SCR918 Privacy Policy – Data Protection & Privacy for Malaysian Players

This Privacy Policy is issued by SCR918 ("Platform", "We", "SCR918") and applies to all registered members, users browsing the platform, and any individual who interacts with SCR918 services through the website, mobile app, or associated communication channels.

SCR918 understands that your trust depends largely on how we handle your personal information. For Malaysian players using our platform to enjoy live dealer baccarat, Malaysia Super League football betting, casino games, BWF badminton, and a wide range of other online entertainment — we want you to know exactly what happens to your data every time you log in to your SCR918 account.

This policy explains what types of data we collect, why we need it, how long it is retained, who it may be shared with within very strict limits, and what rights you have over that data. We also explain how you can contact us to exercise those rights.

SCR918 collects two main categories of data: information you provide directly to us, and information collected automatically when you use our platform.

Information you provide directly:

• Registration Data: Full name, active Malaysian phone number, email address, and password when registering for an SCR918 account.
• Identity Verification Data: A copy of your MyKad (Malaysian Identity Card) or other identification document, requested for account verification, large withdrawals, or additional security measures.
• Financial Data: Payment account details used for deposits and withdrawals – including the account holder name for Touch 'n Go eWallet, DuitNow, FPX bank account numbers (Maybank2u, CIMB Clicks), GrabPay, Boost, or ShopeePay. SCR918 does not store credit or debit card numbers directly.
• Communications: Any messages, complaints, or feedback you send to the SCR918 customer support team via live chat, email, or WhatsApp.

Information collected automatically:

• Log Data: IP address, browser type, operating system, pages visited within the SCR918 platform, time and duration of visits, and actions taken within the platform.
• Device Data: Details of the mobile device or computer used, including device model, operating system, and unique device identifier.
• Game Activity Data: Betting records, game history, deposit and withdrawal transactions, and promotional activity within the SCR918 platform.
• Cookie Data: Information collected through cookies and similar tracking technologies – see Section 7 for full details.

SCR918 uses the information it collects for specific, legitimate purposes only. We do not use your data for unrelated purposes or in ways you would not reasonably expect. Below is a complete list of the purposes for which SCR918 uses your data:

• Account Management: Creating and maintaining your SCR918 account, including the login process, identity verification, and account security management.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and ShopeePay, as well as handling your withdrawal of winnings promptly and accurately.
• Service Provision: Grants you access to all SCR918 games and services, including live dealer baccarat, football betting, casino, badminton, e-sports, and virtual sports.
• Security & Fraud Prevention: Identifying and blocking suspicious activity, fraud, money laundering, or any misuse of the platform that could harm other members.
• Legal Compliance: To fulfil the reporting and record-keeping obligations required by applicable laws, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Service Communications: Sending important notifications related to your account, changes to terms, security alerts, and service updates you need to be aware of.
• Platform Upgrades: Analysing usage patterns to understand the needs of Malaysian players and continuously improve the design, functionality, and performance of the SCR918 platform.
• Marketing Communications: Sends information about SCR918's latest promotions, bonuses, and offers — only to members who have consented to receive them and who may opt out at any time.

SCR918 does not sell, rent, or disclose your personal information to outside parties for their own commercial marketing purposes. This is a commitment we have never broken since the platform launched in 2015.

However, in the course of normal platform operations, SCR918 may need to share your data with the following categories of parties within very limited scope and only for specific purposes:

• Payment Service Providers: Transaction details required to process your deposits and withdrawals are shared with the relevant payment service providers, including Touch 'n Go, DuitNow, FPX banks, GrabPay, Boost, and ShopeePay. Such sharing is kept to a minimum and limited strictly to what is necessary to complete the transaction.
• Game Providers: Game providers such as Evolution Gaming, Pragmatic Play Live, and Playtech may require basic session information to deliver their live dealer and casino games within the SCR918 platform. This information does not include financial data or detailed personal identification details.
• Authorities: SCR918 will disclose information to government authorities, law enforcement agencies, or courts when required by applicable Malaysian law, or when there is an urgent need to prevent fraud or financial crime.
• Technical Service Providers: Third parties that assist SCR918 with technical infrastructure maintenance, cybersecurity, and data analytics may have limited access to certain data. All such parties are bound by strict confidentiality agreements and are only permitted to use that data for its specified purpose.

