Scr2u Privacy Policy – Data Protection for Malaysian Users

1 Introduction & scr2u's Privacy Commitment

Scr2u ("we", "Platform", or "scr2u") takes user privacy very seriously. This Privacy Policy explains how scr2u collects, uses, stores, protects, and in certain circumstances, shares your personal information when you use our platform at scr2u.ws.

This document is drafted in accordance with sound data protection principles, and is intended to give you complete clarity on how we handle your information. We believe you have the right to know exactly what happens to your data — and we have no intention of hiding anything behind hard-to-read legal language.

By registering for or using scr2u's services, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the scr2u platform and contact us to request deletion of your data.

2 Types of Personal Data We Collect

Scr2u collects several categories of personal data from users. This data is necessary for us to provide you with a secure, fair, and effective service:

Data Category	Examples of Information	Primary Purpose
Identity Data	Full name, MyKad/passport number, date of birth, gender	Identity verification (KYC) & legal compliance
Contact Data	Phone number, email address, residential address	Account communication & customer support
Financial Data	Bank account number, e-wallet number (TnG, GrabPay, DuitNow), transaction records	Deposit & withdrawal processing
Technical Data	IP address, device type, web browser, operating system, activity logs	Account security & fraud detection
Game Data	Betting records, game history, account balance, bonus activity	Gaming services & account management
Preference Data	Language settings, favourite sports, preferred game types	Personalisation of user experience

Scr2u does not collect data beyond what is necessary to operate our platform. We adhere to the principle of data minimisation — meaning we only collect what is genuinely needed to provide the services you request.

3 How scr2u Collects Your Data

Your personal data is collected through the following channels as you interact with the scr2u platform:

• Account registration form: When you register a new account with scr2u, you will be asked to provide basic information such as your name, phone number, and email address. This information forms the foundation of your account profile.
• Identity verification (KYC) process: Before you can make withdrawals or access certain features, scr2u may require you to submit verification documents such as a copy of your Malaysian MyKad or a valid passport. This is an industry-standard requirement to ensure account security and comply with anti-money laundering regulations.
• Financial transactions: Each time you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, or CIMB Clicks, our system records the necessary transaction details for accounting and security purposes.
• Platform usage: scr2u's system automatically records activity logs including login times, games played, bets placed, and other in-platform actions as part of our security monitoring system.
• Cookies and tracking technologies: The scr2u platform uses cookies and similar technologies to enhance the user experience and analyse usage patterns. More details are covered in Section 7.
• Communications with the support team: When you contact the scr2u support team via live chat, email, or other channels, those conversations may be recorded for training and service improvement purposes.

4 How We Use Your Personal Data

Scr2u uses the personal data collected for legitimate and specific purposes. We do not use your data for purposes not stated in this policy without first obtaining your consent:

• Service delivery: Your data is used to manage your account, process deposit and withdrawal transactions, and ensure all scr2u platform features run smoothly.
• Identity verification and fraud prevention: Identity information is used to verify that you are a legitimate user who meets the minimum age requirement of 18 years. Our systems also use data to detect and prevent fraudulent activity, money laundering, and platform abuse.
• Account-related communications: scr2u will send you emails or SMS messages related to your account, such as deposit confirmations, withdrawal notifications, security alerts, and important service updates.
• Platform improvements: Aggregated and anonymised usage data is used to analyse usage patterns, identify areas for improvement, and develop new features that are more useful for users in Malaysia.
• Regulatory compliance: scr2u may need to use or disclose your data to comply with legal obligations, including anti-money laundering reporting requirements and cooperation with competent authorities.
• Marketing communications: With your consent, scr2u may use your data to send you information about promotions, new bonuses, and offers that may interest you. You may withdraw this consent at any time.

5 Sharing Data with Third Parties

Scr2u does not sell, rent, or trade users' personal data to any third party for their own marketing purposes. This is a core principle we never compromise on. However, in the following situations, scr2u may need to share your data:

• Payment service providers: To process your transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, the necessary transaction information is shared with the respective payment provider. All payment providers we work with are bound by strict data protection agreements.
• Game providers: The scr2u platform uses software from licensed game providers. Technical data required to run games (such as session IDs) may be shared with these providers. They do not receive any personal data that could directly identify you.
• Competent authorities: Where required by law or a valid court order, scr2u may be obligated to disclose user data to law enforcement agencies or relevant regulatory authorities.
• Fraud prevention: scr2u may share data with third-party identity verification providers for KYC verification and fraud prevention purposes. All such third parties are bound by strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of scr2u assets, user data may be transferred as part of that transaction. Users will be notified in advance in such cases.

