scrplay 3 | Privacy Policy and Your Data Protection Rights

Scrplay 3's Privacy Commitment to Malaysian Players

Six core principles governing how scrplay 3 handles your personal data

Highest-Level Encryption

All data transmitted between your device and scrplay 3's servers is protected using 256-bit SSL encryption — the same standard used by banking and financial institutions worldwide. Your personal information, payment details via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX, as well as your gaming records, are all fully encrypted in transit.

Secure Data Storage

Your personal data is stored on scrplay 3 servers protected by multiple layers of firewalls and strict access controls. Only authorised scrplay 3 staff with a legitimate business need are permitted to access player data. All internal access is logged and continuously monitored to detect any suspicious activity.

Purpose-Driven Data Collection

Scrplay 3 only collects data that is strictly necessary for clearly stated purposes — account registration, payment processing, customer support, and fraud prevention checks. We do not collect irrelevant data or data with no clear operational purpose. This "minimum data" principle is the foundation of scrplay 3's approach to privacy.

Full Control in Your Hands

As a scrplay 3 member, you have the full right to access your personal data, request corrections to inaccurate information, request restrictions on data use, and in certain circumstances request deletion of your data. The scrplay 3 team will process all data-related requests within a reasonable timeframe and in accordance with established procedures.

No Data Sales or Rentals

Scrplay 3 has never and will never sell, rent or transfer your personal data to any third party for marketing or other commercial purposes. The data you provide to us is solely for the operational use of scrplay 3. This is our promise to every Malaysian player who trusts our platform.

Regular Security Audits

Scrplay 3 conducts regular security audits and data privacy assessments carried out by independent third parties specialising in information security. This process ensures that our data protection measures remain current with the latest cybersecurity threats and continue to meet the ever-rising standards of the online casino industry.

Contents

1. Introduction
2. Data Collected
3. Purpose of Collection
4. Data Sharing
5. Data Security
6. Data Retention
7. Your Rights
8. Cookie Policy
9. Children's Data
10. Third-Party Links
11. Data Transfers
12. Policy Amendments
13. Contact Us

1

Introduction & Scope of This Privacy Policy

This Privacy Policy explains how scrplay 3, operating under the domain https://scrplay3.best, collects, uses, discloses, stores, and protects your personal information. This policy applies to all users who browse the scrplay 3 website, register an account, make deposits or withdrawals using Malaysian local payment methods, use any scrplay 3 games or services, or contact our customer support team.

Scrplay 3 is committed to handling your personal data in a responsible, transparent, and secure manner. We understand that your trust is the foundation of the relationship between you as a player and us as a platform. This Privacy Policy is part of that commitment — not merely a legal formality, but a reflection of our values regarding how personal data should be handled.

Important Note: By registering an account or using scrplay 3's services, you consent to the collection and use of your information as described in this Privacy Policy. Please read this document carefully before using our platform.

This Privacy Policy forms part of the scrplay 3 Terms & Conditions and should be read together with them. In the event of any conflict between these documents regarding data privacy, this Privacy Policy shall take precedence.

2

Types of Personal Data We Collect

Scrplay 3 collects various types of personal data depending on how you interact with our platform. In general, the data we collect can be grouped into several main categories:

Account Registration Data

Full name as shown on your official Malaysian identification document
An active email address
A Malaysian mobile number registered in your name
Date of birth for age verification
Password (stored in encrypted form — we do not store passwords in plain text)

Financial & Payment Data

Information relating to the payment method you use (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks)
Deposit and withdrawal transaction records
Account balance and financial history within the scrplay 3 platform

Gaming Activity Data

Records of games played, bets placed, and game outcomes
History of bonuses claimed and used
Game preferences and browsing history within the platform

Technical & Device Data

IP address and general location information (state within Malaysia)
Device type, operating system, and browser used
Access logs and gameplay session times
Cookie data and similar tracking technologies (see Section 8)

Verification Document Data (KYC)

Copy of MyKad or Malaysian passport
Proof of current address (bank statement, utility bill)
Other documents required for identity verification on large withdrawals

We do not collect: Credit or debit card numbers are never handled directly by us — all financial transactions are processed through authorised third-party secure payment gateways. scrplay 3 does not view or store your full payment card details.

