Privacy Policy iscr88 — The Security of Your Personal Information

Iscr88 collects various types of personal information to enable us to provide a secure, efficient service that meets every member's needs. The information collected falls into two main categories:

Information You Provide Directly:

• Full name, date of birth, gender, and identification number (MyKad or passport).
• Email address, mobile number, and current residential address.
• Bank account details, card numbers, or digital wallet information used for deposits and withdrawals.
• Identity verification documents uploaded during the KYC (Know Your Customer) process.
• Any communications you have with the iscr88 customer support team.

Automatically Collected Information:

• IP address, device type, operating system, and web browser type used.
• Platform activity logs including games played, access dates and times, and session duration.
• Cookie data and tracking technologies that help us understand platform usage patterns.
• General location information based on IP address for regional verification and security purposes.

Iscr88 uses the personal information collected solely for lawful and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management: Registering, verifying, and managing your member account, including the mandatory KYC identity verification process.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions securely and efficiently.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, and any other security threats to the platform and its members.
• Customer Support: Providing technical support and resolving any queries or complaints submitted by members.
• Service Communications: Sending important notifications related to accounts, transactions, policy changes, and platform updates.
• Product Improvement: Analysing aggregated platform usage patterns to improve user experience and develop new features.
• Legal Compliance: Fulfilling regulatory obligations and reporting requirements to the relevant authorities in accordance with applicable law.
• Marketing (with consent): Sending promotional information, bonus offers, and platform news to members who have consented to receive marketing communications.

Iscr88 does not sell, rent, or disclose members' personal information to third parties for marketing purposes. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: Information required to process your financial transactions is shared with approved payment providers integrated into the iscr88 platform. These providers are bound by strict confidentiality agreements.
• Identity Verification Providers: Your KYC documents may be shared with trusted third-party identity verification services to facilitate a faster and more secure verification process.
• Game Providers: Minimum information required to grant you access to third-party games integrated into the iscr88 platform may be shared with the respective game providers.
• Regulatory Authorities: iscr88 may be required to disclose member information to regulatory authorities, law enforcement agencies, or courts when mandated by law.
• Fraud Prevention Services: Certain information may be shared with industry fraud prevention networks to protect all members from fraudulent activity.

Iscr88 continuously invests in the latest security technologies and procedures to ensure that members' personal data is always protected against unauthorised access, loss, or damage. The security measures we employ include:

• Data encryption in transit using TLS/SSL 256-bit protocols, ensuring all communications between your device and the iscr88 servers cannot be intercepted by third parties.
• Data encryption at rest for sensitive information such as passwords and financial details using military-grade encryption algorithms.
• Two-factor authentication (2FA) to protect your account from unauthorised access even if your password is compromised.
• 24/7 real-time security monitoring with automated threat detection and response systems.
• Regular security audits by qualified independent parties to identify and resolve any system vulnerabilities.
• Role-Based Access Control ensures each staff member can only access the data required for their role.
• A comprehensive incident response plan to address any data security breaches swiftly and effectively.

In the event of a serious data breach that may affect your rights and freedoms, iscr88 will notify you and the relevant authorities within the timeframe required by applicable law.

Iscr88 uses cookies and similar tracking technologies to enhance the platform user experience, analyse website performance, and deliver more relevant content to you. The types of cookies we use are:

• Essential Cookies: These cookies are required for core platform functions such as login session management and security. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how members use the platform by collecting anonymous statistical data on pages visited and user interactions.
• Functional Cookies: Saving your preferences such as language and region settings to provide a more personalised experience on every visit.
• Marketing Cookies: Used to display relevant ads and offers based on your interests. This type of cookie is only activated with your consent.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the iscr88 platform.

As an iscr88 member and data subject, you have the following rights regarding your personal information that we hold:

In the context of iscr88's global operations, your personal data may be transferred to and processed in countries other than Malaysia. All such international data transfers are carried out with adequate safeguards, including:

• Transfers to countries that have received recognition of adequate data protection standards.
• Use of approved Standard Contractual Clauses for transfers to other countries.
• Legally binding data processing agreements with all data recipients outside Malaysia.

Iscr88 ensures that the level of data protection afforded to your personal information is equal to or exceeds the standards guaranteed by Malaysia's Personal Data Protection Act 2010, regardless of where the data is processed.

The iscr88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that information from our records and close the associated account. Parents or guardians who find that a child under their care has an account with iscr88 are requested to contact us immediately.

Iscr88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by applicable legal and regulatory requirements. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active and for an additional period after account closure to meet legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering legal requirements.
• KYC Documents: Retained for the period specified by the relevant regulatory authority, generally no less than 5 years after account closure.
• Platform Activity Logs: Retained for 2 years for security and fraud detection purposes.
• Support Communications: Retained for 3 years for service reference and improvement.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be associated with your identity.

Iscr88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. When any significant amendment occurs, we will:

• Publishing updated Privacy Policies on the iscr88 website with a clear amendment date.
• Sending members notifications via email or in-platform alerts regarding significant changes.
• For highly significant amendments that affect how we use your data, we will seek your consent again before those amendments take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the iscr88 platform after the effective date of any amendment is considered acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how iscr88 handles your personal data, please contact us through the following channels:

• Live Chat 24/7: The fastest way to get an immediate response from the iscr88 support team, available at all times.
• Email: [email protected] — for enquiries that require a detailed written response.
• FAQ: Visit the Frequently Asked Questions us for quick answers to general questions about privacy and data security.

The iscr88 Data Protection Officer team is committed to responding to all privacy-related enquiries within 7 business days. For more serious complaints or data rights requests, please include "Privacy Request" in your message subject line to expedite the process.