Scr2 is committed to protecting the privacy and personal data of every player. This document clearly explains how we collect, use, store, and protect your information.
Your privacy is more than a legal obligation to us — it is the foundation of trust that builds a lasting relationship between scr2 and the Malaysia player community. Here are the six core principles that guide how we manage your personal data.
All data transmitted between your device and scr2 servers is protected with 256-bit SSL encryption. Data stored in our databases is also encrypted using the industry-recognised AES-256 standard.
Scr2 has never and will never sell, rent, or trade your personal data to third parties for marketing or any other commercial purpose without your explicit consent.
You have the full right to access, correct, or request the deletion of your personal data. scr2 provides a straightforward process for you to exercise these rights whenever needed.
This Privacy Policy is fully built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data collection and processing practices comply with applicable law.
Your personal data is only retained for as long as necessary for the stated purpose or as required by law. After this period, data will be securely deleted from all our systems.
The scr2 data storage and processing systems undergo independent security audits on a regular basis. This ensures your data protection remains at a level appropriate to current threats.
This Privacy Policy ("Policy") is published by scr2, an online entertainment platform operating under the domain scr2.pro. It describes in detail how scr2 collects, processes, stores, and protects the personal data of all individuals using our platform — including website visitors, registered players, and former players.
By registering an account with scr2 or continuing to use our services after being notified of updates to this Policy, you acknowledge that you have read and understood the terms contained herein. If you do not agree with how we manage your personal data as described in this Policy, you have the right to stop using the platform and request account closure.
Scr2 processes your personal data on the basis of one or more of the following legal grounds under PDPA 2010:
This Policy applies to all services provided by scr2, including the main website, mobile apps for iOS and Android, Live Casino services, Sports Betting platform, and all our communication channels including Live Chat, email, and WhatsApp.
Scr2 only collects data that is strictly necessary to provide services that are safe, efficient, and compliant with regulatory requirements. Below is a summary of the data we collect, how it is collected, and whether it is mandatory or optional.
| Data Category | Example Information | How It Is Collected | Status |
|---|---|---|---|
| Identity Verification | Full name, MyKad/passport number, date of birth | Registration form, KYC | Mandatory |
| Contact Information | Email address, phone number, residential address | Registration form | Mandatory |
| Financial Information | Bank name, account number, transaction history | Deposit and withdrawal processing | Mandatory |
| Usage Data | Game logs, betting history, active session duration | Automatically during use | Automatic |
| Technical Data | IP address, device type, operating system version, browser | Server logs, cookies | Automatic |
| Marketing Preferences | Notification preferences, promotional preferences | Account settings | Optional |
Scr2 does not collect sensitive data such as health information, political views, or religious affiliation unless you choose to voluntarily share such information in your communications with our support team.
The personal data we collect is used exclusively for purposes directly related to delivering scr2 services and meeting our legal obligations. We do not use your data for unrelated purposes without obtaining fresh consent from you.
You may withdraw your marketing consent at any time through your account settings.
Scr2 uses automatically collected usage and technical data for internal analytics purposes — such as understanding usage patterns, identifying areas for improvement, and enhancing overall platform performance. This data is processed in aggregated form that does not allow identification of individuals in most analytics use cases.
Scr2 is highly selective about when and with whom your personal data is shared. As a general rule, we do not share data with third parties except in the following circumstances where it is necessary to provide services to you.
Scr2 has never and will never sell or rent your personal data to any third party for marketing, advertising, or any other commercial purpose. Any data sharing that takes place is solely to enable us to provide the services you use.
Third parties that may receive your limited personal data include: payment service providers (to process deposits and withdrawals), gaming service providers (to access Live Casino and slot games), identity verification service providers (for the KYC process), and regulatory or law enforcement bodies when required by law.
All third parties working with scr2 are required to comply with data protection standards equal to or exceeding those we practise. scr2 binds these third parties through data protection agreements that ensure your data is not misused or further disclosed.