3

Purpose of Data Collection & Use

Scrplay 3 uses the personal data we collect for specific, clearly defined and lawful purposes. The following is a summary table of the primary purposes for which your data is used:

Purpose of Use	Data Type	Legal Basis
Scrplay 3 account registration and management	Registration data	Agreement
Processing of deposits and withdrawals	Financial data	Agreement
Provision of casino games, slots, baccarat, roulette, and football betting	Activity data	Agreement
Identity verification (KYC) and fraud prevention	KYC data, technical data	Legitimate Interests
Customer support and complaint resolution	All categories	Agreement
VIP programme and bonus management	Activity data, financial data	Agreement
Responsible gaming monitoring	Activity data	Legitimate Interests
Service communications (notification emails, verification SMS)	Registration data	Agreement
Platform improvement and usage analytics	Technical data, activity	Legitimate Interests
Compliance with legal and regulatory requirements	All categories	Legal Obligation

Scrplay 3 will not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent, or unless required by applicable law.

4

Data Sharing with Third Parties

Scrplay 3 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, to enable us to provide a complete and secure scrplay 3 service, we may need to share certain data with the following parties under strict confidentiality agreements:

Payment Service Providers: Payment gateways that process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. They only receive the data necessary to process the relevant transaction.
Game Providers: Companies such as Microgaming, NetEnt, Playtech, and Pragmatic Play may receive the minimum session data required to ensure games function correctly and results are recorded accurately.
Identity Verification Service: Third-party KYC service providers who assist us in verifying player identities for fraud prevention and legal compliance purposes.
Cloud Service Providers: Server infrastructure providers that host scrplay 3 data under strict security agreements and internationally recognised data protection standards.
Relevant Authority: Law enforcement agencies, courts, or regulatory authorities with legal power to request data, where scrplay 3 is required to do so under applicable Malaysian law.

Data Sharing Guarantee: All third parties that receive data from scrplay 3 are bound by data protection agreements that prohibit them from using that data for any purpose other than what is specified in their agreement with us. scrplay 3 takes responsibility for ensuring these third parties uphold data protection standards equivalent to our own.

5

Scrplay 3 Data Security Measures

Protecting your personal data from unauthorised access, loss, or misuse is scrplay 3's highest priority. We continually invest in security infrastructure to ensure your data remains safe at all times. The key technical and organisational measures we have implemented include:

256-bit SSL Encryption: All data communications between the scrplay 3 platform and its users are encrypted using the latest Transport Layer Security (TLS) protocol
Data-at-Rest Encryption: Sensitive data stored in the scrplay 3 database is encrypted even at rest
Layered Firewall: scrplay 3's server infrastructure is protected by multiple layers of firewalls and intrusion detection systems
Strict Access Controls: "Least privilege" principle — scrplay 3 staff may only access the data necessary for their specific job responsibilities
Two-Factor Authentication: Internal access to scrplay 3's critical systems requires multi-factor authentication
Continuous Monitoring: 24/7 security monitoring system to detect unusual activity and unauthorised access attempts
Regular Security Audits: Vulnerability assessments and penetration testing by independent, certified third parties
Staff Training: All scrplay 3 staff who handle personal data receive regular data protection training

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. Should a data security breach occur that affects your personal data, scrplay 3 will notify you within the timeframe required by applicable law.

6

Data Retention Period

Scrplay 3 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet applicable legal, regulatory, and contractual obligations. The general principles governing data retention periods at scrplay 3 are as follows:

Active Account Data: Retained for the duration your account is active on scrplay 3 and for up to 5 years after account closure for fraud prevention and regulatory compliance purposes
Financial Transaction Records: Retained for 7 years in accordance with applicable Malaysian tax and financial legislation
Gaming Activity Logs: Retained for 3 years for dispute resolution and responsible gaming monitoring purposes
Customer Support Correspondence: Retained for 2 years from the date of case resolution for reference and service improvement purposes
KYC Document Data: Retained for the period required by applicable regulatory obligations, typically 5 years after account closure
Technical Data (access logs, IP): Retained for 12 months for security and technical troubleshooting purposes

Once the relevant retention period has elapsed, your personal data will be securely deleted or anonymised in a manner that ensures it can no longer be linked back to you. scrplay 3 follows industry-recognised data deletion procedures to ensure that deleted data cannot be recovered.

7

Your Rights Regarding Personal Data

As a data subject and scrplay 3 member, you have specific rights regarding the personal data we hold about you. scrplay 3 is committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data scrplay 3 holds about you. We will provide this information in a clear and understandable format within 30 days of receiving your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update much of your information directly through your scrplay 3 account settings.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute and may be limited by scrplay 3's legal obligations to retain certain records.

