SC88 is committed to protecting the personal data of every player on our platform. This Privacy Policy describes exactly what data we collect, how we use it, who we may share it with, how long we retain it, and the rights you hold as a data subject under applicable law.
This Privacy Policy (hereinafter "Policy") is issued by SC88 (hereinafter "SC88",we", "us", or "the Platform") in respect of the SC88 online gaming and sports betting platform accessible at sc88.casa. This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to individuals who access or use SC88's services (hereinafter "Players", "Users", or "you").
SC88 takes the privacy of its players seriously. As a platform primarily serving users in Malaysia, SC88 processes personal data in a manner consistent with applicable data protection standards. We collect only the data that is necessary to operate the Platform safely and efficiently, fulfil our legal and regulatory obligations, and deliver a personalised, high-quality experience to our players.
By registering an account on SC88 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and accepted the practices described herein. If you do not agree to the terms of this Policy, you should discontinue use of the Platform and close your account.
For the purposes of this Privacy Policy, the following terms carry the meanings ascribed below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and behavioural data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transmission, erasure, or destruction. |
| "Data Subject" | Any individual whose personal data is processed by SC88 — in practice, any registered Player or website visitor. |
| "Controller" | SC88 — the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Third Party" | Any natural or legal person other than the Data Subject and SC88, including payment processors, identity verification providers, and regulatory authorities. |
| "KYC Data" | Identity and address verification documents submitted by a Player in fulfilment of SC88's Know Your Customer obligations, including copies of national identity cards, passports, utility bills, and selfie photographs. |
| "Cookies" | Small text files stored on your device by your browser at the instruction of the SC88 Platform, used to retain session state, preferences, and analytical data. |
SC88 collects personal data in several categories, depending on your interaction with the Platform. The table below outlines the categories of personal data we collect and provides examples of the specific data points within each category.
| Category | Data Collected | Purpose |
|---|---|---|
| Identity | Full legal name, date of birth, gender, nationality, MyKad / Passport number | Account registration, KYC verification, age eligibility confirmation |
| Contact | Email address, mobile phone number, residential address (city / postcode — e.g., Kuala Lumpur, Petaling Jaya, Penang) | Account communication, support notification delivery, proof of address |
| Financial | Payment method identifiers (eWallet account references, bank account details as presented via FPX/DuitNow), transaction history in MYR, deposit and withdrawal records | Payment processing, anti-money laundering compliance, financial record-keeping |
| KYC Documents | Scanned or photographed copies of MyKad, Driver's Licence, Passport, utility bills, bank statements, selfie-with-ID images | Mandatory identity and address verification before withdrawal approval |
| Behavioural | Game history, betting patterns, session duration, wager amounts, game preferences, sports markets accessed | Personalisation, responsible gambling monitoring, fraud detection, platform improvement |
| Technical | IP address, device type and OS, browser type and version, screen resolution, referring URL, time zone | Security monitoring, geolocation compliance, fraud prevention, platform diagnostics |
| Communication | Support chat transcripts, email correspondence, WhatsApp/WeChat message records with SC88 agents | Dispute resolution, quality assurance, regulatory audit trail |
| Preference | Language preference (English / Bahasa Melayu / Mandarin), notification settings, responsible gambling limit configurations | Platform personalisation, responsible gambling tools administration |
SC88 collects personal data through the following means:
SC88 processes personal data only where a valid legal basis exists for doing so. The primary legal bases upon which SC88 relies are as follows:
SC88 uses the personal data we collect for the following purposes:
SC88 does not share your personal data with third parties except in the following specific circumstances, each of which is subject to appropriate contractual and/or legal safeguards:
| Recipient Category | Data Shared | Basis for Sharing |
|---|---|---|
| Payment Service Providers | Name, account reference, transaction amount in MYR | Contractual necessity — to process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and bank partners including Maybank, CIMB, Public Bank, RHB, and Hong Leong |
| Identity Verification (KYC) Providers | Identity documents, selfie images, date of birth | Legal obligation — anti-money laundering and identity verification compliance |
| Game Software Providers | Player ID (anonymised reference), game session data | Contractual necessity — to enable game delivery and resolve-related disputes |
| Fraud Prevention Services | IP address, device fingerprint, transaction patterns | Legitimate interests — to detect and prevent fraudulent activity on the Platform |
| Regulatory & Law Enforcement Authorities | Any personal data lawfully requested | Legal obligation — compliance with lawful requests from regulatory and law enforcement bodies |
| IT and Cloud Infrastructure Providers | Encrypted personal data stored on secure cloud infrastructure | Legitimate interests — operational necessity for Platform hosting and data storage under strict data processing agreements |
All third parties with whom SC88 shares personal data are required to process that data only for the specific purpose for which it was shared and in accordance with SC88's instructions and applicable data protection standards.
SC88 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance user experience, and to gather analytical data that helps us improve the Platform over time. The types of cookies we use are as follows:
You may control cookie preferences through your browser settings. However, please note that disabling strictly necessary cookies may prevent you from accessing certain features of the SC88 Platform, including login functionality.