Scr2 continuously invests in security infrastructure to ensure your personal data is protected at every stage — from transmission and processing through to long-term storage.
All communications between your browser or app and scr2 servers use TLS 1.3 protocol with 256-bit encryption. This means data in transit cannot be intercepted or read by unauthorised parties.
Sensitive data stored in scr2's database — including bank information and KYC documents — is encrypted using AES-256. Even in the event of a system breach, this data cannot be read without the encryption key.
Scr2 offers two-factor authentication for all accounts. We strongly encourage all players to enable 2FA to add an extra layer of security to their account.
The scr2 security system operates around the clock with automated monitoring to detect suspicious activity. Any anomaly in login or transaction patterns will trigger an immediate additional review.
Access to players' personal data within scr2 is restricted to staff with a legitimate business need only. All access is logged and audited regularly to prevent internal misuse.
Scr2 engages independent cybersecurity firms to conduct regular penetration testing and comprehensive security audits to identify and address any vulnerabilities.
In the unlikely event of a security breach affecting your personal data, scr2 will notify you via your registered email within 72 hours of becoming aware of the incident. The notification will describe the type of data involved, the potential impact, and the steps taken and being taken to address the situation.
Like most modern online platforms, scr2 uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and deliver relevant content. Below are the types of cookies we use and their purposes.
You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the scr2 platform. Essential cookies cannot be disabled without affecting your ability to log in and use the platform.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and scr2's internal policies, you have the following rights regarding your personal data. We always respect and facilitate the exercise of these rights.
You have the right to request a copy of all personal data held by scr2 about you. scr2 will fulfil this request within 30 calendar days. Requests can be submitted by email to our data protection team.
If you find that any personal data held by scr2 is inaccurate or outdated, you may request a correction. Some data (such as name and identification number) may require supporting documents before a correction is made.
You may request scr2 to delete your personal data under certain circumstances — for example, when the data is no longer needed for the purpose it was originally collected. However, this right does not apply where we have a legal obligation to retain the data.
For data processing based on your consent (primarily marketing communications), you may withdraw that consent at any time through your account settings or by contacting our support team.
You have the right to receive your personal data in a machine-readable format (such as JSON or CSV) so you can transfer it to another platform if needed. This request will be processed within 30 days.
Under certain circumstances, you may request scr2 to restrict the processing of your personal data — for example, while you dispute the accuracy of the data or while awaiting a decision on a deletion request.
Scr2 maintains clear policies on how long personal data is retained. We only keep data for as long as it is needed for the purposes stated in this Policy or as required by Malaysian law.
Active account data is retained for as long as your account is active or services are being provided. Once an account is closed, transaction and financial data is retained for seven (7) years to meet anti-money laundering and tax reporting legal requirements. Technical and usage log data is retained for twelve (12) months before being automatically deleted.
When your personal data reaches the end of its retention period or when you request deletion, scr2 uses secure deletion methods to ensure the data cannot be recovered. This includes data overwriting on physical storage and cryptographic erasure for encrypted data. Once the process is complete, you will receive a confirmation by email.
Scr2 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.
All new registrants are required to confirm they are 18 years of age or older during the registration process, and our KYC process verifies age using official identity documents. If we find that personal data of an underage individual has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.
If you have any questions, concerns, or wish to exercise any of your rights as described in this Privacy Policy, please contact our Data Protection Officer (DPO). We are committed to responding to all privacy-related enquiries within three (3) business days.
If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) or the relevant regulatory body.
Scr2 takes every privacy-related enquiry seriously. We are always looking to improve our privacy practices based on the feedback we receive. Your cooperation in reporting any concerns helps us become a better and more trusted platform for all players in Malaysia.
Scr2 protects your privacy with advanced encryption and transparent policies. Register today and enjoy a safe betting experience alongside over 500,000 Malaysia players.
Register for Free Login