12 months, then deleted or anonymised.

Once data is no longer needed and the mandatory retention period has ended, SCR88 will securely delete or anonymise it. Anonymised data can no longer be linked to you personally and may be used for analytical purposes without restriction.

If you close your SCR88 account, your data will be retained for the period required by law before being permanently deleted. You will be informed of this retention period during the account closure process.

8

Cookies & Tracking Technologies

The SCR88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure account security. The types of cookies we use are:

  • Session Cookies (Required): Temporary cookies that exist only for the duration of your browsing session. They are necessary to keep you logged in and ensure smooth navigation between pages on the SCR88 platform. These cookies are deleted when you close your browser.
  • Security Cookies (Required): Helps identify legitimate login sessions and protects your account against CSRF (Cross-Site Request Forgery) attacks and other security threats.
  • Preference Cookies (Optional): Stores your preferences such as language and display settings so you don't have to reconfigure them each time you log in.
  • Analytics Cookies (Optional): Collects anonymised information on how players use the SCR88 platform — including most-visited pages, session duration, and navigation patterns. This data helps us improve the platform.
You can manage cookies through your browser settings. However, disabling required cookies may affect the functionality of the SCR88 platform, including your ability to log in to your account.

SCR88 does not use third-party cookies for advertising or cross-site tracking purposes. We do not participate in any ad networks that track your activity outside of the SCR88 platform.

9

Player Rights

As a registered SCR88 player in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) Malaysia with respect to your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you. SCR88 will provide this information within 21 calendar days of receiving your request.
  • Right of Correction: If the data we hold about you is inaccurate or out of date, you have the right to request a correction. You may also update certain profile details directly through your SCR88 account settings.
  • Right to Erasure: Under certain circumstances, you may request that SCR88 delete your personal data. Please be aware that some data may need to be retained to fulfil legal obligations even after a deletion request is submitted.
  • Right to Restrict Processing: You may request that SCR88 restrict the processing of your data in certain circumstances — for example, while you are disputing the accuracy of that data.
  • Right to Withdraw Consent: For activities that rely on your consent (such as marketing communications), you may withdraw that consent at any time without affecting your access to other SCR88 services.
  • Right to Lodge a Complaint: If you are not satisfied with how SCR88 handles your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority.

To exercise any of the above rights, contact SCR88's privacy officer at support@scr88.xyz, stating the right you wish to exercise and the relevant details. We will respond within 21 calendar days and may require identity verification before processing your request.

10

Children's Data

The SCR88 platform is strictly for users aged 21 and above. SCR88 does not knowingly collect any personal data from individuals under the age of 21.

If you believe that someone under the age of 21 has registered an account or submitted their personal data to SCR88, please contact us immediately at support@scr88.xyz. We will investigate and delete the data without delay if confirmed.

SCR88 carries out age verification during registration and throughout the KYC process. Any account found to belong to a minor will be closed immediately, and any remaining funds will be returned to the parent or guardian upon verification.

11

Third-Party Links

The SCR88 platform may contain links or integrations to third-party services that are necessary to deliver certain functionality — such as Malaysian e-wallet payment interfaces or live gaming platforms. When you use these third-party services, you are entering their environment, which is governed by their own privacy policies.

SCR88 is not responsible for the privacy practices or content of third-party websites or services. We encourage you to review the privacy policy of any third-party service you access through the SCR88 platform.

All third-party integrations on SCR88 undergo security reviews and privacy compliance assessments before being incorporated into the platform. We only work with service providers that maintain security and privacy standards equal to or higher than our own.
12

Privacy Policy Updates

SCR88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Last updated" date at the top of this document will be revised whenever changes are made.

For material changes — meaning changes that could significantly affect how your data is used — SCR88 will provide at least 14 days' notice before the changes take effect, via:

  • Email to your registered address.
  • Prominent in-platform notifications on the SCR88 platform when you log in.
  • Updates to this page will display a clear effective date.

Continued use of the SCR88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you may close your account by contacting support@scr88.xyz.

For all enquiries, concerns, or requests relating to this Privacy Policy, please contact us via:

  • Privacy email: support@scr88.xyz
  • Live Chat: Available 24/7 within the SCR88 platform
  • WhatsApp: Number listed within the SCR88 platform

Your Privacy Rights at SCR88

You have full control over your personal data on the SCR88 platform

Right to Data Access

Request a copy of all personal data SCR88 holds about you. We will provide it within 21 days in a readable format.