Right to Restrict Processing

You have the right to request that scrplay 3 restrict the processing of your data in certain circumstances, such as when you dispute the accuracy of the data or object to ongoing processing.

Data Portability Rights

You have the right to receive the personal data you have provided to scrplay 3 in a structured, machine-readable format, and in certain circumstances, to request that we transfer that data directly to another platform.

Right to Object

You have the right to object to the processing of your data where it is carried out on the basis of scrplay 3's legitimate interests, including profiling for certain purposes. We will cease processing that data unless we have compelling grounds that override your interests.

8

Scrplay 3 Cookie Policy

Scrplay 3 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse a website. The following are the types of cookies used by scrplay 3:

You can manage your cookie settings through your browser. Most modern browsers allow you to view, manage, and delete cookies within their privacy settings. Please note that disabling certain cookies may affect the functionality of the scrplay 3 platform.

9

Children's Data Protection

Scrplay 3 does not provide services to individuals under the age of 18, and we do not knowingly collect personal data from minors. All scrplay 3 account registration processes require confirmation that the user is at least 18 years of age.

If we discover that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate steps to delete that data and close the account in question.

Immediate Action: If you know or suspect that someone under the age of 18 has registered for or used the scrplay 3 platform, please notify us immediately at support@scrplay3.best. We will investigate and take appropriate action without delay.

10

Links to Third-Party Websites

The scrplay 3 platform may contain links or integrations with third-party services in the course of normal operations, such as payment gateways for Touch 'n Go eWallet, GrabPay, DuitNow, and FPX. When you click those links or interact with these third-party services, their own privacy policies will apply.

Scrplay 3 is not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policy of every third-party service you use alongside scrplay 3. While we endeavour to work only with providers that uphold high privacy standards, we cannot guarantee their practices.

11

Cross-Border Data Transfers

In the course of operating scrplay 3, your personal data may be processed or stored on servers located outside Malaysia by the third-party service providers we use, such as international game providers or global cloud infrastructure.

Whenever your personal data is transferred outside Malaysia, scrplay 3 ensures that adequate protections are in place to safeguard your data. This is achieved through:

Legally binding data transfer agreements with data recipients
Ensuring that data recipients are subject to equivalent or stricter data protection laws
Use of approved standard contractual clauses for international data transfers
Regular assessment of the data protection measures implemented by recipients

By using the scrplay 3 platform, you consent to this data transfer subject to the protections outlined above.

12

Amendments to This Privacy Policy

Scrplay 3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. Any changes will be published on this page with a new "Last updated" date.

For significant changes that materially affect your privacy rights, scrplay 3 will provide advance notice via:

Notification emails sent to the address registered on your account
A clear notice on the scrplay 3 homepage or login page
An in-platform notification when you log in after the amendment takes effect

Your continued use of the scrplay 3 platform after any updates to this Privacy Policy are published constitutes your acceptance of the revised version. If you disagree with any changes, please contact us before continuing to use scrplay 3 services and we will help clarify what those changes mean for you.

13

Contact scrplay 3 Regarding Data Privacy

If you have any questions or concerns, or wish to exercise your rights regarding your personal data, please contact the scrplay 3 Data Privacy Officer through the following channels:

Privacy Email: support@scrplay3.best — please mark the email subject as "Data Privacy Request" for faster processing
Live Chat: Available 24/7 directly within the scrplay 3 platform — for quick and straightforward privacy enquiries

Response Time: scrplay 3 is committed to responding to all data privacy requests within 30 days of receipt. For more complex requests, we will notify you within 7 days with an estimated timeframe for resolution.

If you are dissatisfied with how scrplay 3 handles your personal data or responds to your privacy requests, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

Why Data Privacy Matters to scrplay 3 and Malaysian Players

In today's digital age, personal data is among the most valuable assets a person holds. When you register with scrplay 3 and start playing — whether it's slots, live baccarat, roulette, progressive jackpots or Malaysia Super League Sports Betting — you are entrusting us with sensitive information. We take that responsibility seriously.

Malaysian players have the right to know who holds their data, how it is being used, and what happens when they no longer wish to use the platform. scrplay 3 believes that transparency on these matters is not just good practice — it is the foundation of the trust that builds a lasting relationship between platform and player.

