Official Policy

Privacy Policy scr2u —
Member Personal Data Protection

Scr2u is committed to protecting your privacy. This document clearly explains what data we collect, how it is used, who it is shared with, and what your rights are as the owner of that data.

Updated: January 2026  ·  Bahasa Malaysia
256-bit SSLFull data encryption
No Data SellingYour data is never sold
Privacy FirstControl is in your hands
Types of Data We Handle
Identity Data
  • Full name
  • Date of birth
  • National ID number
  • KYC document images
Contact Data
  • Email address
  • Mobile phone number
  • Residential address
  • State / country
Financial Data
  • Bank account information
  • Deposit & withdrawal records
  • Transaction history
  • Registered digital wallet
Usage Data
  • Game & betting records
  • Session time & duration
  • IP address & device
  • Platform priorities

Your privacy is not merely a legal obligation for scr2u — it is a core value we uphold. Every data-related decision is made with our members' best interests in mind, not purely commercial ones.

This Privacy Policy is written in plain language so you truly understand what happens with your data — not just lengthy, confusing legal terms. If anything is unclear, our support team is happy to help.

This Privacy Policy applies to all scr2u services, including the website, mobile app, and any other platforms operated by scr2u.

1 Introduction & Scope of This Policy

Scr2u ("we", "our platform") is an online gaming platform operator responsible for processing members' personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This Privacy Policy explains how we collect, store, use, disclose, and protect your personal data when you use the scr2u platform. It also outlines your rights regarding that personal data and how to exercise them.

By registering for or using the scr2u platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

  • This policy applies to all registered users and visitors of the scr2u website.
  • This policy covers all channels — website, mobile app, live chat, and email communications.
  • Links to third-party websites (if any) are not covered by this policy — please review their respective privacy policies.

2 Personal Data We Collect

Scr2u only collects data that is strictly necessary to provide a safe, lawful, and high-quality service. We do not collect excessive or irrelevant data beyond what is required to operate the platform.

Data you provide directly:

  • Registration information — full name, date of birth, email address, mobile phone number, and password.
  • KYC (Know Your Customer) information — copies of your national ID, passport, or other identity documents requested during verification.
  • Financial information — bank account number, bank name, and digital wallet details for deposit and withdrawal purposes.
  • Communications — messages you send via live chat, email, or any of our customer support channels.

Data collected automatically:

  • Technical data — IP address, browser type, operating system, screen resolution, and device information.
  • Usage data — pages visited, buttons clicked, session duration, game records, and betting history.
  • Cookie data — language preferences, login status, and personal settings stored in your browser.
  • Location data — approximate location based on IP address for geographic compliance purposes.

scr2u does not store credit or debit card information directly. All payments are processed through authorized third-party payment gateways that comply with PCI-DSS standards.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. scr2u will not use your data for any purpose beyond what is stated in this policy without first obtaining your consent.

  • Account management — to create, verify, and manage your account on the scr2u platform.
  • Transaction processing — to process deposits, withdrawals, and any financial transactions related to your account.
  • Identity verification (KYC) — to comply with anti-money laundering legal requirements and to ensure the safety of all members.
  • Customer support — to respond to enquiries, resolve complaints, and provide technical assistance.
  • Platform security — to detect and prevent fraud, unauthorized access, and suspicious activity that could compromise your account.
  • Service improvement — to analyze usage patterns in order to improve the gaming experience and overall platform performance.
  • Service communications — to send important account-related notifications, terms updates, security alerts, and promotional information (if you have consented to receive them).
  • Legal compliance — to fulfil legal obligations, regulatory directives, and applicable court orders.

We apply a valid legal basis for every instance of data processing — whether based on contract performance, legal compliance, legitimate interest, or your explicitly given consent.

4 Data Sharing & Disclosure

Scr2u does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We only share data in limited and lawful situations such as the following:

  • Certified service providers — payment gateway providers, cloud services, analytics platforms, and KYC service providers that have signed data protection agreements with us and may only use your data for the specified purposes.
  • Regulatory Authority — government bodies, financial authorities, or law enforcement agencies when we are required to do so by law or court order.
  • Fraud investigation — information sharing with other platform operators or industry bodies for fraud prevention and mutual interest protection purposes.
  • Business transfers — in the event that scr2u is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction — you will be notified in advance.

All third parties with whom we share data are required to maintain data confidentiality and comply with applicable data protection standards. We cannot be held responsible for the actions of third parties that breach their data protection agreements.

5 Data Storage & Security

Scr2u invests seriously in cybersecurity infrastructure to ensure your personal data is always protected from unauthorized access, loss, destruction, or accidental disclosure.

Our technical security measures:

  • Data encryption in transit using TLS 1.3 protocol and 256-bit SSL certificates.
  • Data encryption at rest — sensitive data is encrypted using AES-256 at the database level.
  • Role-based access control — only authorised staff may access member personal data, and every access is logged and monitored.
  • 24/7 security monitoring — a real-time intrusion detection system that is always active.
  • Regular penetration testing — we conduct periodic security audits and penetration tests carried out by certified independent parties.
  • Two-factor authentication (2FA) — available and encouraged for all member accounts.

Data retention period:

  • Active account data — retained for as long as your account is active and for the required period after account termination for compliance purposes.
  • Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian legal requirements.
  • Support communication logs — retained for 2 years for reference and quality improvement purposes.
  • Technical log data — retained for 90 days before being automatically deleted.

While we take all reasonable measures to protect your data, no security system can be guaranteed 100% secure. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable law.

6 Cookies & Tracking Technologies

The scr2u platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze usage patterns. Cookies are small text files stored in your browser when you visit our platform.

