Privacy Policy Scrplay VIP – How We Protect Your Personal Data

Scrplay VIP ("we", "our platform") is the data controller for all personal information you provide to us through your use of our online casino platform at scrplayvip.com. This privacy policy applies to all users of the platform, including registered members, visitors browsing our website, and individuals who interact with us through any communication channel.

We are committed to processing your personal data in a lawful, fair, and transparent manner in accordance with recognised data protection principles. This means we collect only what we genuinely need, use it solely for purposes we have made known to you, and protect it with appropriate security measures.

This privacy policy is to be read alongside Terms & Conditions Scrplay VIP. Together, these two documents form the complete agreement between you and us regarding how we manage our relationship as player and platform operator.

Scrplay VIP collecting your personal data through several means: information you provide directly during registration or interaction with the platform, data generated automatically as you use our services, and in certain cases, information from licensed third parties.

Information you provide directly:

• Full name as stated on identity card
• An active Malaysian phone number
• Valid email address
• Date of birth (for age verification)
• Account password (stored in encrypted form — we have no access to your actual password)
• Identity documents when KYC verification is required
• Bank account or e-wallet details you register for withdrawals

Data automatically generated when you use the platform:

• IP address and device information (device type, operating system, web browser)
• Session data — pages visited, time spent, actions taken
• Gaming activity records — dates, times, game types, bet amounts, and outcomes
• Complete transaction records — all deposits and withdrawals
• Communication logs with the customer support team

Scrplay VIP using your personal data only for legitimate and necessary purposes. We do not use your data for any purpose not stated in this policy without obtaining your prior consent. The following are the primary purposes for which your data is used:

To provide and manage services:

• Creating and managing your account on the platform
• Processing deposits and withdrawals in MYR via local payment methods such as Touch 'n Go, GrabPay, DuitNow, and FPX
• Ensuring games run smoothly and that game outcomes are recorded accurately
• Calculating and crediting bonuses, VIP cashback and loyalty programme rewards
• Providing effective customer support in Bahasa Malaysia

For security and legal compliance:

• Verifying your identity and confirming that you meet the minimum age requirement of 21 years
• Detecting and preventing fraud, money laundering, and other illicit activities
• Comply with reporting obligations to relevant regulatory bodies and authorities
• Enforcing our platform's terms and conditions

To enhance your experience:

• Analysing platform usage patterns to identify areas for improvement
• Personalising game recommendations based on your play history
• Sending relevant service-related communications such as bonus notifications and platform updates
• Conducting regular customer satisfaction surveys

Scrplay VIP does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. This is an absolute commitment we will not compromise on. However, there are limited circumstances in which we need to share your data with certain parties in order to deliver our services to you:

Payment processors: We share the minimum necessary information with payment processors such as FPX providers, Touch 'n Go, GrabPay, DuitNow, Boost and ShopeePay platforms, solely for the purpose of processing your transactions. These processors are bound by strict data protection agreements with us.

Game providers: To enable you to play games from providers such as Evolution Gaming and Pragmatic Play Live, basic session information must be shared with those providers. No personal information that directly identifies you will be shared beyond what is strictly necessary.

Regulatory bodies and authorities: We may be required to disclose your data to our licensing regulatory body, law enforcement agencies, or government authorities if mandated by law or a valid court order. We will notify you of any such disclosure where permitted by law.

Technical service providers: Vendors providing our technical infrastructure services such as cloud services, security monitoring and fraud detection may need to access certain data in the course of performing their functions. All such vendors are subject to strict data processing agreements and are not permitted to use your data for any other purpose.

Protecting your personal data is the highest technical and operational priority at Scrplay VIP. We continually invest in our security infrastructure to keep your data safe from both internal and external threats.

