SC99 Privacy Policy – Data Protection for Malaysian Players

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how SC99, operating through the domain sc99.site and related mobile applications ("Platform"), collects, uses, stores, protects, and discloses your personal information ("Personal Data") when you use our platform.

SC99 is the data controller for all Personal Data collected through this platform. This Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and applicable international data protection standards.

This Policy applies to all users of the SC99 platform, including visitors, registered members, promotion participants, and anyone who interacts with the SC99 platform in any capacity. By registering a SC99 account or continuing to use the platform, you agree to be bound by this Privacy Policy and Terms & Conditions SC99.

2. Personal Data We Collect

SC99 collects only the data that is strictly necessary to deliver our platform services, meet regulatory requirements, and ensure the security of your account. Below are the categories of data we collect and their sources:

2.1 Data You Provide Directly

When you register an SC99 account, you will be required to provide the following information:

• Identity Information: Full name, national identification number (MyKad) or passport number, date of birth, and gender.
• Contact Information: An active Malaysian mobile number and a valid email address.
• Account Information: Your chosen username and encrypted password (SC99 does not store passwords in plain text).
• Verification Documents (KYC): Front and back copies of your MyKad or passport when requested for Know Your Customer (KYC) verification prior to processing your first withdrawal.

2.2 Financial Transaction Data

To process deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, SC99 records the following transaction information:

• The amount and timestamp of every deposit and withdrawal transaction.
• Transaction reference numbers generated by the system or payment gateway.
• Recipient account name for ownership verification purposes (full account numbers are not stored).
• Payment method used (e.g., DuitNow or Touch 'n Go eWallet).

SC99 do not save full bank account numbers, credit/debit card numbers, or your e-wallet login credentials on our servers once a transaction has been completed.

2.3 Game Activity Data

SC99 retains records of your game activity for dispute resolution, winnings verification, and regulatory compliance purposes:

• Game history — date, time, game type, stake amount, and outcome.
• Account balance at each transaction point.
• Bonus and promotion history claimed, along with rollover status.
• Records of participation in tournaments and VIP programmes.

2.4 Technical & Usage Data

Like most online platforms, SC99 automatically collects technical data when you use the platform:

3. How SC99 Uses Your Data

SC99 uses the Personal Data collected solely for the following purposes, each of which has a valid legal basis:

3.1 Service Provision

• Processing your account registration and verifying your identity.
• Processing deposits and withdrawals via Malaysian local payment methods.
• Crediting bonuses, cashback, and VIP rewards to your account.
• Providing access to over 2,400 games on the SC99 platform.
• Enabling participation in SC99 tournaments and promotional programmes.

3.2 Security & Fraud Prevention

• Identifying and blocking unauthorized access attempts to your account.
• Detecting and investigating fraudulent activity, collusion, or platform abuse.
• To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• Verifying that all SC99 members meet the minimum age requirement of 18 years.

3.3 Communications with You

• Sending transaction notifications (deposit confirmations, withdrawal processing updates).
• Notifying you of promotions, new bonuses, and offers relevant to your activity.
• Sending security alerts if suspicious activity is detected on your account.
• Providing 24/7 Bahasa Malaysia customer support via LiveChat and email.

3.4 Platform Improvements

• Analyzing aggregated usage patterns (without individual identification) to improve the platform's interface and user experience.
• Testing new features before rolling them out to all users.
• Helps identify and resolve technical issues on the platform more efficiently.

3.5 Legal & Regulatory Compliance

• Complying with reporting requirements to SC99's licensing regulatory bodies.
• Retaining records as required by law for the prescribed retention period.
• Responding to court orders or lawful requests from law enforcement authorities.

4. Sharing Data with Third Parties

SC99 does not sell, rent, or share your personal data with third parties for marketing or commercial purposes without your explicit consent. However, there are limited circumstances in which SC99 may need to share data with trusted third parties:

4.1 Service Providers

SC99 shares only the minimum necessary data with service providers who assist us in operating the platform, subject to strict confidentiality agreements:

• Payment Gateway: Authorised payment processors to facilitate transactions via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay. They receive only the minimum data necessary to process each transaction.
• Game Providers: Gaming companies such as slot and Live Casino providers receive anonymised account identifiers (anonymous IDs) for game settlement purposes — they do not receive your real name or any personal information.
• Cloud Infrastructure: Server and cloud storage service providers whose servers are governed by strict data processing agreements and comply with international security standards.
• Identity Verification Services: Third-party KYC service providers that assist in verifying your identity during registration or your first withdrawal.

4.2 Legal Requirements

SC99 may be required to disclose your personal data to the following parties if mandated by law:

• The regulatory body that licenses SC99, in the context of periodic compliance reviews.
• Malaysian law enforcement agencies making official requests pursuant to a valid court order.
• The Financial Intelligence Unit (BNM) in the context of transaction reporting required under the Anti-Money Laundering Act.