6 scr2u Data Protection Security Measures

Scr2u continually invests in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or deletion. Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and scr2u's servers are protected by industry-standard 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions.
• Secure password storage: Your account password is never stored in plain text. We use a robust salted hashing algorithm to ensure your password cannot be recovered — even by scr2u staff.
• 24/7 Monitoring: scr2u's security system is monitored 24 hours a day, 7 days a week by our IT security team to detect any suspicious activity or unauthorised access attempts.
• Two-factor authentication: scr2u users are encouraged to enable two-factor authentication (2FA) for an additional layer of account protection.
• Regular security audits: scr2u conducts regular security audits by independent third parties to identify and address any vulnerabilities in our systems.
• Staff training: All scr2u staff with access to user data undergo comprehensive data protection training and are bound by strict confidentiality agreements.

7 Cookies and Tracking Technologies

Scr2u uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and maintain account security. Below is an overview of the types of cookies we use:

• Essential cookies: These cookies are required for the basic functionality of the scr2u platform. Without them, the platform will not operate correctly. They include login session cookies and language preference cookies, and cannot be disabled.
• Performance cookies: These cookies help us understand how users interact with the scr2u platform, which pages are visited most frequently, and where users may encounter issues. All data collected is anonymised and aggregated.
• Functional cookies: These cookies allow the scr2u platform to remember your preferences — such as language, favourite game types, and display settings — to deliver a more personalised experience.
• Security cookies: scr2u uses security cookies to detect suspicious activity, prevent unauthorised access, and protect user accounts from attacks.

You can manage and delete cookies through your web browser settings. Please note, however, that deleting or disabling certain cookies may affect the functionality of the scr2u platform. Refer to your browser's help documentation for guidance on managing cookies.

8 Data Retention Period

Scr2u retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations.

• Active account data: For as long as your scr2u account remains active, we will retain your personal data and transaction records to ensure uninterrupted access to our services.
• After account closure: When you close your scr2u account, we will retain certain data for a minimum of 5 years to meet legal requirements related to anti-money laundering, financial auditing, and regulatory compliance.
• Marketing data: If you have previously given consent to receive marketing communications and later withdraw that consent, we will remove your contact details from our marketing list within 30 days.
• Security logs: System logs and security records are retained for 12 months for fraud detection and security analysis purposes.

9 User Rights Regarding Personal Data

As a scr2u user, you have specific rights regarding your personal data. scr2u is committed to respecting and facilitating the exercise of these rights:

• Right of access: You have the right to request a copy of the personal data scr2u holds about you. Submit your request by email to support@scr2u.ws and it will be processed within 30 days.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. For details that can be updated yourself, you may do so directly through your scr2u account settings.
• Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal data (the "right to be forgotten"). However, this right is subject to scr2u's legal obligations, which may require us to retain certain data.
• Right to object: You have the right to object to the processing of your data for specific purposes, such as direct marketing. Objections to marketing will be actioned immediately.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service.

To exercise any of the rights above, please contact the scr2u privacy team by email at support@scr2u.ws and state your request clearly. We will respond within 30 business days of receiving your request.

10 Protection of Children's Data

The scr2u platform is intended for individuals aged 18 and above only. scr2u does not knowingly collect or process personal data from anyone under the age of 18.

If we discover or are notified that personal data belonging to a child under the age of 18 has been collected without proper age verification, we will take immediate action to delete that data and close the account in question.

Parents and guardians are responsible for monitoring their children's internet use and taking appropriate steps to prevent unauthorised access to the scr2u platform.

11 Links to Third-Party Websites

The scr2u platform may contain links or references to third-party websites. This Privacy Policy applies solely to the scr2u platform and does not cover the privacy practices of those third-party sites.

Scr2u is not responsible for the privacy practices or content of third-party websites. We recommend reading the privacy policy of every website you visit to understand how they handle your data.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how scr2u handles your personal data, please contact us through the following channels:

• Email: support@scr2u.ws (please use the subject line: "Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the scr2u platform
• Language of communication: Bahasa Malaysia or English

We are committed to responding to all privacy-related enquiries within 2 business days. For more complex requests such as data access or data deletion, the processing period is 30 business days.

Scr2u also reserves the right to amend this Privacy Policy from time to time in line with changes to applicable laws or our operational practices. Users will be notified of any significant amendments via email or an in-platform notice. Continued use of the scr2u platform after any amendment takes effect will be deemed acceptance of the revised policy.