Technical security measures we have implemented:

• 256-bit SSL/TLS Encryption: All communications between your device and our servers are encrypted using the latest SSL/TLS security standards
• Data-at-rest encryption: Sensitive data stored in our databases is encrypted at rest, not only during transmission
• Role-based access control: Our staff can only access the data they need to perform their specific job functions — the principle of least privilege is strictly enforced
• Two-factor authentication for internal systems: All staff with access to customer data are required to use 2FA when logging into our systems
• 24/7 security monitoring: An intrusion and anomaly detection system operates around the clock to identify suspicious activity
• Regular security audits: We conduct independent penetration testing and security audits at least twice a year
• Secure data backup: Data is backed up daily to encrypted, geographically separate locations for disaster recovery

While we take all reasonable steps to protect your data, no system can guarantee 100% security against all threats. In the event of any data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the incident, in line with industry best practices.

Scrplay VIP uses cookies and similar tracking technologies to enhance your experience on our platform, ensure essential functions operate correctly, and analyse usage patterns for continuous improvement purposes.

Types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymised information about how you use the platform — pages visited, load times, and errors encountered. This data is used solely to improve platform performance.
• Functional Cookies: Saving your preferences such as your chosen language, last used betting limits, and display settings for a more convenient experience on future visits.
• Analytics Cookies: Helping us better understand how players use the platform so we can make data-driven decisions about which features and games to prioritise for development.

You can manage your cookie settings through your web browser at any time. Most modern browsers allow you to view, delete and block cookies from specific websites. Please note that disabling essential cookies may affect your experience on the platform and some functions may not work correctly.

Scrplay VIP retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal obligations. The following are the general retention periods we observe:

• Active account data: Retained for as long as your account is active and for 5 years after account closure for legal compliance purposes
• Financial transaction records: Retained for 7 years in accordance with the Companies Act and relevant Malaysian financial legislation
• Customer support communication logs: Retained for 2 years for service quality and dispute resolution purposes
• Session data and gaming activity: Detailed data is retained for 12 months; anonymised aggregate data is retained longer for trend analysis
• KYC verification documents: Retained for 5 years from the date of submission in accordance with anti-money laundering legislation

Once the retention period has expired, or upon receipt of your data deletion request, we will securely delete or anonymise your data so that it can no longer be linked to your identity. This secure deletion process covers permanent removal from both active storage and backups.

As a player Scrplay VIP who are domiciled in Malaysia, you have several important rights under the Malaysian Personal Data Protection Act 2010 (PDPA) and our privacy policy. We fully respect and facilitate the exercise of all these rights.

Scrplay VIP takes child protection very seriously. Our platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals below this age threshold.

Should we find that we have inadvertently collected data from individuals under the age of 21, we will immediately take the following steps:

• Closing the account in question immediately
• Removing all related personal data from our systems
• Refunding any real money balance to the original deposit source
• Disclosing information to the relevant authorities when required by law

If you have reason to believe that a minor has registered an account on our platform, please contact our support team at support@scrplayvip.com immediately. We will investigate and take appropriate action within 24 hours of receiving the report.

Scrplay VIP may update this privacy policy from time to time to reflect changes in our privacy practices, applicable laws or improvements in how we deliver our services. We are committed to providing adequate notice before any major changes take effect.

For any material changes to this privacy policy, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to all registered members via email at least 14 days before any changes take effect
• Displaying clear in-platform notices detailing the changes made
• In the case of highly material changes, we may require your explicit re-consent before continuing to provide services

Your continued use of our platform after the effective date of any changes to this privacy policy will be considered your acceptance of the updated version. If you do not agree with the changes, you have the right to close your account and request data deletion before the effective date.

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please do not hesitate to contact us. Our data protection team is ready to assist you in Bahasa Melayu.

• Data Privacy Email: support@scrplayvip.com (subject: "Data Privacy Request")
• Live Chat: Available 24/7 within the platform — select "Privacy & Data" from the topic menu
• Response Time: Data privacy-related requests are responded to within 3 business days; data subject rights requests are resolved within 14 business days

If you are dissatisfied with how we have handled your privacy request after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection under the Malaysian Ministry of Communications and Digital.