scr2u Privacy Policy

1. Introduction

Welcome to scr2u. This Privacy Policy ("Policy") describes how scr2u ("we", "us", "our") collects, uses, discloses, and safeguards personal information obtained from individuals ("you", "your") who access or use our online gaming platform at scr2u.lat ("Platform"), including all related services, features, and content.

This Policy applies to all users of the scr2u Platform, including registered members across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and throughout Malaysia. By creating an account or using any part of the scr2u Platform, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

If you do not agree with the terms of this Privacy Policy, please discontinue use of the Platform immediately. We encourage you to review this Policy periodically, as it may be updated from time to time.

2. Personal Data We Collect

scr2u collects personal data through various means, including account registration, platform usage, payment processing, and communications with our support team. The categories of data we collect include:

Identity & Contact Information

• Full legal name and date of birth (to verify you are 21 years of age or older, as required by our responsible gaming obligations)
• Email address and mobile phone number
• Residential address (for identity verification and regulatory compliance)
• Copy of government-issued identification (MyKad, passport) where KYC verification is required

Financial Information

• Bank account details (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, AmBank) used for deposits and withdrawals
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR)
• Transaction history, deposit and withdrawal records
• Payment card details (Visa, Mastercard) — processed via encrypted, PCI-DSS compliant payment gateways

Technical & Usage Data

• IP address, device type, browser type and version, operating system
• Pages visited, games played, session duration, click-stream data
• Login timestamps and geographic location data (country/city level)
• Cookies and similar tracking technologies (see Section 6)

Communications Data

• Records of live chat sessions, email correspondence, and support tickets with scr2u staff
• Survey responses, feedback submissions, and promotional entries

3. How We Use Your Personal Data

scr2u processes your personal data only for legitimate purposes directly related to the operation of the Platform and our obligations to you as a member. Specifically, we use your data to:

• Account management: Create, maintain, and secure your scr2u account, verify your identity, and provide access to the full range of Platform features including live baccarat, slots, sportsbook, and horse racing.
• Age verification: Confirm that you meet the minimum age requirement of 21 years to participate in online gaming on the scr2u Platform, in keeping with our responsible gaming commitments.
• Payment processing: Facilitate MYR deposits and withdrawals via local Malaysian payment methods, including DuitNow QR, Touch 'n Go eWallet, Boost, and major local banks.
• Customer support: Respond to queries, resolve disputes, and provide technical assistance via live chat, email, or other support channels.
• Legal and regulatory compliance: Meet anti-money laundering (AML), know-your-customer (KYC), and other applicable regulatory obligations.
• Responsible gaming: Monitor gameplay patterns to identify signs of problem gambling and enforce self-exclusion or account limits where requested or required.
• Platform improvement: Analyse anonymised usage data to improve the performance, layout, and features of the scr2u Platform.
• Promotions and communications: Send you relevant offers, VIP tier updates, and platform announcements — only where you have consented to receive such communications.

We will not use your personal data for any purpose that is incompatible with those stated above without first notifying you and, where required, obtaining your consent.

4. Data Sharing and Disclosure

scr2u does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your information in the following limited circumstances:

Service Providers

We engage carefully vetted third-party service providers who assist us in operating the Platform — for example, payment gateway operators, KYC verification providers, cloud hosting services, and fraud detection tools. These parties are contractually bound to process your data solely on our instructions and in accordance with this Policy.

Legal Obligations

We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so, or where such disclosure is necessary to protect the rights, property, or safety of scr2u, our members, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of scr2u's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change and your rights with respect to your data will be preserved.

Aggregated and Anonymised Data

We may share aggregated, anonymised data (which cannot identify any individual) with business partners, research bodies, or for industry reporting purposes. This data does not constitute personal data under applicable privacy frameworks.

5. Data Retention

scr2u retains your personal data for as long as your account remains active or as long as is necessary to fulfil the purposes outlined in this Policy. Specifically:

• Active accounts: Data is retained for the full duration of your membership with scr2u.
• Closed or inactive accounts: Following account closure, we retain personal data for a minimum of five (5) years to comply with AML, KYC, and financial recordkeeping obligations.
• Transaction records: Financial records are retained for a minimum of seven (7) years in line with standard accounting and regulatory requirements.
• Support communications: Chat logs and email records are retained for up to three (3) years for dispute resolution and quality assurance purposes.

Once your data is no longer required for any of these purposes, scr2u will securely delete or anonymise it in accordance with our internal data disposal procedures.

6. Cookies and Tracking Technologies

scr2u uses cookies and similar technologies to enhance your experience on the Platform. A cookie is a small text file placed on your device when you visit our site. We use the following types of cookies:

• Strictly necessary cookies: Required for basic Platform functionality, such as maintaining your login session and remembering your language and currency preferences.
• Analytics cookies: Help us understand how members navigate the Platform so we can improve layout, performance, and content. These cookies collect anonymised, aggregated data only.
• Preference cookies: Remember your settings and personalisation choices so you do not need to re-enter them on each visit.

We do not use advertising or cross-site tracking cookies. You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect Platform functionality.

7. Data Security

scr2u employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your browser and our servers
• AES-256 encryption for sensitive data stored at rest, including financial credentials
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent specialists
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Incident response procedures ensuring prompt notification in the unlikely event of a data breach

While we take every reasonable precaution to secure your data, no system is entirely immune to risk. We encourage you to use a strong, unique password for your scr2u account and to never share your login credentials with anyone.

8. Your Privacy Rights

As a user of the scr2u Platform, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected.
• Right to erasure: Subject to our legal and regulatory retention obligations, you may request that we delete your personal data.
• Right to restriction: You may ask us to restrict the processing of your data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.

To exercise any of these rights, please contact our support team via the live chat widget or by writing to us at the email address in Section 11. We will respond to all verified requests within thirty (30) calendar days.

9. Minors and Age Restriction

The scr2u Platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals below this age threshold. All new account registrations undergo age verification as part of our standard KYC process.

If you are a parent or guardian and believe that a minor has provided us with personal information without your consent, please contact us immediately at the details in Section 11. Upon verification of such a report, we will promptly delete the relevant data and close the associated account.

scr2u is committed to preventing underage gambling. Our responsible gaming tools and age-gating measures are reviewed regularly to ensure they remain effective. For more information, please visit our Responsible Gaming page.

10. Changes to This Policy

scr2u reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where appropriate, via email to your registered address. The effective date at the top of this document will be updated accordingly.

Your continued use of the scr2u Platform following the posting of an updated Policy constitutes your acceptance of those changes. If you do not agree with any revisions, you should discontinue use of the Platform and contact us to request account closure.

We encourage you to check this page periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way scr2u handles your personal data, please do not hesitate to get in touch with our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on every page of the Platform. Average response time under 90 seconds.
• Languages supported: English, Bahasa Melayu, 中文

For responsible gaming concerns, self-exclusion requests, or gambling-related support, please visit our dedicated Responsible Gaming page for further guidance and resources.