Official Documents

Privacy Policy scru2 β€” Protection of Your Personal Data

Scru2 takes our responsibility to every user's privacy seriously. This document explains in detail how we collect, use, and protect your personal information.

Updated: 1 January 2026
πŸ”
256-bit SSL Encryption
All data transmitted between your device and scru2's servers is protected with industry-standard 256-bit SSL encryption β€” the same standard used by leading financial institutions.
🚫
No Data Sale
scru2 does not sell, rent, or allow third parties to access your personal data for marketing purposes without your explicit consent. Your data remains yours.
🎯
Data Minimisation
We only collect data that is genuinely necessary to provide you with the best service. No excess data is collected without a clear and legitimate purpose.
βœ…
Legal Compliance
scru2's Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.
πŸ‘€
Full User Control
You have the right to access, correct, transfer, or request the deletion of your personal data at any time through scru2's official support channels.
πŸ””
Data Breach Notification
In the event of any data security breach involving your information, scru2 is committed to notifying affected users within the timeframe required by law.

Summary: scru2 respects your privacy. We collect only the data that is necessary, protect it with the latest encryption technology, and never sell your information to third parties. You always retain full control over your personal data.

1

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes the privacy practices of scru2 regarding the collection, use, disclosure, and protection of personal information of users who access or use the scru2 platform via the scru2.net website or the scru2 mobile app.

Scru2 understands that your trust is the foundation of our relationship. That is why we are committed to always being transparent about our data handling practices and ensuring that your privacy rights are consistently respected and protected. Every action we take regarding your personal data is based on a lawful basis, whether to comply with legal obligations, fulfil a service contract, or serve scru2's legitimate interests without compromising your fundamental rights.

This Policy applies to all users of the scru2 platform, including those who simply browse the website, prospective members in the process of registration, active members, and former members whose accounts have been closed. By using the scru2 platform, you acknowledge that you have read and understood this Privacy Policy.

2

Types of Personal Data We Collect

Scru2 collects several categories of personal information to enable us to provide services that are secure, efficient, and compliant with legal requirements:

Data Category Example Information Requirements
Identity Information Full name, date of birth, identity card number, gender Mandatory
Contact Information Email address, phone number, residential address Mandatory
Financial Information Bank account number, payment method, transaction history Mandatory
Verification Data (KYC) Copy of identity card, passport, utility bill, bank statement Mandatory (verification)
Usage Data Game activity logs, betting history, session duration Automatic
Technical Data IP address, device type, web browser, operating system Automatic
Communication Data Support chat records, emails, user feedback Where applicable

Automatically collected data such as IP addresses and device data is used solely for security, fraud detection, and user experience improvement purposes.

3

Purpose of Personal Data Use

Scru2 uses the personal data collected for the following purposes, all within the bounds permitted by applicable data protection laws:

  • Service Provision: Creating and managing your account, processing deposits and withdrawals, and enabling you to access all games and features on the scru2 platform.
  • Identity Verification (KYC): Verifying user identity to comply with anti-money laundering (AML) requirements and applicable financial laws.
  • Security & Fraud Prevention: Identifying and preventing fraudulent activity, multi-account use, money laundering and other security threats.
  • Customer Support: Handling your enquiries, complaints and requests through scru2's customer service channels.
  • Legal Compliance: Fulfilling the regulatory reporting and compliance obligations imposed on scru2 as an online gaming platform operator.
  • Responsible Gaming: Monitoring gaming patterns to identify users who may need assistance or responsible gaming support.
  • Platform Improvements: Analysing usage data in aggregate and anonymised form to improve user experience, platform performance and gaming offerings.
  • Marketing Communications: Sending information about promotions, bonuses and the latest offers β€” only to users who have given consent to receive such communications.

Scru2 does not use your personal data for any purposes other than those stated above without first obtaining your consent.

4

Data Sharing & Disclosure

Scru2 does not sell your personal data to any party. However, under certain circumstances, we may need to share some of your information with selected third parties:

  • Payment Service Providers: Transaction details required are shared with payment processors and financial institutions to enable deposits and withdrawals to be processed securely.
  • Technology Providers: Cloud computing, analytics and security services used by scru2 may process some user data in their capacity as third-party data processors bound by strict confidentiality agreements.
  • Regulatory Authorities: scru2 may be required to disclose user information to government authorities, regulatory bodies, or law enforcement agencies when mandated by law or court order.
  • Change of Corporate Ownership: If scru2 is involved in a merger, acquisition or asset sale, user data may be transferred to the successor entity, subject to notification to the relevant users.