Protecting your personal data is more than a legal obligation – it is a moral responsibility that we take very seriously at SCR918. We consistently invest in the latest security technologies and procedures to keep your information safe at all times.

Key security measures SCR918 uses to protect your data:

• 256-bit SSL Encryption: All communication between your device and SCR918's servers is fully encrypted. This includes login credentials, financial transaction data, and any personal information transmitted through the platform.
• Secure Data Storage: Members' personal data is stored on servers protected by strict access controls. Access to this data is granted only to staff who require it to perform their job duties, and is subject to rigorous internal security protocols.
• Fund Segregation: SCR918 members' funds are held in accounts that are separate from the company's operating funds, ensuring there is no commingling that could put your money at risk.
• Continuous Monitoring: SCR918's systems are monitored around the clock to detect any suspicious activity, intrusion attempts, or security anomalies that require immediate action.
• Two-Factor Authentication (2FA): 2FA is available for all SCR918 accounts, and we strongly encourage every member to enable it as an added layer of protection against unauthorised access.
• Regular Security Audits: The SCR918 platform undergoes periodic independent security audits to identify and address any vulnerabilities before they can be exploited.

While SCR918 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% proof against every threat. We therefore encourage you to also play your part in keeping your account secure by using a strong password and never sharing your login details with anyone.

SCR918 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Retention periods vary by data type:

• Active Account Data: Your registration and profile information is retained for as long as your SCR918 account remains active.
• Data After Account Closure: After an account is closed, certain data may be retained for an additional period to fulfil legal obligations, resolve outstanding disputes, or prevent fraud. This period is typically between 2 and 7 years, depending on the type of data.
• Financial Records: Deposit and withdrawal transaction records are retained for 7 years from the date of the transaction, in line with standard financial record-keeping requirements.
• Betting Records: Betting and game history is retained for 5 years for dispute resolution and audit purposes.
• Security Logs: IP address logs and security activity are retained for 2 years to assist in security incident investigations if required.

When data is no longer needed and there is no legal obligation to retain it, SCR918 will delete or anonymize that data in a secure and irreversible manner.

SCR918 uses cookies and similar technologies to enhance the user experience, maintain platform security, and understand how Malaysian players use our services. Cookies are small text files stored on your device when you browse the SCR918 platform.

You can manage or delete cookies through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of the SCR918 platform and your gaming experience. Essential cookies cannot be disabled as they are required for the platform to operate securely.

As an SCR918 member, you have several rights regarding your personal data, all of which we respect and make straightforward to exercise. These rights can be exercised by contacting the SCR918 customer support team.

To exercise any of the above rights, please contact us at support@scr918.best by stating the right you wish to exercise along with your account details. SCR918 will process your request within a reasonable timeframe and notify you of the action taken.

The SCR918 platform may contain links or integrations with third-party services in a limited capacity to support payment and gaming functions. Each of these third-party service providers has its own privacy policy governing how they handle user information.

SCR918 is not responsible for the privacy practices of such third parties, even if they are our service partners. When you interact with third-party services through the SCR918 platform — for example, when processing a deposit via Touch 'n Go eWallet or DuitNow — data transmitted to them is subject to their own privacy policies.

If you have any questions, concerns, or complaints regarding how SCR918 handles your personal data, or if you wish to exercise any of the rights outlined in this Privacy Policy, please contact our team through the following channels:

• Email: support@scr918.best – for privacy enquiries that require a written response or involve sensitive data.
• Live Chat: Available 24 hours within the SCR918 platform – for general privacy questions that require an immediate response.
• WhatsApp: For issues requiring further communication – please reach out via the number listed in the platform's support section.

SCR918's customer support team operates 24 hours a day, 7 days a week in both Malay and English. We are committed to responding to all privacy-related enquiries within 3 business days of receipt.

The effective date of this Privacy Policy is 1 January 2026. This version supersedes all previous versions of the SCR918 Privacy Policy. By using the SCR918 platform after this date, you agree to the updated Privacy Policy.