Last updated: 11 June 2026 · Applies to all scrplay2 users
scrplay2 uses 256-bit SSL encryption and secure server infrastructure to protect all personal data at rest and in transit. We take data security seriously — the same way Malaysian banks like Maybank and CIMB protect their customers.
scrplay2 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial marketing purposes. Your information exists to serve your account — not someone else's business.
You have the right to access, correct, and request deletion of your personal data held by scrplay2, subject to our legal retention obligations. Contact the scrplay2 support team to exercise any of these rights.
scrplay2 collects only the personal data necessary to operate your account, process transactions, verify your identity, and comply with applicable legal obligations. We do not collect data for its own sake.
Payment data for Touch 'n Go eWallet, Boost, and bank transactions is processed via PCI-compliant payment gateways. scrplay2 does not store full payment credentials on its own servers.
scrplay2 processes personal data in compliance with its obligations as a licensed operator under international gaming authority requirements, including anti-money laundering and Know Your Customer regulations.
1.1 scrplay2 is committed to protecting your privacy and handling your personal data responsibly, transparently, and securely. This Policy applies to all personal data processed in connection with your use of the scrplay2 platform, including account registration, deposits and withdrawals in MYR, sports betting, casino gaming, e-sports wagering, customer support interactions, and marketing communications.
1.2 scrplay2 operates as the data controller in respect of the personal data it collects directly from you through the platform. Where scrplay2 engages third-party service providers who process data on its behalf, those parties act as data processors under written agreements that require them to protect your data to the same standard as scrplay2.
1.3 This Policy is written in English. In the event of a conflict between a translated version and the English original, the English version prevails.
scrplay2 collects the following categories of personal data:
2.1 Registration Data. When you create a scrplay2 account, we collect your full legal name, date of birth, residential address, email address, and phone number. This information is required to create and manage your account, verify your age (21+ requirement), and comply with Know Your Customer (KYC) obligations.
2.2 Identity Verification Data. scrplay2 may request copies of government-issued identification (e.g., Malaysian MyKad, passport) and proof of address documents to verify your identity as required under anti-money laundering regulations and our licensing obligations. These documents are handled with the highest level of security and access controls.
2.3 Financial Data. We collect details of transactions conducted through your scrplay2 account, including deposit amounts, withdrawal requests, payment method identifiers (e.g., Touch 'n Go eWallet account reference, bank account number last four digits), and transaction history. Full payment credentials are not stored on scrplay2 servers — they are processed by PCI-compliant third-party payment gateways.
2.4 Gaming Activity Data. scrplay2 records your betting and gaming activity, including games played, bet amounts, outcomes, bonus usage, and session durations. This data is used for account management, fraud prevention, responsible gaming monitoring, and regulatory reporting.
2.5 Technical Data. We automatically collect technical information when you access the scrplay2 platform, including your IP address, browser type and version, device type and operating system, referring URLs, and pages visited. This data is used for platform security, fraud detection, and service improvement.
2.6 Communications Data. If you contact scrplay2 support via live chat or email, we retain records of those communications to resolve your query, improve service quality, and maintain an audit trail for dispute resolution.
scrplay2 uses your personal data for the following purposes:
4.1 Contract Performance. The majority of scrplay2's processing of your personal data is necessary for the performance of the contract between you and scrplay2 (as set out in the Terms & Conditions), including account management, transaction processing, and gaming services.
4.2 Legal Obligation. Certain processing is required for scrplay2 to comply with legal obligations, including KYC verification, anti-money laundering record-keeping, and regulatory reporting to our licensing authority.
4.3 Legitimate Interests. scrplay2 processes certain data (such as technical and security data) based on its legitimate interests in maintaining platform security, preventing fraud, and improving services, provided those interests are not overridden by your privacy rights.
4.4 Consent. Where scrplay2 sends you direct marketing communications, it does so on the basis of your consent. You may withdraw consent to marketing at any time by contacting scrplay2 support.
scrplay2 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with the following categories of recipients:
6.1 scrplay2 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse platform usage patterns. Cookies are small text files placed on your device by your browser.
6.2 Essential Cookies are strictly necessary for the platform to function — for example, session authentication cookies that keep you logged in to your scrplay2 account. These cannot be disabled without breaking core functionality.
6.3 Analytical Cookies help scrplay2 understand how players use the platform — which sections are most visited, how long sessions last, and where errors occur. This data is processed in aggregate and does not identify you personally.
6.4 You may control cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your ability to use the core scrplay2 gaming platform.
7.1 scrplay2 retains personal data for as long as your account remains active and for such additional periods as required by applicable law and our licensing obligations. In general:
7.2 On expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with scrplay2's data destruction procedures.
8.1 scrplay2 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. These include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, strict access controls limiting employee access to personal data on a need-to-know basis, regular security assessments, and incident response procedures.
8.2 In the event of a personal data breach that poses a risk to your rights and freedoms, scrplay2 will notify affected users and relevant regulatory authorities as required by applicable law.
8.3 While scrplay2 takes all reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. You are responsible for maintaining the security of your own scrplay2 login credentials.
Subject to applicable law, you have the following rights in relation to your personal data held by scrplay2:
To exercise any of these rights, please contact the scrplay2 support team via the 24/7 live chat. scrplay2 will respond to verifiable requests within 30 days. Some requests may be subject to identity verification before processing.
The scrplay2 platform is strictly for persons aged 21 and above. scrplay2 does not knowingly collect personal data from individuals under 21 years of age. If scrplay2 becomes aware that a user is under 21, their account will be immediately closed, all personal data deleted (subject to legal retention obligations), and any deposited funds returned. If you believe a minor has registered on the platform, please contact scrplay2 support immediately.
11.1 scrplay2 may transfer your personal data to service providers located outside of Malaysia in connection with the operation of the platform. Where such transfers occur, scrplay2 ensures that appropriate safeguards are in place — including contractual data protection clauses — to protect your personal data to a standard equivalent to that applied within Malaysia.
11.2 All cross-border data transfers are conducted in compliance with scrplay2's obligations under its international gaming authority licence and applicable data protection law.
scrplay2 reserves the right to update or amend this Privacy Policy at any time. Material changes will be notified via the scrplay2 website, and where practicable, by direct notification to registered users. Your continued use of the scrplay2 platform following publication of an updated Policy constitutes acceptance of the revised terms. The date at the top of this Policy reflects the most recent revision.
If you have any questions, concerns, or requests relating to this Privacy Policy or scrplay2's processing of your personal data, please contact us:
scrplay2 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days.
We take privacy as seriously as we take security. Join Malaysian players who trust scrplay2 for fair games, fast MYR withdrawals, and responsible data handling.
Create a scrplay2 AccountMinimum deposit RM 30 · Touch 'n Go eWallet accepted · 21+ only