Types of cookies we use:

  • Essential cookies — required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies — collect information on how you use the platform to help us identify areas for improvement. This data is collected anonymously.
  • Functionality cookies — store your preferences such as display settings, game choices, and saved login information so you do not need to re-enter them each time.
  • Analytics cookies — help us understand how visitors interact with the platform through our internal analytics tools.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect your experience on the scr2u platform and some features may not function properly.

7 Your Rights Regarding Personal Data

As a data subject, you have certain rights regarding the personal data we hold about you. scr2u respects and facilitates the exercise of these rights in accordance with Malaysia's PDPA and applicable international standards.

Your Rights Description Status
Right of Access You have the right to request a copy of the personal data we hold about you. Available
Right to Rectification You have the right to request correction of inaccurate or incomplete data. Available
Right to Erasure You may request deletion of your data under certain conditions, subject to legal requirements. Available
Right to Restriction You may request that we restrict the processing of your data in certain circumstances. Available
Right to Data Portability You have the right to receive your data in a structured, machine-readable format. Available
Right to Object You may object to the processing of your data for direct marketing purposes at any time. Available
Withdraw Consent You may withdraw previously given consent at any time without affecting prior processing. Available

To exercise any of the rights above, please contact our data protection team by email at [email protected]. We will process your request within 30 business days. In complex cases, we may require up to 60 days and you will be notified accordingly.

We may need to verify your identity before processing any data rights request, to ensure the security of your information and prevent disclosure to unauthorised parties.

8 International Data Transfers

In the course of platform operations, your personal data may be transferred to, stored in, or processed in countries other than Malaysia. This includes cloud servers and technical infrastructure located across various regions to ensure optimal platform performance and availability.

Every international data transfer we carry out meets the following requirements:

  • The recipient country or region must have a level of data protection equivalent to or greater than that of Malaysia.
  • Transfers are protected by legally binding data processing agreements with service providers.
  • Additional safeguards such as end-to-end encryption are applied during cross-border data transfers.

By using the scr2u platform, you agree to data transfers as described above, carried out solely for the purpose of providing the services you use.

9 Children's Privacy

The scr2u platform is restricted to users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we determine that personal data has been collected from someone under the age of 18 without proper verification, we will immediately take the following steps:

  • Suspending the relevant account immediately while an investigation is conducted.
  • Deleting all personal data associated with the account.
  • Reporting the relevant case to the appropriate authorities if required.

If you are a parent or guardian and believe your child has registered or is using the scr2u platform, please contact us immediately via email [email protected] so that we may take appropriate action without delay.

10 Changes to This Privacy Policy

Scr2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, evolving legal requirements, or platform service improvements.

When we make material changes to this policy, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending notifications to all registered members via email or in-platform notifications.
  • Providing a summary of key changes to help you understand what has been updated.

Your continued use of the scr2u platform following notification of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before those changes take effect.

11 Contact Us

For any enquiries, concerns, or requests regarding this Privacy Policy or your personal data, please contact scr2u's Data Protection Officer (DPO) through the following channels:

  • Email: [email protected]
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the platform.
  • Response time: We aim to respond to all privacy-related enquiries within 3 business days.

For formal data rights requests, please include "Data Rights Request" in your email subject line along with your full name and account number to help us process your request faster.

Why Is Your Data Safe at scr2u?
Six core privacy protection principles we practise every day
Advanced-Level Encryption

All data transmitted between your device and scr2u's servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions worldwide. Sensitive data in our databases is also encrypted using AES-256.

Malaysia PDPA Compliance

Scr2u operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We have appointed a dedicated Data Protection Officer to ensure that all data processing activities comply with applicable legal provisions.

No Data Selling

Scr2u has never and will never sell, rent, or trade members' personal data to third parties for marketing purposes. Your data belongs to you — we use it solely to provide the services you have requested.

Restricted Data Access

Only scr2u staff who require access to your data to perform their duties will be granted permission to do so. All access is automatically logged and monitored — leaving no room for internal misuse.

Regular Security Audits

Scr2u's security systems are regularly tested by independent cybersecurity experts through penetration testing and code audits. Any vulnerabilities discovered are addressed promptly before they can be exploited.

Full Control in Your Hands

You can access, update, download, or request deletion of your data at any time. Our support team is available to help you manage your personal data rights 24 hours a day, 7 days a week, at no charge.

Privacy FAQ
Answers to the most frequently asked questions about privacy at scr2u

scr2u does not sell or rent your personal data to any third party for marketing purposes. We only share data with authorized service providers who assist us in operating the platform (such as payment gateways and KYC providers), and only for the purposes specified in binding data protection agreements.

Retention periods vary by data type. Financial transaction records are kept for a minimum of 7 years in accordance with Malaysian law. Active account data is retained for as long as your account remains active. Support communication logs are retained for 2 years, while technical logs are automatically deleted after 90 days.

Yes, you have the right to request data deletion under certain circumstances. However, some data may need to be retained for a specified period to comply with legal requirements such as financial records. Submit your request to [email protected] and we will inform you of what can and cannot be deleted, along with the reasons.

When an account is closed, personal data no longer required for legal purposes will be deleted within 30 days. Financial transaction records will be retained for the period required by law. You may request a copy of your data before closing your account.

scr2u does not store credit or debit card information directly. All transactions are processed through authorized payment gateways that comply with the highest PCI-DSS standards. Your registered bank account details are encrypted using AES-256 and are only used to process your withdrawals.
JOIN scr2u TODAY

Enjoy a Gaming Experience That Is Safe & Trusted

Your personal data is fully protected. Play with peace of mind — scr2u safeguards your privacy with the same commitment we bring to platform security. Register now and experience the difference.

Bahasa Melayu