5. SC99 Data Security Measures

SC99 implements multiple layers of technical and organisational safeguards to protect your Personal Data from unauthorised access, alteration, disclosure, or destruction.

5.1 Technical Safeguards

• Encryption in Transit: All communications between your browser or app and SC99's servers are encrypted using TLS 1.3 with 256-bit SSL encryption — the same standard used by online banking in Malaysia.
• Storage Encryption: Sensitive personal data stored in SC99's databases is encrypted using industry-standard encryption algorithms. Your password is stored as a one-way hash that cannot be decrypted.
• Access Control: A role-based access control (RBAC) system ensures that only staff with a legitimate business need can access Personal Data — and every access is logged for audit purposes.
• Two-Factor Authentication: SC99 offers a two-factor authentication (2FA) feature that players can enable for an additional layer of security on their accounts.
• Regular Security Scanning: The SC99 platform undergoes regular penetration testing and vulnerability scanning conducted by independent third parties.

5.2 Organisational Safeguards

• All SC99 staff with access to Personal Data are required to sign confidentiality agreements and undergo data protection training.
• SC99 has a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy.
• Established security incident response procedures ensure that any data breach is addressed promptly and players are notified within 72 hours.

5.3 Your Responsibilities

The security of your SC99 account also depends on the steps you take yourself. SC99 encourages you to:

• Using a strong, unique password that is not shared with any other account.
• Enable two-factor authentication (2FA) in your account settings.
• Not sharing your login credentials with anyone, including family members.
• Log out of your SC99 account when using shared or public devices.
• Contact SC99 support immediately if you suspect your account has been compromised.

6. Handling of Financial Data

SC99 recognises that financial information is among the most sensitive data we handle. We apply additional safeguards to protect your financial details that go beyond standard personal data protection requirements.

All payment processing — whether via DuitNow, FPX (Maybank2u or CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay — is handled through third-party payment gateways that comply with PCI-DSS (Payment Card Industry Data Security Standard). This means your sensitive financial details are processed in a secure environment that is separate from SC99's main servers.

After a transaction is processed, SC99 retains only the following financial information: transaction amount, date and time, transaction reference number, payment method used (e.g., "DuitNow"), and the recipient account name for verification purposes. SC99 not store your full bank account number, card number, or e-wallet login credentials.

For withdrawals, SC99 requires verification that the destination bank account or e-wallet is registered under the same name as the SC99 account holder. This is a protective measure to ensure your funds are only sent to the legitimate account owner.

7. Cookies & Tracking Technologies

SC99 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies SC99 uses and their purposes:

7.1 Types of Cookies Used

7.2 Cookie Management

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may prevent you from using certain features of the SC99 platform correctly, including login and game sessions. SC99 recommends that you do not disable essential cookies if you wish to use the platform in full.

SC99 cookies are not used to track your activity on any other websites outside the SC99 platform.

8. Child & Young Player Protection

The SC99 platform is strictly for users who are 18 years and above only. SC99 does not knowingly collect or process Personal Data of individuals under the age of 18.

As part of the KYC process, SC99 verifies the age of all players making their first withdrawal. If SC99 determines that the data collected belongs to an underage individual, the account will be closed immediately, all related transactions will be reviewed, and that individual's data will be deleted from our system within the period stipulated by law.

Parents or guardians who discover that their minor child has registered an SC99 account without their knowledge are advised to contact SC99 support immediately via email support@sc99.site. SC99 will respond promptly and take appropriate action.

9. Your Rights Under Malaysia's PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and SC99's policies, you have the following rights regarding your Personal Data held by SC99:

10. Data Retention Period

SC99 retains your Personal Data for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory requirements. The following is a guide to SC99's data retention periods:

Once the retention period expires, your Personal Data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised data may be retained for longer periods for analytics and aggregate reporting purposes.

If you voluntarily close your SC99 account, SC99 will retain your data for the minimum retention periods specified above to fulfill legal obligations, after which the data will be deleted. You will not receive any marketing communications from SC99 following account closure and a request to cease communications.

11. Amendments to This Privacy Policy

SC99 reserves the right to update or amend this Privacy Policy from time to time in response to legislative changes, new regulatory requirements, changes to our data processing practices, or feedback from players and stakeholders.

When SC99 makes material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your Personal Data — we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to the registered email address of all active SC99 members at least 14 days before the changes take effect.
• Displaying a clear notice on the SC99 platform to inform players of the relevant changes.

For minor, non-material changes — such as spelling corrections, clarification of terms, or formatting updates — SC99 may update this document without a separate notice. You are encouraged to review this page periodically.

Your continued use of the SC99 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with any changes, please contact us to close your account before the effective date of those changes.

12. Contact SC99 Regarding Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, please contact us through the following channels:

You may also lodge a data protection complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe SC99 has violated your privacy rights under PDPA 2010. Contact details for JPDP are available on the official website of the Ministry of Communications Malaysia.