SC88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The indicative retention periods applicable to each data category are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years following account closure | Legal and regulatory obligation (AML compliance) |
| KYC Documents | Duration of account plus 5 years following closure | Anti-money laundering and identity verification regulatory requirements |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Gameplay and Betting History | Duration of account plus 3 years | Dispute resolution, responsible gambling monitoring |
| Support Communications | 3 years from the date of each interaction | Dispute resolution and quality assurance |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years | Compliance with consent management obligations |
| Technical / Log Data | 90 days, extendable for active security investigations | Fraud prevention and Platform security |
Upon expiry of the applicable retention period, SC88 will securely delete or anonymise your personal data in accordance with its data destruction procedures.
SC88 implements a range of technical and organisational measures designed to protect the personal data of its players against unauthorised access, disclosure, alteration, or destruction. These measures include:
Notwithstanding the above measures, no data transmission over the internet or electronic storage system is entirely immune from risk. SC88 cannot guarantee absolute security but commits to responding to any confirmed data breach promptly, in accordance with applicable notification requirements.
As a Player on SC88, you hold a number of rights in relation to the personal data we process about you. These rights are set out below. To exercise any of these rights, please contact SC88's Data Privacy team as described in Section 15 of this Policy.
Request a copy of the personal data SC88 holds about you and information on how it is being processed.
Request correction of any inaccurate or incomplete personal data held your SC88 account.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Request that SC88 restricts processing of your data in certain circumstances, such as while a dispute about accuracy is resolved.
Request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
Object to processing based on legitimate interests, including profiling for direct marketing. You may opt out of marketing communications at any time.
SC88 will respond to all legitimate rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case SC88 will notify you of the extension and the reason for it.
SC88 is strictly an adults-only platform and is not directed at, nor intended for use by, any person under the age of 21. SC88 does not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory component of the KYC process, and any account found to belong to an underage individual will be immediately suspended, all personal data associated with that account will be deleted, and any deposited funds will be returned to the source payment method.
Parents and guardians are urged to take reasonable steps to ensure that minors in their care do not access online gambling platforms. SC88 supports responsible gambling tools and strongly encourages eligible players — those aged 21 and above — to set account controls that reflect their personal gaming limits.
The SC88 Platform may contain references to or integrations with third-party services — such as payment gateways (Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and bank portals for Maybank, CIMB, Public Bank, and others). When you access a third-party service from within SC88, you leave the SC88 environment and your interaction is governed by that third party's own privacy policy and terms of service.
SC88 has no control over the data practices of third-party services and accepts no responsibility or liability for the privacy practices of any third-party service provider. We encourage you to review the relevant privacy policies of any third-party services you use in connection with your SC88 account.
SC88 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or Platform operations. The most current version of this Policy will always be published on this page with the effective date clearly stated at the top.
Where changes are material — for example, a change in the categories of data collected or a new purpose for processing — SC88 will notify registered Players via email or a prominent Platform notice at least seven (7) days before the revised Policy takes effect.
Your continued use of the SC88 Platform following notification of changes to this Policy constitutes your acceptance of those changes. If you do not accept a revised Policy, please close your account and discontinue use of the Platform.
If you have any questions, concerns, or requests relating to this Privacy Policy or SC88's handling of your personal data, please contact us through the channels below. All privacy-related requests will be handled with appropriate confidentiality and addressed within the timescales stated in Section 11.
| Channel | Details | Response Time |
|---|---|---|
| Email (Privacy) | [email protected] (plain text — not clickable) — please include "Privacy Request" in the subject line | Within 2–4 hours (acknowledgement); 30 days (full response) |
| Live Chat | Available from your account dashboard, 24 hours a day, 7 days a week | 3–5 minutes average |
| Languages | Privacy requests handled in English, Bahasa Melayu, or Mandarin | All channels, 24/7 |
SC88 serves players across Malaysia — from Kuala Lumpur, Petaling Jaya, and Shah Alam to Penang, Johor Bahru, and beyond — and is committed to treating every privacy inquiry with the seriousness and respect it deserves.
A plain-English summary of SC88's data protection commitments to every Malaysian player on our platform.
All data transmitted between your device and SC88 is protected by256-bit SSL/TLS encryption. Every KYC document you upload is encrypted at rest using AES-256. Your data cannot be read in transit or at rest without authorisation.
SC88 categorically does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data sharing is limited strictly to operational partners — payment processors, KYC providers, and regulatory authorities — under binding data processing agreements.
You can request access to, correction of, or deletion of your personal data at any time. SC88 responds to all rights requests within 30 days. Identity verification is required to protect against impersonation — a security step that works in your favour.
SC88 retains your data only for as long as legally required and operationally necessary. Financial records are kept for 7 years per standard accounting obligations; log data is purged after 90 days unless required for an active security investigation.
SC88 uses cookies solely for session management, security, and internal analytics. We do not deploy third-party advertising or retargeting cookies. Your SC88 activity is not shared with advertising networks or tracked across other websites.
Gameplay and behavioural data is used to power responsible gambling monitoring tools — not to target vulnerable players with more aggressive marketing. Responsible gambling configuration data is treated with the highest level of care and confidentiality.
Our dedicated support team handles all privacy requests in English, Bahasa Melayu, and Mandarin — 24 hours a day, 7 days a week. We take every data-related query seriously and will respond within the timeframes stated in this Policy.
Privacy email (plain text, not clickable): [email protected]
🔞 SC88 is for players aged 21 and above only. Play responsibly.