Privacy Policy iscr2u – Your Information Is Safe

Iscr2u (hereinafter referred to as "we", "the platform", or "iscr2u") is an online entertainment and wagering platform operating in Malaysia. We are committed to protecting the privacy of every user who accesses our platform, whether via our website at iscr2u.fun or through our mobile app.

This Privacy Policy has been prepared to comply with the Personal Data Protection Act 2010 (PDPA) Malaysia and aims to clearly and transparently explain:

• Types of personal data we collect from you
• The purpose and manner in which we use that data
• Parties with whom we may share your data
• Security measures we take to protect your data
• Your rights as a data subject under Malaysian law

By registering an account, accessing, or using any part of the iscr2u platform, you are deemed to have read and agreed to this Privacy Policy. If you do not agree with any provision herein, please discontinue use of the platform and contact us to close your account.

This Privacy Policy should be read together with the Terms and Conditions and Responsible Gaming Policy us for a full overview of iscr2u's commitment to its users.

Iscr2u only collects personal data that is strictly necessary for platform operations and legal compliance. The following are the categories of data we collect and their purposes:

We may also collect data you voluntarily provide when interacting with our customer support, filling out feedback forms, or participating in any promotional programs.

The personal data we collect is used solely for legitimate, necessary purposes to which you have given implicit or explicit consent. The purposes for which your data is used are as follows:

Account Operations & Services:

• Process new account registrations and verify your identity
• Enable you to log in, play games, and perform financial transactions
• Send important notifications related to your account, security, and transactions
• Provide responsive and effective customer support

Security & Compliance:

• Detect and prevent fraud, hacking, or unauthorised access to your account
• Comply with legal obligations under PDPA 2010, the Anti-Money Laundering Act (AMLA), and other applicable regulations
• Verify that you meet the minimum age requirement to play on our platform
• Assist fraud investigations or illegal activity inquiries when required by the authorities

Experience Enhancement:

• Analyse usage patterns to improve the platform's interface and features
• Personalise game displays and relevant promotions for you
• Conduct internal analytics to understand the needs and preferences of Malaysian users

Marketing Communications: With your consent, we may send you promotional information, exclusive offers, and platform updates via email or push notifications. You may unsubscribe at any time through your account settings.

Iscr2u does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform, we may need to share certain information with the following parties:

• Payment Providers: Information required to process deposits and withdrawals is shared with trusted, registered payment service providers. They are bound by strict confidentiality agreements.
• Game Providers: Our game provider partners may receive only the minimum data necessary to run games smoothly and ensure the integrity of game results.
• KYC Verification Providers: Your identity documents may be processed through a registered third-party identity verification system that complies with international security standards.
• Legal Authorities: iscr2u will disclose user data to relevant authorities such as the Royal Malaysia Police, Bank Negara Malaysia, or the courts if required by a court order or applicable law.
• Auditors & Professional Advisors: Appointed legal advisors, accountants, or auditors may access certain data solely for compliance and audit purposes.

All third parties that receive iscr2u user data are bound by data processing agreements that prohibit them from using such information for any purpose other than those stated above. We select partners with a proven track record in security and compliance.

Iscr2u uses cookies and similar tracking technologies to enhance your browsing experience and ensure account security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as Login session verification, account security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform — pages visited, time spent, errors encountered — to help us improve website performance.
• Functional Cookies: Save your preferences such as display theme, language, and personal settings so you don't have to re-enter them every time you log in.
• Analytics Cookies: Used to understand user behaviour in an aggregated and anonymised manner for platform improvement purposes. This data is not linked to your personal identity.

You can manage or disable certain cookies through your web browser settings. Please note that disabling essential cookies may cause some platform features to not function properly.

We invest seriously in security infrastructure to ensure your personal data is always protected. The security measures we implement include:

• 256-bit SSL Encryption for all data transmitted between your device and iscr2u's servers
• Data encryption at rest for all sensitive records stored in our database
• Intrusion detection system (IDS/IPS) that monitors network traffic 24/7 to detect suspicious activity
• Multi-level access control — internal staff may only access data relevant to their specific job responsibilities
• Two-factor authentication (2FA) available for all user accounts as an additional layer of security
• Regular security audits by an independent third party to identify and address any system vulnerabilities
• Incident response plan that has been tested to ensure rapid response in the event of any security breach

While we take all reasonable steps to protect your data, no system in the world can guarantee 100% absolute security. We encourage you to also take personal protective measures, such as using a strong password and not sharing your login credentials.

Under the Personal Data Protection Act 2010 Malaysia, you as a data subject have the following rights regarding your personal data held by iscr2u:

1. Right of Access: You have the right to request a copy of the personal data we hold about you. Requests can be submitted through our customer support.
2. Right to Rectification: If any of your personal data is inaccurate, incomplete, or outdated, you have the right to request that we correct it promptly.
3. Right to Withdraw Consent: You may withdraw consent for certain data processing activities (such as marketing) at any time without affecting the validity of processing that took place prior to withdrawal.
4. Right to Object: You have the right to object to the processing of your personal data for specific purposes such as direct marketing.
5. Right to Erasure: Under certain circumstances, you may request that your personal data be deleted from our systems, subject to our legal obligations to retain certain records.
6. Right to Complain: If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will respond to your request within 21 business days as required by PDPA.

Iscr2u does not retain your personal data longer than necessary. Our data retention periods are as follows:

• Active account data: Retained for the duration your account is active plus any additional period required by law after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with the Companies Act and Malaysia's anti-money laundering regulations.
• KYC Documents: Retained for a minimum of 6 years after account closure or for the period required by the relevant authorities.
• Security and technical logs: Retained for 12 months for security investigation and fraud detection purposes.
• Customer support communications: Retained for 3 years for reference and service quality improvement.

Once the retention period expires, your data will be securely deleted or permanently anonymised using established data deletion procedures, so that it can no longer be linked to your identity.

Iscr2u Platform is not intended for individuals under the age of 18. We do not intentionally collect personal data from children or minors.

If we discover that we have collected personal data from an individual under the age of 18 without proper verification, we will take immediate action to delete that data and close the relevant account.

If you are a parent or guardian concerned that your child may have registered for or used the iscr2u platform, please contact us immediately at [email protected] so that we may take the necessary action.

Iscr2u reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or current legal compliance.

Any material changes to this Privacy Policy will be communicated to you via:

• Clear notices displayed on the platform's home page
• Notification email to your registered email address
• In-app notifications for mobile app users

The "Last Updated" date shown at the top of this page will always reflect the latest version of this policy. Your continued use of the iscr2u platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the iscr2u privacy team is here to help.