Privacy Policy SCR99 — Your Data Is Safe, Your Privacy Protected

SCR99 understands that the trust of Malaysian players cannot be bought — it must be earned through consistent, transparent action. A large part of that trust starts with how we handle your personal data. We know that sharing personal information with any online platform takes courage and a great deal of trust, and we do not take that responsibility lightly.

This Privacy Policy is written in plain, easy-to-understand language — not convoluted legal jargon — so that every player SCR99 can clearly understand what happens to their data. We believe transparency is the foundation of a healthy relationship between a platform and its players.

This policy applies to all information you provide to SCR99 through the scr99.biz website, our mobile application, interactions with our customer support team, and all other communication channels we provide. This covers data you supply directly, data we collect automatically as you use the platform, and data we receive from legitimate third parties such as your payment provider.

SCR99 only collects data that is strictly necessary to operate the platform securely and deliver the best possible experience to you. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

All information that SCR99 collected for clear and legitimate purposes. We do not use your data in ways you would not reasonably expect. Here are the primary ways we use your personal data:

• Account Management: To create, verify, and maintain your SCR99 account, including identity verification as required by industry standards.
• Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and to handle your withdrawal payouts securely and promptly.
• Platform Security: To detect and prevent fraud, money laundering, multiple account usage, and any suspicious activity that could harm other players or the integrity of the platform.
• Customer Service: To handle your enquiries, complaints, and support requests via live chat or email effectively and accurately.
• Product Improvement: To understand how Malaysian players use our platform and make relevant improvements based on actual usage data.
• Legal Compliance: To meet applicable legal and regulatory requirements, including anti-money laundering (AML) and know your customer (KYC) obligations.
• Marketing Communications: To send you promotional offers, bonus information, and the latest updates SCR99 that is relevant to you — only if you have consented to receive it.
• Responsible Gaming: To monitor gameplay patterns and identify players who may need support related to responsible gaming.

Protecting your personal data is our highest priority SCR99. We invest in the latest security infrastructure and follow industry best practices to keep your data safe at all times, whether in transit or at rest.

The key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser or app and the SCR99 encrypted using TLS/SSL protocols with 256-bit key length — the same standard used by leading financial institutions worldwide.
• Data Encryption at Rest: Sensitive data stored in our databases is also encrypted — meaning that even if an unauthorised party were to gain access to our servers, the data they find would be unreadable without the appropriate encryption key.
• Strict Access Controls: Only staff SCR99 with a legitimate operational need are permitted to access players' personal data, and all such access is logged and monitored.
• Two-Factor Authentication (2FA): Our internal systems require multi-factor authentication for all access to sensitive player data, reducing the risk of unauthorized access even in the event of a compromised password.
• Continuous Monitoring: Security systems SCR99 monitors platform activity 24/7 to detect any anomalies or unauthorized access attempts in real time.
• Regular Security Audits: Independent security assessments are conducted periodically by external security experts to identify and address any vulnerabilities before they can be exploited.

SCR99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a commitment we uphold without exception.

However, there are limited situations where SCR99 may share your data with third parties for legitimate and necessary purposes:

• Payment Service Providers: Information required to process your deposits and withdrawals is shared with certified payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX gateways, all of which have signed strict data protection agreements with us.
• Game Providers: Minimum technical data required to operate games (such as play session IDs) is shared with our certified game providers including Pragmatic Play, Evolution Gaming, and other partners. Personal identity data is not shared.
• Lawful Authorities: Where required by applicable Malaysian law, or pursuant to a valid court order, SCR99 may disclose the required data to the relevant authorities. We will notify you of any such disclosure where permitted by law.
• Fraud Prevention Services: Limited data may be shared with certified identity verification and fraud prevention service providers for the purpose of protecting the platform and its players.

SCR99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They allow the platform to remember your preferences, maintain your login session, and deliver a more personalised and seamless experience.

The types of cookies we use on SCR99 are as follows:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operations. They do not store any personally identifiable information.
• Performance & Analytics Cookies: Helping us understand how players use the platform SCR99 — which pages are visited most frequently, how long players spend in each section, and where they encounter issues. This data is used in aggregated form without identifying any individual.
• Functional Cookies: Saving your preferences such as selected language, display settings, and game preferences so you do not have to reconfigure them every time you log in.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure only you can access your account. This includes tracking login patterns and access locations.

As a player SCR99, you have certain rights regarding the personal data we hold about you. We fully respect these rights and have established a straightforward process to help you exercise them.

Financial transactions are among the most sensitive activities that take place on the platform SCR99. We ensure every sen you deposit or withdraw is protected by the most rigorous security layers available in the industry.

When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX internet banking such as Maybank2u and CIMB Clicks, the following process takes place to protect your transaction:

• All payment data is transmitted over SSL 256-bit encrypted connections — no sensitive financial information is ever sent in plain text.
• SCR99 does not store your full payment details — we only retain a transaction reference and the minimum information required for record-keeping and dispute resolution.
• Every deposit and withdrawal transaction is logged with a timestamp, IP address, and device information to enable detection of any suspicious activity.
• Our automated fraud detection system monitors every transaction in real time. Any unusual transactions are flagged for manual review before being processed.
• Withdrawals to a different payment method than your original deposit require additional verification — this is a security measure to ensure your winnings reach the rightful owner.

SCR99 does not store your personal data indefinitely. We have a clear data retention policy that ensures your information is only kept for as long as necessary to fulfil the purpose for which it was collected, or to meet applicable legal requirements.

• Active Account Data: For as long as your account remains active with SCR99, we retain all data necessary to manage your account securely and effectively.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's applicable anti-money laundering (AML) legal requirements. This includes records of all deposits and withdrawals.
• Support Conversation Records: Live chat and email logs are retained for 3 years for quality control and dispute resolution purposes.
• Live Casino Session Records: Video recordings of live casino sessions are retained for 90 days for audit purposes and the resolution of disputes relating to game outcomes.
• Closed Account Data: Upon account closure, personal data that is no longer required will be deleted within 90 days, with the exception of records that must be retained for longer periods under applicable law.

SCR99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle data. Whenever the Privacy Policy is updated, the "Last Updated" date at the top of this page will be revised to reflect the latest version.

For material and significant changes that could substantially affect your privacy rights, SCR99 will send a notice to the email address or phone number registered to your account at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision.

• Continued use of the platform SCR99 after the effective date of any changes will be considered acceptance of the updated Privacy Policy.
• If you do not agree with the changes made, you have the right to close your account and request deletion of the relevant data.
• Previous versions of the Privacy Policy are available upon request via our support email for reference and comparison.

This Privacy Policy was last updated in January 2026. © 2026 SCR99. All rights reserved.