๐Ÿ”ž 21+ Only  |  Gamble Responsibly  |  scrplay8 is for entertainment purposes only
๐Ÿ”’ Data & Privacy

scrplay8 Privacy Policy

This Privacy Policy describes how scrplay8 ("the Company," "we," "us," "our") collects, uses, stores, shares, and protects the personal data of users ("you," "your") who access or register on the scrplay8 platform at scrplay8.org. By creating an account or using the scrplay8 platform, you acknowledge that you have read and understood this Policy.

Last Updated: June 2026 Governing Language: English PDPA Aligned

Our Privacy Commitments to You

scrplay8 handles your personal data responsibly and in accordance with applicable data protection standards.

Data Security First

scrplay8 implements SSL encryption, access controls, and secure infrastructure to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Security measures are reviewed regularly as part of our international gaming authority licence obligations.

You Control Your Data

scrplay8 users have meaningful rights over their personal data โ€” including the right to access, correct, restrict, and in certain circumstances request erasure of data. We make exercising these rights straightforward through our support team at [email protected].

No Unauthorised Selling

scrplay8 does not sell, rent, or trade your personal data to third-party marketers. Data is shared with third parties only where strictly necessary to operate the platform โ€” such as payment processors, KYC providers, and game software providers โ€” under contractual data protection obligations.

Minimal Retention

scrplay8 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Transactional records are retained for the minimum period required by our gaming licence and applicable financial regulations.

Clear & Transparent

This Privacy Policy is written in plain, accessible English. scrplay8 will notify you of material changes to this Policy before they take effect. We do not bury significant changes in update logs that nobody reads โ€” we communicate them clearly.

Licence-Compliant

Data protection is a contractual requirement of scrplay8's international gaming authority licence. Compliance is audited periodically. This means privacy obligations are not optional internal policies โ€” they are externally enforced licensing conditions.

Note: This Policy should be read together with the scrplay8 Terms & Conditions. By using the scrplay8 platform, you confirm that you are at least 21 years of age and consent to the data practices described in this Policy.

Section 1
Who We Are

scrplay8 is Malaysia's premier online casino and sportsbook platform, operating at scrplay8.org under international gaming authority licensing. For the purposes of this Privacy Policy, scrplay8 is the data controller responsible for the personal data you provide when using the Platform.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation, including obligations arising under our gaming licence. If you have any questions about how scrplay8 processes your data, contact us at [email protected].

Section 2
Personal Data We Collect

scrplay8 collects personal data in connection with your use of the Platform. The categories of personal data we collect include:

CategoryExamplesWhen Collected
Identity Data Full name, date of birth, national identification number (MyKad / passport number), selfie or photo ID image Registration; KYC verification
Contact Data Email address, mobile phone number, residential address Registration; account updates
Financial Data Bank account details, e-wallet identifiers (Touch n Go, Boost, GrabPay, DuitNow), transaction records, deposit and withdrawal history Deposit / withdrawal; KYC
Technical Data IP address, device type, browser type, operating system, device fingerprint, session logs, login timestamps Automatic โ€” on Platform access
Gaming Data Game history, bet amounts, win/loss records, session duration, product preferences, bonus usage Automatic โ€” during gameplay
Communications Data Support chat transcripts, emails sent to or received from scrplay8, feedback submissions Customer support interactions
Marketing Data Communication preferences, promotional opt-in/opt-out status Registration; preference updates

scrplay8 does not knowingly collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance (e.g., self-exclusion records). We do not collect racial or ethnic origin, religious beliefs, health data, or biometric data beyond photo identity for KYC purposes.