Right of Correction

If your data is inaccurate, you have the right to request a correction. Some information can be updated directly in your SCR88 account settings.

Right to Erasure

Under certain circumstances, you may request that SCR88 delete your personal data, subject to any applicable legal retention obligations.

Right to Restriction

You may request that SCR88 restrict the processing of your data in certain circumstances, such as when you are disputing the accuracy of the data we hold.

Withdraw Consent

For consent-based activities such as marketing emails, you may withdraw your consent at any time without affecting your access to the SCR88 platform.

Right to Lodge a Complaint

If you are not satisfied with how SCR88 handles your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

Why Your Data Is Safe with SCR88

Concrete steps SCR88 takes to keep your privacy protected at all times

End-to-End Encryption

All communications between your device and SCR88's servers are encrypted using 256-bit SSL. This means that even if someone were to intercept your network traffic, they would be unable to read your data.

256-bit SSL
Segmented Database

Financial data, identity data, and gaming activity data are stored in separate, segmented databases. This reduces the risk of large-scale data exposure in the event of a security incident.

Data Segmentation
Strict Internal Access Controls

SCR88 staff are only granted access to the data they need to carry out their duties. Access to sensitive data such as financial information and KYC details is restricted to the teams that strictly require it.

Minimisation Principle
Malaysia Personal Data Protection Act 2010 (PDPA) Compliance

SCR88 operates in full compliance with Malaysia's Personal Data Protection Act 2010. This is more than a formality — it is the framework that governs how we collect, store, and use your data.

PDPA 2010
Independent Security Audit

SCR88 conducts regular security and privacy audits through independent third parties. The findings are used to continuously strengthen our data protection practices.

Independent Audit
Immediate Incident Notification

In the event of any security incident that may affect your data, SCR88 is committed to notifying impacted players within 72 hours — in line with cybersecurity industry best practices.

Transparency

FAQ – SCR88 Privacy Policy

Answers to the most frequently asked questions about privacy and data at SCR88

No. SCR88 never sells, rents, or discloses players' personal data to third parties for marketing or commercial purposes. Your data is only shared in very limited situations — with your chosen Malaysian payment service provider during deposits/withdrawals, with game providers as required to deliver gameplay, and with Malaysian authorities where required by law. All such parties are bound by strict data protection agreements with SCR88.

You may request the deletion of your data by contacting SCR88's privacy officer at support@scr88.xyz and stating that you wish to exercise your "Right to Erasure". We will process your request within 21 days. Please note that some data may need to be retained to fulfil legal obligations even after a deletion request — for example, financial transaction records which must be kept for 7 years under Malaysian financial law. We will clearly inform you which data can be deleted and which must be retained, and why.

When you close your SCR88 account, your data is not deleted immediately. It will be retained for the period required under Malaysian law — financial records are kept for 7 years, KYC documents for 5 years after closure, and communication logs for 2 years. Once these periods expire, data will be permanently deleted or anonymised. You will be informed of these retention periods during the account closure process. Anonymised data can no longer be linked to your identity.

Yes, you can opt out of marketing communications from SCR88 at any time in one of two ways: (1) Click the "Unsubscribe" link found at the bottom of any SCR88 promotional email; or (2) Log in to your SCR88 account, go to Settings > Notifications, and disable the marketing communications option. Please note that opting out of marketing does not stop you from receiving important account-related emails — such as deposit confirmations, security alerts, or notices of material changes to our terms. These emails will continue to be sent as they form an essential part of SCR88's service to you.

In the event of a security incident involving player data, SCR88 has a rigorous incident response procedure in place. The first step is to identify and contain the incident as quickly as possible. We then assess the scope and impact of the breach. Affected players will be notified within 72 hours via email and platform notification — we will not conceal serious security incidents. We will also report to the relevant authorities as required by applicable law. Once the incident is resolved, we will conduct a thorough review and implement preventive measures to avoid recurrence.
Licensed Platform
256-bit SSL
PDPA MY Compliance
24/7 Support
Data Secure
Your Data is Safe. Ready to Get Started?

Register with SCR88 & Enjoy a Safe and Secure Betting Platform

Over 150,000 Malaysian players have trusted SCR88 with their data and funds. Register for free, deposit via Touch 'n Go or DuitNow, and start enjoying 500+ games with confidence.

256-bit SSL protected data Malaysia PDPA Compliance Never sold to third parties
Bahasa Melayu