Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how iscr2u ("we", "us", "our", "Platform") collects, uses, stores, discloses and protects personal information obtained from visitors and registered users of the iscr2u website at https://iscr2u.cam.

iscr2u is an English-language information and educational platform providing sports betting guides, live casino explanations, Malaysian Ringgit (MYR) payment documentation and responsible gambling resources to users in Malaysia and other jurisdictions. We do not operate a casino, accept real-money deposits or hold any gambling licence.

By accessing the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform immediately.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information that identifies or can be used to identify a living individual, directly or indirectly, including name, email address, IP address, device identifiers and browsing behaviour.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" refers to iscr2u as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" refers to any identified or identifiable individual whose Personal Data is processed by iscr2u — in practice, a user of the Platform.
• "Consent" means a freely given, specific, informed and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "Third Party" means any natural or legal person other than the Data Subject, iscr2u and those who process Personal Data under iscr2u's direct authority.
• "Cookies" refers to small text files stored on a user's device by a web browser for session management, analytics and preference tracking purposes.

3. Data We Collect

Depending on how you interact with the Platform, iscr2u may collect the following categories of Personal Data:

iscr2u does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data or biometric information unless explicitly required for a specific, disclosed purpose and with your express consent.

4. How We Collect Data

iscr2u collects Personal Data through the following mechanisms:

• Direct interactions: Information you provide when registering an account, completing identity verification, submitting a contact form or corresponding with the support team at [email protected].
• Automated technologies: Technical and Usage Data collected automatically via server logs, cookies, web beacons and similar tracking technologies each time you visit the Platform.
• Third-party analytics: Aggregated, anonymised audience data from analytics services used to understand Platform performance and improve content quality.
• Publicly available sources: In limited circumstances, iscr2u may supplement your information with data that is lawfully publicly available, such as business registry information where applicable to corporate account holders.

5. Data Processing

iscr2u processes your Personal Data for the following purposes:

• Account administration: To create, maintain and administer your registered account, including identity verification and account security.
• Service delivery: To provide access to sports betting guides, live casino explanations, MYR payment documentation and responsible gambling resources relevant to Malaysian users.
• Communications: To respond to enquiries, send account-related notifications and, where you have opted in, deliver informational newsletters or content updates.
• Platform improvement: To analyse user behaviour, diagnose technical issues, optimise page performance and develop new features based on aggregated usage patterns.
• Legal compliance: To fulfil obligations under applicable law, including data retention requirements, fraud prevention, anti-money laundering checks and law enforcement requests where legally compelled.
• Responsible gambling: To identify and, where necessary, act on indicators of problem gambling behaviour, including enforcing self-exclusion requests and age verification compliance.

6. Legal Basis for Processing

Where applicable international data protection frameworks apply, iscr2u relies on the following legal bases for processing Personal Data:

• Consent: Where you have provided clear, freely given consent — for example, opting into marketing communications or accepting non-essential cookies.
• Contractual necessity: Where processing is necessary to perform or prepare a contract with you, such as providing access to Platform features following account registration.
• Legitimate interests: Where processing is necessary for iscr2u's legitimate business interests — including Platform security, fraud prevention, analytics and content improvement — provided those interests are not overridden by your rights and freedoms.
• Legal obligation: Where processing is required to comply with applicable law, regulatory direction or a lawful order from a competent authority.

Where consent is the legal basis, you may withdraw it at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

7. Payment Data and Financial Information

iscr2u is an information platform and does not directly process financial transactions or store full payment card details. However, references to Malaysian payment methods — including Maybank2u, CIMB Clicks, Public Bank online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX — appear throughout the Platform for educational purposes.

Where a user connects to a third-party Operator platform through information provided on iscr2u, any payment data submitted to that Operator is governed exclusively by the Operator's own privacy policy. iscr2u has no visibility into, or control over, financial transactions completed on third-party platforms.

8. Cookies and Tracking Technologies

iscr2u uses cookies and similar technologies to operate the Platform effectively and understand how users engage with content. The following cookie categories may be in use:

• Strictly necessary cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Analytics cookies: Used to collect aggregated information about Platform usage — pages visited, time on site, bounce rates — to help improve content and navigation. These are anonymised where possible.
• Preference cookies: Store your choices such as language settings, display preferences and notification opt-outs so you do not need to re-enter them on each visit.
• Marketing cookies: Used only where you have explicitly consented, to deliver relevant informational content. iscr2u does not sell personal data to advertisers.

