Data Protection · Player Privacy · Last Updated June 2026
This Privacy Policy explains how scrplay2 collects, uses, stores, and protects your personal data when you use our platform. We take player privacy seriously — your data is held securely and used only for legitimate, disclosed purposes.
Our Privacy Commitments
Six core principles that govern how scrplay2 handles every piece of personal information entrusted to us.
All personal data held by scrplay2 is encrypted at rest using industry-standard AES-256 encryption. Data in transit between your device and scrplay2 servers is protected by TLS. Raw payment credentials are never stored on scrplay2 infrastructure.
scrplay2 does not sell, rent, or trade your personal information to third-party marketers. Your data is shared only with service providers necessary to operate the platform — payment processors, KYC verification services, and licensing authorities — under strict data processing agreements.
You have the right to access, correct, and request deletion of your personal data held by scrplay2, subject to legal retention requirements. Submit a data subject request via our support team and we will respond within 30 days.
scrplay2 collects only the personal data necessary to operate the platform, comply with licensing obligations, and process transactions. We do not collect data for purposes beyond those disclosed in this policy without your explicit consent.
Personal data is retained only for as long as required by applicable law and licensing obligations, or for as long as your Account remains active. Following account closure, data is retained for the minimum period required under applicable anti-money laundering and gaming regulations.
Promotional communications from scrplay2 are opt-in. You can withdraw consent for marketing at any time through Account Settings or by contacting our support team. Opting out of marketing does not affect transactional communications related to your Account.
Important: This Privacy Policy ("Policy") applies to all personal data processed by scrplay2 ("scrplay2", "we", "us") in connection with the operation of the scrplay2 platform at scrplay2.org. By registering an Account or using the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.
1.1 This Policy applies to personal data collected and processed by scrplay2 when you: register an Account on the scrplay2 platform; make deposits or withdrawals; participate in any game, bet, or promotion; contact our customer support team; visit the scrplay2 website regardless of whether you are a registered player; or otherwise interact with any scrplay2 service.
1.2 This Policy does not apply to third-party websites, applications, or services that may be linked from the scrplay2 platform. scrplay2 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any third-party service you use.
1.3 scrplay2 operates in compliance with applicable data protection legislation and the data protection requirements of our licensing authority. Where local law in Malaysia imposes additional obligations on the processing of personal data, scrplay2 will comply with those requirements to the extent applicable.
2.1 Registration Data. When you create a scrplay2 Account, we collect: full name; date of birth; residential address; email address; and mobile phone number. This information is required to create and maintain your Account and to verify your eligibility to use the Platform.
2.2 Identity Verification Data. To comply with our Know Your Customer (KYC) obligations under our gaming licence and applicable anti-money laundering regulations, we collect copies of government-issued identity documents (e.g., Malaysian MyKad, passport), proof of address documents, and, where required, source of funds documentation.
2.3 Financial Data. We collect information about your deposits, withdrawals, and transaction history on the Platform. Payment method details (e.g., bank account details for FPX transfers, Touch n Go eWallet references, Boost references) are processed via our payment service providers and are not stored in raw form on scrplay2 servers.
2.4 Gaming Activity Data. We collect records of your gaming activity on the Platform, including games played, bets placed and settled, bonus usage, and session duration. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.
2.5 Technical Data. We automatically collect certain technical information when you access the Platform, including: IP address; device type and operating system; browser type and version; session timestamps; and page interaction data. This data is used for Platform security, fraud prevention, and service improvement.
2.6 Communications Data. We retain records of your communications with our support team via live chat, WhatsApp, and email, for quality assurance, dispute resolution, and regulatory purposes.
3.1 scrplay2 uses your personal data for the following purposes:
3.2 scrplay2 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects on you, except as required for fraud prevention and responsible gaming monitoring, in which case you have the right to request human review of any automated decision.
4.1 scrplay2 processes your personal data on the following legal bases:
5.1 scrplay2 shares your personal data with third parties only where necessary and under appropriate data protection safeguards. Categories of third-party recipients include:
5.2 scrplay2 does not sell, rent, or trade your personal data with third-party advertisers, data brokers, or marketing companies.
5.3 In the event of a merger, acquisition, or sale of all or part of scrplay2's business, your personal data may be transferred to the acquiring entity, subject to the same or equivalent data protection commitments as described in this Policy.
6.1 The scrplay2 website uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and analyse usage patterns. Categories of cookies used include:
6.2 You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from logging in or using core Platform features.
6.3 scrplay2 does not use third-party advertising cookies or allow third-party advertisers to place tracking technologies on the Platform.
7.1 scrplay2 retains your personal data for the following periods:
7.2 Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with scrplay2's data deletion procedures.
8.1 scrplay2 implements technical and organisational measures appropriate to the risk associated with the processing of your personal data. These measures include:
8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, scrplay2 will notify you without undue delay in accordance with applicable data protection requirements.
8.3 While scrplay2 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your Account credentials and for notifying scrplay2 promptly of any suspected unauthorised access to your Account.
9.1 Subject to applicable law and any overriding legal obligations, you have the following rights with respect to your personal data held by scrplay2:
9.2 To exercise any of the above rights, contact scrplay2 via our support channels. We will acknowledge your request within 5 business days and respond substantively within 30 days.
9.3 Where scrplay2 is unable to fulfil a data request due to overriding legal obligations (e.g., mandatory retention of anti-money laundering records), we will explain the specific legal basis for the limitation.
10.1 The scrplay2 Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory step of the scrplay2 registration and withdrawal process.
10.2 If scrplay2 discovers that an Account has been registered by a person under 21, the Account will be immediately suspended, all funds will be subject to review in accordance with our Terms and Conditions, and the personal data of the minor will be deleted except where retention is required by law.
10.3 If you believe that a minor has registered an Account on the scrplay2 Platform, please notify us immediately at [email protected] so that we can take appropriate action.
11.1 scrplay2 reserves the right to update this Privacy Policy from time to time to reflect changes in our processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify you via the email address registered to your Account or through a prominent notice on the Platform, with at least 14 days' notice before the revised policy takes effect.
11.2 Continued use of the scrplay2 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this Policy periodically. The date at the top of this page indicates the version currently in force.
12.1 For any queries regarding this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact the scrplay2 data protection team:
Email: [email protected]
Subject line: Privacy / Data Subject Request
Response time: We acknowledge all privacy enquiries within 5 business days and aim to resolve substantive requests within 30 calendar days.
12.2 If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the data protection supervisory authority in the relevant jurisdiction, or to the dispute resolution mechanism of scrplay2's licensing authority.
Your Data, Protected
Your personal data is encrypted, never sold, and handled under strict data protection commitments. Questions about your data? Our 24/7 support team is here to help.