Something many new players are relieved to learn is that scrplay 3 does not store credit or debit card numbers directly. When you make a deposit via Touch 'n Go eWallet, GrabPay, or DuitNow, the transaction is processed entirely by the respective payment gateway. scrplay 3 only receives confirmation that the payment was successful — not your full card or account details.

We also understand that privacy concerns are often tied to unwanted advertising. scrplay 3 makes this commitment clearly: your data will not be used to send you third-party advertisements, will not be sold to data brokers, and will not be shared with any external party for marketing purposes. Any communications you receive from scrplay 3 relate solely to your account, our own platform offerings, and relevant service information.

Another important aspect of privacy for online casino players is the confidentiality of gaming activity. scrplay 3 does not disclose your game records, win or loss amounts, or individual betting patterns to any external party except where required by law. Your gaming activity data is used internally by scrplay 3 for operational purposes such as detecting fraudulent activity, monitoring responsible gaming, and ensuring the accuracy of transaction records.

In a landscape where cyber threats are growing increasingly sophisticated, scrplay 3 does not settle for merely meeting minimum requirements. We continuously look ahead, assess emerging threats and invest in the latest protective measures to keep our platform a safe environment for Malaysian players. If you have any questions or concerns about how scrplay 3 handles your data, our door is always open.

FAQ — scrplay 3 Privacy Policy

Answers to the most frequently asked questions from Malaysian players about data privacy

No. scrplay 3 does not store your credit or debit card details directly in our systems. All financial transactions are processed through certified third-party payment gateways such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX. The scrplay 3 platform only receives confirmation that a payment has been successfully processed — not your full financial information. This is one of the key measures we take to protect your financial security.

Yes, you may request the deletion of your personal data by contacting the scrplay 3 team via email at support@scrplay3.best. However, this right to erasure is not absolute — scrplay 3 may need to retain certain records to fulfil legal obligations, such as financial transaction records required under Malaysian tax law. We will inform you which data can be deleted immediately and which must be retained for a specified period for legal reasons, along with the relevant retention periods.

Game providers such as Microgaming, NetEnt and Pragmatic Play may receive the minimum technical data required to ensure games function correctly during your playing session on scrplay 3 — for example, a session identifier that does not reveal your actual identity. They do not receive your full name, phone number, email address or financial information. All data sharing with game providers is limited to what is technically necessary and is carried out under strict confidentiality agreements.

You may request a copy of the personal data scrplay 3 holds about you by sending a data access request to support@scrplay3.best. Please use the subject line "Data Access Request — [Your Username]" to help us process your request faster. scrplay 3 will action your request within 30 days and provide the information in a clear format. You may be required to go through an identity verification process to ensure security before any data is disclosed.

No. scrplay 3 does not use your data for third-party marketing purposes and does not share your data with data brokers or external advertisers. Any marketing communications you may receive from scrplay 3 relate exclusively to offers and promotions from our own scrplay 3 platform, and only if you have agreed to receive such communications during registration or via your account settings. You may unsubscribe from marketing communications at any time through the unsubscribe link in those emails or through your account settings.

Scrplay 3 Privacy Policy — A Summary of Our Commitments

Scrplay 3 is committed to protecting the privacy and personal data security of all Malaysian players. We use 256-bit SSL encryption for all transactions, never sell data to third parties, give you full control over your data, and conduct regular security audits to ensure our protection standards remain current.

This Privacy Policy is a living document and will be updated as necessary. The version displayed on this page is the currently in-force version. For any queries relating to data privacy, contact us at support@scrplay3.best.

Terms & Conditions Responsible Gaming FAQ

Secure Payment Methods at scrplay 3

All transactions are processed through certified payment gateways — your financial data is never stored directly by scrplay 3

Touch 'n Go eWallet

GrabPay

Boost

ShopeePay

DuitNow

FPX (Maybank2u)

FPX (CIMB Clicks)

No Card Data Stored

Financial details are not stored by scrplay 3

256-bit SSL Encrypted

Every transaction is fully protected

Minimum Deposit RM20

Withdrawals in 5–15 minutes

🔒

Play at scrplay 3 with Peace of Mind — Your Data is Fully Protected

Register for free in 2 minutes with secure, protected information. Deposit from as little as RM20 via Touch 'n Go or DuitNow and enjoy over 500 casino games, slots, jackpots and football at scrplay 3 — with full privacy protection guaranteed.

Register a Free Account Log In

For players aged 18 and above only. Play smart and responsibly.

Privacy Policy scrplay 3 — Our Commitment to Protecting Malaysian Players' Data