You may manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect Platform functionality. A full cookie declaration is available on request by emailing [email protected].

9. Third-Party Sharing and Disclosure

iscr2u does not sell, rent or trade your Personal Data. We may share data with third parties only in the following circumstances:

• Service providers: Trusted vendors who assist with hosting, analytics, email delivery and security under binding data processing agreements that prohibit them from using your data for their own purposes.
• Legal requirements: Where disclosure is required by law, court order, regulatory authority or to protect the rights, property or safety of iscr2u, our users or the public.
• Business transfers: In the event of a merger, acquisition or asset sale, Personal Data may transfer to the successor entity subject to equivalent privacy protections.
• With your consent: For any purpose explicitly agreed to by you at the time of collection.

Where Personal Data is transferred outside Malaysia or the jurisdiction where it was collected, iscr2u will ensure appropriate safeguards are in place consistent with applicable data protection law.

10. Data Retention

iscr2u retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory and reporting obligations.

• Account data is retained for the duration of your active account and for a period of up to seven (7) years following account closure, in line with standard anti-money laundering record-keeping expectations.
• Technical and Usage Data collected via server logs and analytics is typically retained for no longer than twenty-six (26) months in aggregated or anonymised form.
• Communications Data from support interactions is retained for up to three (3) years from the date of last contact.
• Consent records are retained for the duration of the relevant processing activity plus an additional period to demonstrate compliance.

When retention periods expire, Personal Data is securely deleted or irreversibly anonymised in accordance with iscr2u's internal data disposal procedures.

11. User Rights

Subject to applicable law, you have the following rights in relation to your Personal Data held by iscr2u:

• Right of access: You may request a copy of the Personal Data iscr2u holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the original purpose, where you withdraw consent or where you object to processing and no overriding legitimate interests apply.
• Right to restriction: You may request that we limit processing of your data in certain circumstances, for example while an accuracy dispute is resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling. iscr2u will cease processing unless compelling legitimate grounds exist.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

Malaysian users may also make data access and correction requests pursuant to the Personal Data Protection Act 2010. iscr2u will handle such requests in good faith and within the timeframes prescribed by applicable law.

12. Data Security

iscr2u implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• Encryption of data in transit using industry-standard TLS (Transport Layer Security) protocols;
• Access controls limiting Personal Data access to authorised personnel with a documented need;
• Regular security assessments and patching of Platform infrastructure;
• Secure password storage using one-way hashing with appropriate salting;
• Incident response procedures for identifying, containing and reporting data security incidents within required timeframes.

No data transmission over the internet or electronic storage method can be guaranteed to be completely secure. While iscr2u takes all reasonable precautions, we cannot guarantee the absolute security of information transmitted to or from the Platform. Users are encouraged to use strong, unique passwords and to report any suspected unauthorised account activity promptly to [email protected].

13. Children and Minors

The iscr2u Platform is intended exclusively for users aged 21 years and above. We do not knowingly collect Personal Data from individuals below this age threshold.

If iscr2u becomes aware that Personal Data has been collected from a person under 21 without verifiable parental consent, we will take immediate steps to delete that information from our systems. If you believe a minor has provided Personal Data to iscr2u without appropriate consent, please notify us at [email protected] without delay.

14. Policy Amendments

iscr2u reserves the right to update this Privacy Policy at any time. All revisions take effect upon publication on this page. The "Last updated" date at the top of this document reflects the most recent change.

Where material changes are made — for example, introducing a new category of data processing or a new third-party sharing arrangement — iscr2u will provide advance notice through a site-wide banner or by email to registered account holders where reasonably practicable.

Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of those changes. If you do not agree with a revised Policy, you must stop using the Platform and may request account closure by contacting [email protected].

15. Contact Us

For any questions, requests or complaints relating to this Privacy Policy or the handling of your Personal Data, please contact the iscr2u data team using the details below. All correspondence is handled in English during standard business hours.

If you are unsatisfied with iscr2u's response to a data protection concern, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Malaysian users may contact the Department of Personal Data Protection (JPDP) for guidance on exercising rights under the Personal Data Protection Act 2010.