Privacy Policy iscr2u – Personal Data Protection for Malaysian Members

Iscr2u is committed to protecting the privacy of every individual who interacts with our platform. This policy applies to all iscr2u platform users — whether you are a casual visitor, a registered member, or a former member whose account has been closed. It covers all Personal Data collected through the iscr2u website, mobile application (if applicable), and official communication channels.

We believe transparency is the foundation of trust. That is why iscr2u strives to explain our privacy practices clearly and in plain language — not in confusing legal jargon. If you have any questions after reading this Policy, the iscr2u support team is available to assist you 24 hours a day.

Iscr2u fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). As a registered data controller, iscr2u is responsible for ensuring that all Personal Data collected is processed lawfully, fairly, and transparently.

Iscr2u collects the Personal Data necessary to provide our members with a safe, efficient, and high-quality service. The following are the categories of data we collect:

Iscr2u only collects data that is genuinely necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs, or political affiliations that are not directly relevant to iscr2u's services.

Iscr2u collects Personal Data through the following methods:

• Directly from You: When you complete the registration form, submit a withdrawal request, contact customer support, or update your iscr2u account profile.
• Automatically During Use: iscr2u automatically collects technical data when you access the platform — including IP address, device information, and usage patterns via cookie technology and server logs.
• From Payment Providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), the respective provider may share transaction information necessary to verify and process your payment.
• From Identity Verification Providers: To meet AML (Anti-Money Laundering) and KYC (Know Your Customer) requirements, iscr2u may engage recognised third-party services to verify member identity when necessary.
• Through Cookie Technology: iscr2u uses cookies and similar tracking technologies to enhance the user experience and understand how members use our platform. Further details are provided in Section 9.

Iscr2u uses collected Personal Data solely for legitimate purposes directly related to the provision of platform services. The following are the primary purposes for which iscr2u uses your data:

• Account Management: Creating, verifying, and maintaining your iscr2u member account, including processing registration, managing login credentials, and handling account-related requests.
• Financial Transaction Processing: Securely and accurately processing deposits and withdrawals made via TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
• Identity Verification & AML Compliance: Fulfilling iscr2u's legal obligations under Malaysian legislation relating to identity verification and anti-money laundering.
• Service Delivery: Allows you to play slots, Live Casino, football betting (Malaysia Super League, EPL and more), Virtual Sports, lottery, table games and jackpots on the iscr2u platform.
• Customer Support: Handles enquiries, complaints and support requests you submit to the iscr2u support team via live chat or other channels.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, multi-account use, bonus abuse, and any security threats to the iscr2u platform.
• Platform Improvements: Analyses usage patterns in aggregated, anonymised form to help iscr2u improve the platform's interface, performance and game offerings.
• Service-Related Communications: Sending important notifications about your account, service changes, promotions you are eligible for, and relevant security updates.

Iscr2u does not sell, rent, or trade your Personal Data to any third party. However, in the course of operating the platform, iscr2u may share Personal Data with the following categories of third parties under limited circumstances and with appropriate safeguards:

• Payment Provider: iscr2u shares the necessary transaction information with Malaysian payment providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX partner banks to process your deposits and withdrawals.
• Game Providers: Limited technical data may be shared with game providers such as Pragmatic Play, PG Soft, and Evolution Gaming solely for the purpose of processing gameplay and resolving technical disputes.
• IT & Security Service Providers: Companies providing server hosting, security analytics, and fraud detection services contracted by iscr2u — subject to strict confidentiality agreements.
• Relevant Authorities: iscr2u will disclose Personal Data to the police, courts, or Malaysian government authorities when required by law, court order, or official investigation.
• Identity Verification Services: Recognised KYC (Know Your Customer) service providers used to verify member identities in compliance with Malaysia's AML legal requirements.

In all of the above cases, iscr2u ensures that every third party receiving member Personal Data is bound by equivalent confidentiality obligations and uses that data solely for the specified purpose.

