iscr2u Privacy Policy

Information We Collect

iscr2u collects various categories of personal information from users in order to provide a safe, efficient and responsible service. The information collected includes the following:

• Account Registration Information: Username, encrypted password, email address, mobile phone number and date of birth. This information is required to create and verify your account identity.
• Identity Verification Information: A copy of your identification card (MyKad) or passport for age verification and anti-money laundering (AML) screening in line with international licensing requirements.
• Financial Information: E-wallet account details (Touch 'n Go eWallet, Boost, ShopeePay), DuitNow information, FPX details and crypto wallet information (USDT, BTC, ETH) that you use for deposit and withdrawal transactions.
• Platform Usage Data: Game history, betting records, total deposits and withdrawals, and usage patterns collected automatically while you use the platform.
• Technical Data: IP address, device type, operating system, web browser type, cookie data and access logs collected automatically for security and service improvement purposes.

Purpose of Using Information

Personal information collected by iscr2u is used solely for legitimate and clearly stated purposes. We use your information to:

• Process new account registrations and verify user identity in line with the international licensing requirements we comply with.
• Process deposit and withdrawal transactions through supported payment methods including Touch 'n Go eWallet, DuitNow, FPX, Boost, ShopeePay and cryptocurrency.
• Provide 24/7 customer support via live chat and email in Malay and English to help users resolve any issues.
• Monitor account activity to detect and prevent fraud, money laundering and platform abuse.
• Send important notifications related to your account, transactions, promotions you have opted in to, and policy updates.
• Meet legal obligations and regulatory body requirements under the international licence we hold.
• Improve the platform, services and overall user experience based on analysis of aggregated and anonymised usage patterns.

Legal Basis for Data Processing

iscr2u processes your personal information based on valid legal grounds under the applicable data protection framework. Those grounds are:

• Contract Performance: Processing your information is necessary to carry out the service agreement between you and iscr2u, including processing financial transactions and managing your account.
• Legal Obligation: Some data processing is necessary to comply with legal requirements, including identity verification, AML monitoring and reporting to authorities when required.
• Legitimate Interests: We process certain data based on legitimate business interests such as platform security, fraud prevention and service improvement.
• Consent: For optional marketing activities and promotional communications, we only process your data with explicit consent, which can be withdrawn at any time.

Information Sharing and Disclosure

iscr2u does not sell, rent or trade users' personal information to any third party. Your information may only be shared in limited and controlled circumstances as follows:

• Payment Service Providers: Information that needs to be shared with payment processors (e-wallets, banks, crypto providers) to carry out your deposit and withdrawal transactions.
• Game Software Providers: The minimum technical data required by licensed game providers to ensure fairness and game integrity.
• Authorities: Information required to be disclosed to regulatory authorities, law enforcement or courts where there is a legal order or obligation under our licence.
• Business Transfers: If iscr2u is involved in a merger, acquisition or asset sale, user information may be transferred as part of the business assets, subject to appropriate notice being given to users.

All third parties that receive information from iscr2u are bound by confidentiality agreements and strict data protection obligations.

Cookies and Tracking Technologies

The iscr2u platform uses cookies and similar tracking technologies to improve the user experience and ensure the platform functions properly.

The cookies we use include session cookies (required to keep you logged in), preference cookies (to save your language and display settings), and analytics cookies (to understand how users interact with the platform for improvement purposes).

You can control and manage cookies through your web browser settings. If you disable certain cookies, some platform functions may be affected. Please note that session cookies are required for account security and cannot be disabled during an active session.

Information Security

iscr2u implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

• All communications between your device and iscr2u servers are encrypted using TLS/SSL protocols with the latest encryption standards.
• Account passwords are stored in a hashed form that cannot be decrypted, meaning even iscr2u staff cannot view your password in its original form.
• Access to databases containing personal information is restricted to staff who have been granted specific authorisation based on a need-to-know principle.
• Our systems are audited periodically by independent third parties to identify and address any security vulnerabilities.
• A robust incident response procedure is in place to handle any data breach promptly, including notification to affected users in accordance with legal requirements.

Data Retention Period

iscr2u retains users' personal information only for as long as necessary for the purposes stated in this policy or as required by law and licensing requirements.

Active account data is kept for the duration the account remains active. Once an account is closed, personal information will be retained for the period required by legal obligations relating to gambling, AML and tax. After the required retention period ends, data will be securely deleted or anonymised.

Financial transaction data is retained in accordance with financial record requirements under the licence we comply with. Technical logs are kept for a shorter period for security and troubleshooting purposes.

International Data Transfers

As a platform operating under an international licence, some of iscr2u's technology infrastructure may be located outside Malaysia. International data transfers are carried out with appropriate safeguards including:

• Use of approved standard contractual clauses to ensure an adequate level of data protection at the transfer destination.
• Selection of technology partners and service providers that comply with internationally recognised data protection standards.
• Encryption of data during transfer and at rest to ensure the security of your information in all locations.