Scp 999 Privacy Policy — Our Commitment to Protecting Malaysian Players' Personal Data

This Privacy Policy is issued by scp 999 and applies to all registered members, website visitors, and users of services provided through the scp 999 platform, accessible at scp999.online. It explains how we, as the data controller, manage your personal information.

Scp 999 understands that your trust is the most valuable asset we have. Without the trust of Malaysian players like you, scp 999 could not operate. That is why we invest our time, resources, and the best available technology to ensure every aspect of your personal data management meets the highest standards.

By registering or continuing to use scp 999's services, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use scp 999's services.

Scp 999 only collects personal information that is strictly necessary to provide our services. The following are the categories of data we collect:

Scp 999 uses the personal data collected for the following purposes, all of which are legitimate and necessary for the operation of our services:

• Account Management: Creating and maintaining your scp 999 account, including login verification and password recovery.
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks, as well as withdrawals to your Malaysian bank account or e-wallet.
• Legal Compliance: Complying with KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements mandated under Malaysian law.
• Platform Security: Identifying and preventing fraud, money laundering, and other unlawful activities at scp 999.
• Customer Support: Handling your enquiries, complaints, and support requests via live chat or email.
• Responsible Gaming: Monitoring betting behaviour to identify signs of problem gambling and offer appropriate support.
• Service Improvement: Analysing aggregated usage patterns to improve the scp 999 platform and user experience.
• Marketing Communications: Sending you information about scp 999 promotions, bonuses, and special offers (subject to your consent).

All personal data processing carried out by scp 999 has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). We rely on the following bases depending on the situation:

• Consent: For marketing communications and non-essential cookie use, we rely on your free and explicit consent. You may withdraw this consent at any time.
• Contract Performance: Data processing required to provide the scp 999 services you have requested, such as payment processing and account management.
• Legal Obligation: Processing required under Malaysian law, including KYC, AML, and reporting obligations to the relevant authorities.
• Legitimate Interests: For security and fraud prevention purposes that do not infringe on your fundamental rights.

Scp 999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, there are limited circumstances in which we need to share data with certain parties in order to operate our services:

• Payment Service Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks providers for processing your financial transactions. Data shared is limited to what is required for processing.
• Technology Providers: Companies that provide technical infrastructure, hosting, and security systems for scp 999. All such providers are bound by strict confidentiality agreements.
• Game Providers: Companies that provide gaming software for Live Casino, table games, e-sports, and lottery at scp 999. Only the minimum data necessary for game operations is shared.
• Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts where required by Malaysian law or a valid court order.

Scp 999 implements a range of technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our security infrastructure includes:

• Encryption of Data in Transit: All data transmitted between you and scp 999 is encrypted using TLS 1.3 with 256-bit SSL.
• Encryption of Stored Data: Sensitive data such as passwords is stored in hashed format using the latest algorithms. Financial account numbers are stored in masked format.
• Internal Access Controls: scp 999 staff may only access data necessary to perform their job functions. Access is strictly controlled through a multi-level permission system.
• 24/7 Monitoring: A round-the-clock security monitoring system that detects unusual activity and intrusion attempts.
• Regular Security Audits: Periodic penetration testing and security audits conducted by independent third parties.
• Data Backup: Regular data backups stored at separate locations to ensure service continuity.

Scp 999 retains your personal data only for as long as necessary for the purposes it was collected, or as required under Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your scp 999 account is active, plus any required period following account closure.
• Financial Records & Transactions: Retained for a minimum of seven (7) years in compliance with Malaysian financial and tax regulatory requirements.
• KYC Record: Retained for the period prescribed by Malaysia's AML regulations, typically a minimum of five (5) years after the business relationship ends.
• Technical Data (Logs): System logs are retained for 90 days for security and technical troubleshooting purposes.
• Support Communication: Customer support conversation records are retained for two (2) years for reference and quality improvement purposes.

Scp 999 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit scp 999.

Types of cookies used by scp 999:

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect certain features on scp 999.

Under Malaysia's PDPA 2010, you as a data subject have a range of rights regarding the personal information scp 999 holds about you. Here are your rights and how to exercise them:

Scp 999 pays special attention to the protection of your financial data given how sensitive this information is. Every financial transaction on our platform — whether deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, CIMB Clicks, or withdrawals — is handled with additional safeguards.

• Bank account numbers and card details are stored in masked format (only the last digits are shown).
• All transactions are processed through end-to-end encrypted channels.
• Email or SMS notifications for every successful deposit and withdrawal — helping you immediately identify any unauthorised activity.
• Additional verification (2FA) for withdrawals exceeding certain limits, to protect your winnings.

All monetary amounts at scp 999 are in Malaysian Ringgit (RM). We do not handle any transactions in foreign currencies.

Scp 999 is a platform exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data of individuals under 18 years of age. This policy is absolute and non-negotiable.

If scp 999 discovers that personal data of an underage individual has been inadvertently collected, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware of their underage child's use of the scp 999 platform are urged to contact us immediately.

Scp 999 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, applicable laws or regulations, or in response to feedback from our members.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Updated" date at the top of this page.
• Notifying scp 999 members via their registered email at least 14 days before changes take effect (for material amendments).
• Displaying a clear notice on the scp 999 platform for a period of at least 30 days.

Continued use of the scp 999 platform after amendments take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding the scp 999 Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

• Privacy Email: support@scp999.online (subject: Privacy Enquiry)
• Live Support: Live chat on the scp 999 platform — available 24/7 in Bahasa Melayu
• FAQ: Check FAQ page us for a quick response

This Privacy Policy was last updated on 1 January 2026. This version is the authoritative version and supersedes all previous versions.