Section 3
How We Use Your Personal Data

scrplay8 processes your personal data for the following purposes:

  • Account Administration: Creating, managing, and maintaining your scrplay8 account, including login verification and session management;
  • Service Delivery: Processing deposits, withdrawals, bets, game results, and bonus allocations across the sportsbook, casino, slots, and crash game products;
  • Identity & Age Verification: Confirming that you meet the 21+ age requirement and completing KYC verification as required by our gaming licence;
  • Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised access, money laundering, and other illegal activity;
  • Regulatory Compliance: Fulfilling obligations under our international gaming authority licence, including AML record-keeping, responsible gaming monitoring, and self-exclusion enforcement;
  • Customer Support: Responding to your queries, resolving disputes, and providing technical assistance via email and live chat;
  • Marketing & Promotions: Sending you information about scrplay8 promotions, bonuses, and offers where you have opted in to receive such communications. You may withdraw this consent at any time;
  • Platform Improvement: Analysing aggregated usage patterns to improve Platform performance, game selection, and user experience;
  • Responsible Gaming: Monitoring gaming behaviour patterns to identify possible problem gambling indicators and to enforce self-exclusion and limit settings you have configured.
Section 4
Legal Bases for Processing

scrplay8 processes your personal data on the following legal bases:

  • Contract Performance: Processing necessary to perform the contract between you and scrplay8 (i.e., providing gaming and payment services under the Terms & Conditions);
  • Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including gaming licence conditions, AML legislation, and data retention requirements;
  • Legitimate Interests: Processing for fraud prevention, security monitoring, Platform improvement, and responsible gaming oversight โ€” where these interests are not overridden by your rights and interests;
  • Consent: Processing for marketing communications and optional analytics where you have provided explicit, freely given consent. You may withdraw consent at any time by contacting [email protected].
Section 5
Sharing Your Personal Data

scrplay8 does not sell, rent, or trade your personal data. We share data only in the following circumstances:

  • Payment Processors: Your financial data is shared with payment service providers (including Malaysian e-wallet operators and bank transfer facilitators) to process deposits and withdrawals. These providers are contractually bound to handle data in compliance with applicable regulations;
  • KYC & Identity Verification Providers: Identity documents are processed by third-party KYC providers under strict data processing agreements, solely for the purpose of verifying your identity and age;
  • Game Software Providers: Gaming activity data is transmitted to game providers (e.g., slot and live dealer providers) as necessary to operate those games. Game providers do not receive your financial or identity data;
  • Regulatory Authorities: scrplay8 may disclose data to the issuing gaming authority, law enforcement agencies, or courts where required by law, court order, or the terms of our gaming licence;
  • IT & Infrastructure Providers: Hosting, database, and security infrastructure providers who process data on our behalf under binding data processing agreements;
  • Business Transfers: In the event of a merger, acquisition, or sale of the Platform or its assets, your data may be transferred to the successor entity, subject to the same privacy protections.
Section 6
Cookies & Tracking Technologies

scrplay8 uses cookies and similar tracking technologies on the Platform to:

  • Essential Cookies: Maintain your login session, remember your preferences, and ensure the Platform functions correctly. These cannot be disabled without affecting Platform functionality;
  • Analytics Cookies: Collect anonymised data on how users interact with the Platform (pages visited, session duration, error rates) to help us improve the user experience;
  • Security Cookies: Support fraud detection and prevention, including device fingerprinting used in the scrplay8 login security system.

You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies may impair your ability to use the scrplay8 Platform, including the login function. scrplay8 does not use cookies to track your activity on third-party websites unrelated to the Platform.

Section 7
Data Retention

scrplay8 retains personal data for the minimum period necessary given the purpose of collection and applicable legal obligations:

  • Active Account Data: Retained for the duration of your account and for a reasonable period thereafter to handle post-closure queries;
  • Transaction Records: Retained for a minimum of five (5) years following the last transaction, as required by AML regulations and our gaming licence;
  • KYC Documents: Retained for the period required by our gaming authority and applicable identity verification regulations, typically five (5) years from account closure;
  • Self-Exclusion Records: Retained for the duration of the exclusion period and for a minimum of five (5) years thereafter to prevent re-registration in breach of self-exclusion;
  • Support Communications: Retained for up to three (3) years to enable dispute resolution and quality monitoring.

