sc99 Privacy Policy

1. About This Privacy Policy

1.1 sc99 is committed to protecting the privacy and personal data of all individuals who interact with the sc99 platform, including registered players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Kota Kinabalu.

1.2 This Policy applies to all personal data collected through: (a) the sc99 website at sc99.win; (b) the account registration and KYC verification process; (c) deposit, withdrawal, and payment transactions; (d) gameplay activity across sc99's casino, sportsbook, and other product offerings; and (e) any communications between you and sc99's support team.

1.3 sc99 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

2. Personal Data We Collect

2.1 Account Registration Data

When you create an sc99 account, we collect the following data:

• Full legal name (as per Malaysian MyKad or passport);
• Date of birth (for age verification — sc99 requires all players to be 21 or older);
• Residential address in Malaysia;
• Malaysian mobile phone number;
• Email address;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

In compliance with international gaming authority KYC obligations, sc99 may collect:

• Copies of government-issued identity documents (e.g., Malaysian MyKad, passport);
• Proof of residential address (e.g., utility bill, bank statement);
• Proof of ownership of payment methods used for deposits (e.g., eWallet account screenshots, bank statement pages showing account holder name).

2.3 Financial Transaction Data

sc99 records transaction data associated with deposits and withdrawals, including payment method identifiers (e.g., Touch n Go eWallet account reference, last four digits of bank account), transaction amounts in MYR, timestamps, and transaction status. sc99 does not store full bank account numbers or payment credentials.

2.4 Gameplay and Betting Data

sc99 records your activity on the platform, including game sessions, bet history, wagering amounts, bonus usage, and win/loss records. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory reporting.

2.5 Technical and Device Data

sc99 automatically collects certain technical data when you access the platform, including your IP address, browser type and version, device type, operating system, referring URL, session duration, and pages visited. This data is used for security monitoring, fraud prevention, and platform performance analytics.

2.6 Communications Data

When you contact sc99 support — whether via live chat, email, or any other channel — sc99 retains a record of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How sc99 Uses Your Personal Data

sc99 uses the personal data it collects for the following purposes:

• Account creation and management: To register, verify, and maintain your sc99 player account;
• Identity verification: To conduct KYC checks in compliance with international gaming authority requirements;
• Payment processing: To process deposits, withdrawals, and refunds in MYR via supported Malaysian payment methods;
• Service delivery: To provide access to sc99's casino games, sportsbook, live tables, and other platform features;
• Regulatory compliance: To fulfil anti-money laundering (AML) obligations, responsible gaming monitoring requirements, and other regulatory reporting duties;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other security threats;
• Responsible gaming: To monitor gameplay patterns and identify players who may be at risk of gambling-related harm, in line with sc99's responsible gaming commitments;
• Customer support: To respond to enquiries, resolve disputes, and improve the quality of sc99's support services;
• Platform improvement: To analyse aggregate usage data for the purpose of improving the sc99 platform's performance, features, and user experience;
• Promotional communications: To send you information about sc99 promotions and offers — only where you have opted in to receive such communications and subject to your right to opt out at any time.

4. Legal Basis for Processing

sc99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between sc99 and the player (e.g., account management, payment processing, game access);
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and gaming licence conditions;
• Legitimate interests: Processing necessary for sc99's legitimate business interests, including security monitoring, fraud prevention, and platform analytics — provided that these interests are not overridden by your data protection rights;
• Consent: Processing activities that require your specific, informed consent — including the sending of promotional communications — where sc99 will seek and record that consent separately.

5. Data Sharing and Disclosure

5.1 sc99 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

5.2 sc99 may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: Malaysian eWallet providers (Touch n Go, Boost, GrabPay) and banking partners (Maybank, CIMB, Hong Leong Bank) for transaction processing;
• Game studios and platform providers: Licensed game suppliers (e.g., Pragmatic Play, PG Soft) that operate within sc99's platform, to the extent necessary for gameplay and RNG certification compliance;
• Identity verification services: Third-party KYC service providers engaged by sc99 to conduct identity document verification in compliance with gaming authority requirements;
• Regulatory authorities: Gaming licence authorities, financial intelligence units, and law enforcement agencies, where disclosure is required by law or regulatory obligation;
• Professional advisors: Lawyers, auditors, and other professional service providers, strictly subject to professional confidentiality obligations.

