SC015 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy ("Policy") is published by SC015, operating under the domain sc015.my, and applies to all individuals who use our platform — whether as visitors, registered members, or active players. The purpose of this Policy is to give you a clear and transparent understanding of how SC015 manages your personal data, from your first visit to our website through every transaction and interaction that takes place while you play at SC015.

SC015 understands that your trust in us is built not only on the quality of our games or the speed of our payouts — it also depends on your confidence that the personal data you entrust to SC015 is handled with complete integrity, diligence and accountability. We take that trust seriously, and this Privacy Policy is our written commitment to upholding it.

By registering an account or using any part of the SC015 platform, you confirm that you have read and understood this Privacy Policy and agree to how we manage your data as described herein. If you do not agree, please do not use the SC015 platform.

SC015 only collects data that is strictly necessary to provide you with a secure, fair, and fully functioning platform. The following are the categories of data SC015 may collect:

SC015 does not collect sensitive data such as health information, political views, or religious beliefs unless specifically required by applicable Malaysian law.

SC015 collects your personal data through several different channels throughout your use of our platform:

• Account Registration: When you register a new SC015 account, you provide us directly with basic information such as your name, Malaysian phone number and email address.
• Identity Verification (KYC): When SC015 requires identity verification — for example, before processing your first large withdrawal or for compliance purposes — you may be asked to upload a copy of your identification document.
• Financial Transactions: Every time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, or when you submit a withdrawal request, your transaction details are automatically recorded in the SC015 system.
• Gaming Activity: The SC015 platform automatically records your game history, bets and in-game interactions for the purposes of fairness, auditing and customer support.
• Platform Usage: Technical data such as your IP address, device type and browsing activity are collected automatically via cookies and similar technologies when you visit SC015.my.
• Communications with SC015: When you contact SC015 customer support via live chat, email or WhatsApp, the content of those communications is retained for reference and service improvement purposes.

Personal data collected by SC015 is used solely for legitimate purposes as stated here. SC015 will not process your data for any other purpose without first obtaining your renewed consent:

• Account Management: Creating, verifying and maintaining your SC015 account so that it functions correctly, remains secure and is accessible to you at all times.
• Transaction Processing: Processing deposits made via e-wallet or FPX and settling your winnings withdrawals to your registered account within the stipulated timeframe.
• Gaming Services Provision: Allows you to access and play all games available on SC015, including slots such as Eye of the Storm, Cleopatra and Dinosaur Tycoon, as well as table games such as Baccarat Squeeze, Two Hand Holdem and Bull Bull.
• Security & Fraud Prevention: Detecting, investigating and preventing fraudulent activity, money laundering, unauthorised access, and any other security breaches that could compromise the integrity of the SC015 platform or the safety of other players.
• Legal Compliance: Fulfilling our legal obligations under Malaysia's PDPA 2010, financial regulations and the reporting requirements of relevant regulatory bodies.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and taking proactive steps to help players maintain control over their gaming activity on SC015.
• Customer Support: Resolving queries, complaints, and assistance requests from SC015 players efficiently and promptly.
• Marketing Communications: Sending information about promotions, bonuses and SC015 platform updates to players who have consented to receive such communications. You may withdraw this consent at any time.

SC015 does not sell or transfer players' personal data to third parties for their own commercial purposes. However, there are limited circumstances in which SC015 may need to share your data with certain parties — and this is always done responsibly, with appropriate safeguards in place:

• Payment Service Providers: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the required transaction information is shared with the respective payment service provider solely for the purpose of processing your transaction. These providers are governed by their own privacy policies and security protocols.
• Game Software Providers: Third-party game providers that supply slots and table games to the SC015 platform may receive gameplay data necessary for the operation of those games. This data does not include any personally identifiable information that could directly identify you.
• Regulatory Bodies & Law Enforcement Agencies: SC015 will disclose personal data when required by Malaysian law, a valid court order, or an official request from a law enforcement agency such as the police or a relevant financial authority.
• Fraud Prevention Services: SC015 may engage specialised third-party fraud detection services. Data shared for this purpose is kept to the minimum necessary and is subject to strict confidentiality agreements.

In all data-sharing arrangements, SC015 ensures that the receiving party is bound by equivalent data protection obligations and will not use your data for any purpose beyond what has been specified.

SC015 continually invests in security technologies and procedures to protect players' personal data from unauthorised access, misuse, disclosure, alteration or destruction. The key security measures we have in place include:

• 256-bit SSL Encryption: All communication between your browser and SC015's servers is encrypted using the latest TLS/SSL protocols, ensuring that your data cannot be intercepted by third parties.
• Data-at-Rest Encryption: Sensitive data stored in SC015's databases, including financial information and passwords, is encrypted using robust encryption algorithms.
• Internal Access Controls: Access to players' personal data within SC015 is restricted on a need-to-know basis — only staff who require access to carry out their responsibilities are granted permission, and all access is logged and monitored.
• Two-Factor Authentication (2FA): SC015 offers 2FA for player accounts as an additional layer of protection against unauthorised access.
• 24/7 Security Monitoring: The SC015 system is continuously monitored to detect any unusual activity or potential security threats.
• Regular Security Testing: SC015 conducts regular penetration testing and vulnerability assessments to identify and address potential security weaknesses before they can be exploited.