Iscr2u continually invests in security infrastructure to ensure every member's Personal Data is protected at all times. Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and iscr2u's servers are fully encrypted using 256-bit SSL, making interception by unauthorised parties virtually impossible.
• Data Encryption at Rest: Sensitive Personal Data — including financial details and identity verification documents — is encrypted when stored in the iscr2u database.
• Internal Access Controls: Access to members' Personal Data within the iscr2u organisation is restricted to staff with a legitimate operational need. All access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): iscr2u offers 2FA for all member accounts as an added layer of protection against unauthorised access, even in the event of a compromised password.
• Continuous Security Monitoring: iscr2u's automated monitoring system runs 24 hours a day to detect suspicious activity, intrusion attempts, and security anomalies that could compromise member data.
• Regular Security Audits: iscr2u conducts regular internal and external security audits to identify and address any vulnerabilities in our data protection systems.
• Incident Response Plan: iscr2u has established incident response procedures to address any data breaches quickly and effectively, including notifying affected members and the relevant authorities where required.

Iscr2u retains members' Personal Data only for as long as necessary to fulfil the purposes stated in this Policy or to meet applicable legal obligations. The following are iscr2u's data retention guidelines:

• Active Account Data: Retained for as long as your iscr2u account remains active. Data is updated whenever you make changes to your profile.
• Financial Transaction Data: Deposit and withdrawal transaction records are retained for the minimum period required under Malaysian AML legislation — typically no less than six (6) years from the date of the transaction.
• Data After Account Termination: After an account is closed at a member's request, iscr2u will delete or anonymise Personal Data within a reasonable period, unless retention is required to fulfil legal obligations, resolve disputes or enforce iscr2u's agreements.
• Log & Security Data: Activity logs and security records are retained for the period specified by iscr2u's internal security policy for fraud detection and audit purposes.
• Support Communication Data: Records of interactions with iscr2u's customer service team are retained for as long as necessary to resolve any potential disputes.

Once the retention period has lapsed, Personal Data will be securely deleted or converted into a format that no longer identifies the individual.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), every iscr2u member has the following rights regarding their Personal Data:

The iscr2u platform uses cookies and similar tracking technologies to enhance the user experience and enable certain features to function correctly. The following are the types of cookies iscr2u uses:

• Essential Cookies: Required for core iscr2u platform functions such as maintaining your login session and processing transactions securely. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information about how visitors use the iscr2u platform in aggregated, anonymised form to help us identify technical issues and improve platform performance.
• Functional Cookies: Storing your preferences such as interface language and display settings to make your experience on iscr2u more personalised and comfortable.
• Security Cookies: Used to detect suspicious activity, prevent unauthorised access and protect your iscr2u account from security threats.

You can manage cookie settings through your web browser. Please note, however, that disabling certain cookies may affect the functionality or user experience of the iscr2u platform.

The iscr2u platform is strictly limited to individuals aged 18 and above. iscr2u does not knowingly collect or process Personal Data from individuals under the age of 18.

Should iscr2u discover that Personal Data belonging to a minor has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. Registration by minors is a serious violation of iscr2u's Terms & Conditions and will not be tolerated under any circumstances.

Iscr2u reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements or changes to iscr2u's services. The latest version of this Privacy Policy will always be available on this page with a clear update date.

For material amendments — those that significantly change how iscr2u handles your Personal Data — iscr2u will provide members with reasonable notice via in-account notification or registered email at least seven (7) days before the amendment takes effect.

Continued use of the iscr2u platform after an amendment's effective date indicates that you have read and agreed to the updated Privacy Policy. If you do not agree with any amendment, you have the right to close your iscr2u account by contacting our support team.

If you have any questions or concerns, or wish to exercise your rights under this Privacy Policy or Malaysia's PDPA, please contact iscr2u through the following channels:

• Email: support@iscr2u.click — for data and privacy-related requests
• Live Chat: Available 24 hours a day, 7 days a week on the iscr2u platform — for general enquiries
• Frequently Asked Questions: iscr2u FAQ Page — for frequently asked questions

Iscr2u aims to respond to all privacy-related enquiries within two (2) business days. For requests that require a thorough review — such as data access or erasure requests — processing may take up to thirty (30) calendar days.