Rujukan Laman

Privacy Policy: How We Handle Your Account Information

We collect your registration details, payment records and gameplay history to operate your account and process deposits through Touch 'n Go, GrabPay, Boost dan FPX.

Account registration dataPayment transaction recordsDevice and session logsRight to request accessRight to request deletion
scr3888 Privacy Policy: How We Handle Your Account Information
PRIVACY QUESTIONS

How to Contact Us About Your Data

If you want to see what data we hold, correct an error, or request deletion, reach out through any of the channels below. We aim to respond within three working days and complete most requests within two weeks.

Team online

Live Chat

Open the chat widget in your account dashboard and ask for the data-privacy team. Our agents can initiate access requests, schedule deletion, or correct registration details on the spot. Available every day from 10:00 to 02:00 Malaysia time so you can reach us after work or during your commute in Kuala Lumpur.

Privacy Email

Send your request to our dedicated privacy address listed in the account settings page. Include your registered email and a brief description of what you need—access, correction, or deletion. We reply within 72 hours with next steps and, if applicable, a secure link to download your data export.

Account Settings

Log in and navigate to the Privacy & Data section under your profile. From there you can download a copy of your account data, update contact details, or submit a deletion request that we process once all pending withdrawals clear and regulatory hold periods expire.

DATA SAFEGUARDS

How We Protect Your Information

Your account data travels over encrypted connections and sits in access-controlled databases. Payment card details never reach our servers—they go straight to the processor—and wallet transactions route through the official Touch 'n…

Encrypted Storage

Personal details, transaction histories, and session logs sit in databases encrypted at rest using industry-standard algorithms. Only authorised staff with a documented business need can decrypt and view records, and every access leaves an audit trail we review monthly to catch unauthorised lookups.

Secure Transmission

Every page you visit—from registration to withdrawal confirmation—loads over HTTPS so your browser and our server exchange data through an encrypted tunnel. Payment credentials pass directly to the processor without touching our infrastructure, reducing the attack surface and keeping card numbers out of our logs.

Device Monitoring

We track the devices and IP addresses you use to log in. When you sign in from a new phone or a different city we send an email alert and may ask for an extra verification step. This real-time monitoring catches account takeovers before an attacker can request a withdrawal.

Retention Limits

Active-account data stays as long as you keep playing. Once you close your account we hold transaction records for seven years to meet tax and audit requirements, then delete them. Gameplay logs turn into anonymised statistics after 90 days so we can analyse trends without keeping your personal identifier attached.

Third-Party Audits

Independent security firms review our infrastructure, access controls, and data-handling procedures every year. Their reports confirm we follow best practices for encryption, staff training, incident response, and vendor management. We fix any gap they identify and publish a summary of findings in our transparency report.

Your Rights

You can request a copy of everything we hold about you, ask us to correct outdated details, or delete your account entirely. Reach out through live chat, email, or the privacy section in your account settings. We aim to complete most requests within two weeks and notify you by email once the action finishes.

Frequently Asked Questions About Your Data

Below are the questions we hear most often about how we collect, store, and protect your account information. If you need more detail or want to exercise your data rights, contact us through live chat or the privacy email address in your account settings.

We collect your full name, email address, mobile number, date of birth, and residential address. This information verifies your identity, lets us contact you about withdrawals or promotions, and satisfies local regulatory requirements. We also capture the device type and IP address you used to sign up so we can detect duplicate accounts.

We share transaction details with payment processors who clear your Touch 'n Go, GrabPay, Boost dan FPX deposits and withdrawals. We also work with fraud-detection partners who analyse login patterns and flag suspicious activity. All partners sign data-protection agreements and use your information only for the specific service we contracted them to perform.

Transaction records stay in our archive for seven years to meet audit and tax obligations, then we delete them. Gameplay logs turn into anonymised aggregate statistics after 90 days so your personal identifier disappears but we can still analyse overall player behaviour. Registration details are purged immediately once the retention period ends.

Yes. Log in, go to the Privacy & Data section in your account settings, and click Request Data Export. We generate a file containing your registration details, transaction history, and gameplay logs, then email you a secure download link within 72 hours. The link expires after seven days.

Open live chat or send an email to the privacy address listed in your account settings. Tell us which field is wrong and provide the correct information. Most updates—like a new mobile number or corrected address—go live within one business day. Changes to your registered name require identity verification first.

Yes. If we detect unauthorised access to your account data we email you within 72 hours, describe what information was exposed, explain the steps we took to contain the incident, and advise you on protective measures such as changing your password or monitoring your payment accounts for unusual activity.

Log in, navigate to Privacy & Data in your account settings, and submit a deletion request. We process it once all pending withdrawals clear and any regulatory hold periods expire. Transaction records stay in our archive for seven years as required by law, but we sever the link to your personal identifier so they cannot be traced back to you.