5.3 All third-party data processors engaged by sc99 are bound by contractual data processing agreements that impose data protection standards no less stringent than those set out in this Policy.

6. International Data Transfers

6.1 In order to deliver the sc99 platform globally, certain personal data may be transferred to and processed in jurisdictions outside Malaysia. This may include transfers to jurisdictions where sc99's platform infrastructure, game studios, or third-party service providers are located.

6.2 Where such transfers occur, sc99 implements appropriate safeguards — including standard contractual clauses and data processing agreements — to ensure that the personal data transferred receives a level of protection equivalent to the standards described in this Policy.

7. Data Retention

7.1 sc99 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, including for the duration of your active sc99 account and for such period thereafter as may be required by applicable law or regulatory obligation.

7.2 In general, sc99 applies the following retention periods:

• Account and KYC data: retained for a minimum of 5 years following account closure, in compliance with international gaming authority and AML record-keeping requirements;
• Transaction and betting records: retained for a minimum of 5 years following each transaction, for regulatory reporting purposes;
• Customer support communications: retained for 3 years following the date of each communication;
• Technical and device data: retained in aggregate, anonymised form for platform analytics purposes.

7.3 Upon expiry of the applicable retention period, sc99 will securely delete or irreversibly anonymise the relevant personal data.

8. Cookies and Tracking Technologies

8.1 sc99 uses cookies and similar tracking technologies on the sc99 platform for the following purposes:

• Essential cookies: Required for the sc99 platform to function correctly, including session management, login state maintenance, and security token storage. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate and use the sc99 platform, for the purpose of improving user experience. These cookies do not identify individual users.
• Preference cookies: Used to remember your language and display preferences across sc99 sessions.

8.2 sc99 does not use third-party advertising or behavioural tracking cookies. No data collected through sc99 cookies is shared with advertising networks or data brokers.

8.3 You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to access and use the sc99 platform.

9. Security Measures

9.1 sc99 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest, including identity document copies and payment references;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for sc99 administrative systems;
• Regular security vulnerability assessments and penetration testing;
• Automated monitoring for suspicious access patterns and potential data breach indicators.

9.2 In the event of a personal data breach that poses a risk to affected individuals, sc99 will notify the relevant regulatory authorities and, where required, the affected players, in accordance with applicable data breach notification obligations.

10. Your Data Protection Rights

As a data subject, you hold the following rights with respect to your personal data held by sc99:

• Right of access: You may request a copy of the personal data sc99 holds about you;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sc99's legal and regulatory retention obligations;
• Right to restrict processing: You may request that sc99 limit the processing of your personal data in certain circumstances;
• Right to data portability: You may request that sc99 provide your personal data in a structured, machine-readable format;
• Right to object: You may object to processing of your personal data where it is based on sc99's legitimate interests;
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact sc99 at [email protected]. sc99 will respond to data subject requests within 30 days.

11. Children's Privacy

11.1 The sc99 platform is not directed at, and must not be used by, persons under the age of 21. sc99 does not knowingly collect or process personal data from individuals under 21 years of age.

11.2 If sc99 becomes aware that it has collected personal data from a person under 21 without appropriate age verification, sc99 will immediately suspend the relevant account, delete the associated personal data (subject to any regulatory retention obligations), and return any deposits made to the depositing payment method.

12. Changes to This Privacy Policy

12.1 sc99 reserves the right to update this Privacy Policy at any time to reflect changes in sc99's data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be published at sc99.win/privacy-policy, with the "Last Updated" date revised accordingly.

12.2 Where changes to this Policy are material, sc99 will provide advance notice via email to your registered address or through a prominent notice on the sc99 platform. Your continued use of sc99 following such notice constitutes your acceptance of the revised Policy.

13. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or sc99's data processing activities, please contact the sc99 Data Protection team at:

Email: [email protected]

sc99 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days.