Our commitment: All third parties with whom we share data are required to comply with data protection standards equivalent to or exceeding those of scru2, and are prohibited from using that data for any purpose other than what has been agreed.

5

Security & Data Protection

Scru2 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or alteration:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL protocols β€” ensuring all communications between your device and scru2's servers cannot be intercepted.
  • Data encryption at rest for sensitive information such as passwords and financial details, using internationally recognised encryption algorithms.
  • Role-based access control (RBAC) ensuring that only authorised staff can access user data, and only to the extent required for their duties.
  • Continuous 24/7 security monitoring and an intrusion detection system (IDS) to proactively identify and respond to security threats.
  • Regular security audits conducted by independent parties to assess and test the effectiveness of existing security measures.
  • A clear incident response plan to ensure any data security breach is handled promptly and affected users are notified in accordance with legal requirements.

While scru2 takes all reasonable steps to protect your data, no security system can guarantee absolute protection. Users also have a responsibility to keep their account login credentials secure and not share their password with anyone.

6

Cookies, Analytics & Tracking Technologies

The scru2 platform uses cookies and similar tracking technologies to enhance user experience and understand platform usage patterns. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are critical to platform operation.
  • Preference Cookies: Saving your preferences such as language, region and display settings to ensure a personalised experience on your next visit.
  • Analytics Cookies: Collecting anonymised data on how users interact with the platform to help us identify areas that need improvement.
  • Security Cookies: Used to identify suspicious activity, prevent fraud, and protect user accounts from unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the scru2 platform. More information on how to manage cookies is available in your web browser settings.

7

User Rights Relating to Personal Data

As a scru2 user, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 and applicable laws:

πŸ‘οΈ
Right of Access

You have the right to request a copy of the personal data we hold about you.

✏️
Right to Rectification

You may request the correction of any inaccurate or incomplete personal data.

πŸ—‘οΈ
Right to Erasure

You may request the deletion of your personal data, subject to legal obligations.

⏸️
Right to Restriction

You may request that we restrict the processing of your data under certain circumstances.

πŸ“¦
Right to Portability

You have the right to receive your data in a structured, machine-readable format.

🚫
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the scru2 privacy team via email at privacy@scru2.net. We will process your request within 30 days of receipt, subject to verification of your identity.

8

Data Retention Period

Scru2 retains your personal data only for as long as is necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable law:

  • Active account data: Retained for the duration your account is active, plus any legally required period following account closure.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
  • KYC documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with regulatory requirements.
  • Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
  • Analytics data: Anonymised usage data is retained for 2 years for trend analysis and platform improvement purposes.

Note: Once the designated retention period expires, your personal data will be securely deleted or anonymised in accordance with scru2's internal procedures that comply with industry best practices.

9

Changes to the Privacy Policy

Scru2 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements in how we handle personal data.

When significant changes are made to this Privacy Policy, scru2 will take the following steps to ensure you are informed:

  • Publishing the updated Privacy Policy on scru2.net with the latest revision date clearly indicated at the top of the document.
  • Sending notifications via registered email or in-platform notifications to active users when material changes occur.
  • Displaying prominent notices on the scru2 website during the transition period following any major changes coming into effect.

Your continued use of the scru2 platform after changes to this Privacy Policy are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

10

Contact the scru2 Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how scru2 handles your personal data, please contact scru2's Data Protection Officer (DPO) through the following channels:

  • Privacy Email: privacy@scru2.net
  • General Support Email: support@scru2.net
  • Live Chat: Available 24/7 via the scru2 platform

We are committed to responding to all privacy-related enquiries within 14 business days of receipt. For formal complaints requiring further investigation, the response period may take up to 30 days.

If you are not satisfied with scru2's response to your privacy complaint, you have the right to refer the matter to the relevant data protection regulatory authority in your jurisdiction. For more information about your rights, please also refer to the Terms and Conditions and Responsible Gaming us.

Your Data Is Safe With scru2

Join over 500,000 Malaysian players who trust scru2 as a safe, fair and responsible online gaming platform. Register now and enjoy the highest level of data protection.

Bahasa Melayu