After the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

Section 8
Security Measures

scrplay8 implements appropriate technical and organisational security measures to protect your personal data, including:

  • SSL/TLS encryption for all data transmitted between your browser and the scrplay8 Platform;
  • Encrypted storage of sensitive data including passwords (stored as salted hashes โ€” never readable in plain text by scrplay8 staff) and financial account details;
  • Role-based access controls ensuring that staff can only access personal data necessary for their specific functions;
  • Device fingerprinting and anomaly detection on the scrplay8 login system to identify and flag suspicious access attempts;
  • Regular internal and third-party security audits as part of our gaming licence compliance requirements.

No data transmission over the internet or storage system can be guaranteed as completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, scrplay8 will notify affected users and the relevant regulatory authority in accordance with applicable data breach notification obligations.

Section 9
Your Data Rights

Depending on applicable law, you may have the following rights in respect of your personal data held by scrplay8:

Right of Access

Request a copy of the personal data scrplay8 holds about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of data where no longer necessary, subject to legal retention obligations.

Right to Restriction

Request that processing be restricted in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format where processing is automated.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, submit a written request to [email protected]. scrplay8 will respond within 30 days. We may need to verify your identity before processing the request. Some rights may be limited where scrplay8 has overriding legal obligations (e.g., AML record-keeping requirements).

Section 10
Children & Minors

The scrplay8 Platform is strictly for individuals aged 21 and above. scrplay8 does not knowingly collect personal data from anyone under the age of 21. If we become aware that a person under 21 has provided personal data and created an account, we will immediately close the account, forfeit any associated balance, and delete the personal data in question.

If you are a parent or guardian and believe that a minor has accessed or used the scrplay8 Platform, please contact us immediately at [email protected]. scrplay8 takes underage access extremely seriously and will investigate and act on all such reports promptly.

Section 11
International Data Transfers

scrplay8 operates using infrastructure and service providers that may be located in multiple jurisdictions. When your personal data is transferred outside Malaysia to a jurisdiction that may not provide an equivalent level of data protection, scrplay8 ensures that appropriate safeguards are in place, including:

  • Contractual data protection clauses with all third-party processors requiring them to maintain security standards equivalent to those under this Policy;
  • Transfers only to service providers that are subject to independently audited security frameworks where applicable;
  • Minimisation of data transferred internationally โ€” only data necessary for the specific service is shared.
Section 12
Third-Party Services & Links

The scrplay8 Platform may reference third-party service providers (such as payment processors and game providers) whose privacy practices are governed by their own policies. scrplay8 is not responsible for the data practices of third-party providers. However, all third parties who process data on scrplay8's behalf are required to adhere to contractual data protection standards consistent with this Policy.

The scrplay8 Platform does not contain links to unrelated third-party websites that would involve the transfer of your data to those parties without your knowledge.

Section 13
Changes to This Privacy Policy

scrplay8 may update this Privacy Policy from time to time to reflect changes in data practices, applicable law, or the scrplay8 Platform. When material changes are made, scrplay8 will notify registered users by email to the address on file and/or by displaying a prominent notice on the Platform for a reasonable period before the changes take effect.

The date of the most recent revision is shown at the top of this page. Continued use of the scrplay8 Platform following notification of changes to this Policy constitutes your acceptance of the updated Policy. If you do not agree with the updated Policy, please cease using the Platform and request account closure.

Section 14
Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or scrplay8's handling of your personal data, please contact us:

Platform: scrplay8.org
Privacy Enquiries: [email protected]
Subject Line: "Privacy Request โ€“ [Your Username]"
Response Time: Within 30 days for data rights requests; within 24 hours for general support

If you are not satisfied with scrplay8's response to a data protection concern, you may lodge a complaint with the relevant data protection authority in your jurisdiction. scrplay8 will cooperate fully with any regulatory investigation.

Play at scrplay8

Your Data is Safe โ€” Your Game Awaits

scrplay8 handles your data responsibly so you can focus on what matters โ€” the sportsbook, casino, slots, and crash games. One account, instant MYR payouts, 24/7 support.

21+ only  ยท  Gamble responsibly  ยท  Terms & Conditions apply