While SC015 takes all reasonable steps to protect your data, no system can guarantee absolute security. In the event of any security breach involving your personal data, SC015 is committed to notifying you and the relevant authorities in accordance with legal requirements within the prescribed timeframe.

SC015 does not retain your personal data for longer than is necessary to fulfil the purpose for which it was collected, or to meet applicable legal obligations. SC015's data retention guidelines are as follows:

• Active Account Data: For as long as your SC015 account remains active, your personal data will be retained to enable the continued provision of services to you.
• Financial Records Data: Deposit and withdrawal transaction records and financial history are retained for a minimum of seven (7) years in compliance with Malaysian accounting and tax legislation.
• Identity Verification (KYC) Data: Identity verification documents are retained for the period required under applicable anti-money laundering (AML) regulations, typically no less than five (5) years from the date of account closure.
• Communication Records Data: Support chat records and correspondence are retained for two (2) years for reference purposes and to support SC015 service improvements.
• Cookie Data: Session cookies expire automatically when you close your browser, while persistent cookies have a set expiry period depending on the cookie type.

When your personal data is no longer required, SC015 will securely delete it using methods that ensure the data cannot be recovered or reused.

SC015 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the SC015 website. We use several types of cookies:

• Essential Cookies (Required): These cookies are essential for the core functions of the SC015 platform, including login authentication, session security and language preferences. Without them, the SC015 platform will not function properly and you will be unable to log in or play.
• Performance Cookies: These cookies collect information about how you use the SC015 platform — the pages you visit, the time you spend on them and any errors that occur. This information helps SC015 improve platform performance and usability.
• Functional Cookies: These cookies store your preferences — such as your last-used bet size, display settings and game preferences — allowing SC015 to deliver a more personalised experience in every session.
• Security Cookies: These cookies help SC015 detect suspicious activity, prevent unauthorised access, and protect your account from security threats.

You can manage or disable cookies through your browser settings. Please be aware, however, that disabling essential cookies may affect the functionality of the SC015 platform and your overall gaming experience.

SC015 strictly prohibits use of the platform by individuals under the age of 21. We do not target, collect, or process the personal data of children or minors below the stipulated age limit.

Should SC015 discover that personal data belonging to an individual under the age of 21 was inadvertently collected due to age misrepresentation during registration, we will:

• Immediate closure of the account in question.
• Securely deleting all associated personal data.
• Refunding any deposits made, subject to the necessary verification checks.
• Taking appropriate steps to prevent similar incidents from occurring in the future.

Parents or guardians who have concerns about a minor in their care potentially accessing the SC015 platform are advised to contact us immediately at [email protected].

SC015 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, applicable legal requirements, or improvements in how we handle player privacy.

When material changes are made to this Privacy Policy, SC015 will:

• Updating the "Last Updated" date displayed at the top of this page.
• Sending notifications to your registered email address regarding important changes.
• Displaying a clear notice on the SC015 platform for a minimum of 30 days after the amendment comes into effect.

Continued use of the SC015 platform following any changes to this Privacy Policy will be considered acceptance of the updated terms. If you do not agree with the changes, you have the right to stop using the platform and request the closure of your SC015 account.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have certain rights regarding the personal data SC015 holds about you. SC015 is committed to respecting and facilitating the exercise of these rights:

• Right to Access Data: You have the right to request a copy of all personal data that SC015 holds about you. SC015 will provide the requested information within 21 days of receiving your request.
• Right to Correct Data: If you believe that the personal data SC015 holds about you is inaccurate, outdated or incomplete, you have the right to request a correction. You may also update basic profile information directly through your SC015 account settings.
• Right to Delete Data: Under certain circumstances, you have the right to request that SC015 erase your personal data — for instance, when the data is no longer needed for its original purpose. However, this right is subject to legal retention obligations that may prevent immediate deletion.
• Right to Object to Processing: You have the right to object to the processing of your personal data for certain purposes, including direct marketing. If you object to processing for marketing purposes, SC015 will immediately cease using your data for that purpose.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal.

To submit any request relating to your data rights, please contact SC015 by email at [email protected], stating your full name, SC015 account number and the nature of your request. SC015 will verify your identity before processing any request to ensure the security of your data.

If you have any questions, concerns, or complaints regarding this SC015 Privacy Policy or the way we handle your personal data, the SC015 data protection team is here to help:

• Data Protection Email: [email protected] — Please include "Privacy Enquiry" in your email subject line to help us route and process your request promptly.
• SC015 Live Chat: Available 24 hours a day, 7 days a week, directly within the SC015 platform — for general privacy-related enquiries.
• WhatsApp: For privacy issues requiring immediate attention, please call the number listed in your SC015 account settings.

SC015 is committed to responding to all privacy-related enquiries within 3 business days and resolving all valid complaints within 30 days of receipt. If you are not satisfied with SC015's response to your privacy complaint, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia through the channels prescribed by law.