srcplay Privacy Policy

1Introduction and Scope

This Privacy Policy applies to personal information processed in connection with srcplay, including website access, registered account activity, support enquiries, identity verification, payment reviews and responsible gambling functions. It applies whether a user visits srcplay from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or another location.

In this policy, “personal information” means information that identifies a person or can reasonably be associated with that person. Some aggregated or anonymised information may fall outside this definition where individuals can no longer reasonably be identified.

srcplay seeks to handle personal information in accordance with applicable data protection obligations. Users remain responsible for reviewing this policy and deciding whether they are comfortable providing information requested for a particular srcplay service.

2Information We May Collect

Depending on how a person uses srcplay, the following categories may be collected:

• Identity details: name, date of birth, nationality, identification document details and age-verification information.
• Contact details: email address, residential address and other information voluntarily provided during account or support interactions.
• Account information: username, account status, login history, settings, communication preferences and security events.
• Payment information: transaction references, MYR amounts, masked account details, payment type, beneficiary information and deposit or withdrawal status.
• Usage information: pages viewed, session duration, navigation activity, language settings and interaction with casino or sports information.
• Technical information: IP address, browser type, device type, operating system, approximate location, identifiers and diagnostic logs.
• Support records: messages, issue descriptions, complaint history and documents submitted to resolve a srcplay enquiry.

3How Information Is Collected

srcplay may collect information directly when a user provides account details, contacts support, requests a transaction review, submits KYC material or adjusts privacy and responsible gambling settings. Information may also be generated automatically when the srcplay website is loaded or used.

Certain records may be received from payment, identity-verification, fraud-prevention or technical service providers. For example, a payment review may return a transaction status associated with FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB or Public Bank. srcplay does not require a provider to share more information than is reasonably relevant to the service or review.

4Purposes of Data Processing

srcplay may process personal information for the following purposes:

• To provide, maintain and improve srcplay website and account functions.
• To verify identity, age, address and payment ownership where appropriate.
• To process or review deposits, withdrawals, refunds and disputed transactions.
• To secure accounts, prevent fraud and investigate suspicious or prohibited activity.
• To respond to support enquiries and resolve technical or payment concerns.
• To apply deposit limits, time-outs, self-exclusion and other responsible gambling controls.
• To understand website performance and improve mobile usability for Malaysian users.
• To maintain records required for legal, accounting, security and compliance purposes.
• To communicate important changes concerning srcplay services, security or this policy.

Where consent is relied upon, a user may normally withdraw that consent for future processing. Withdrawal does not make earlier lawful processing invalid and may not affect processing required for another legitimate or legal purpose.

5Account Eligibility and KYC Records

srcplay casino-style information and related services are intended for adults aged 21 and above. Age and identity checks may require a valid identification document, proof of address or a photograph used for matching purposes. Additional information may be requested when necessary to review payment ownership, source of funds or unusual account activity.

KYC documents contain sensitive information and should be submitted only through an authorised srcplay process. Users should obscure unrelated information where instructions permit and should not provide another person's documents. Verification records may be retained after an account is closed where reasonably necessary to meet legal duties, investigate fraud or prevent an excluded user from opening another account.

6Payments and Financial Information

When MYR payment functions are available, srcplay may process transaction amounts, timestamps, reference numbers, masked bank or wallet details and verification results. Payment card numbers, online banking passwords and e-wallet security credentials should not be sent to srcplay support.

A transaction may involve a bank, e-wallet operator, payment gateway or fraud-screening provider. Those organisations may process information under their own privacy responsibilities. A reference to a Malaysian payment method does not mean that the method is available for every user or that its provider endorses srcplay.

7Cookies and Similar Technologies

srcplay may use cookies, local storage and similar technologies to maintain sessions, remember preferences, protect account access, measure website performance and identify technical faults. Some technologies are necessary for security and core operation, while others may support analytics or interface improvement.

Browser settings may allow users to delete or block certain cookies. Restricting necessary technologies may prevent parts of srcplay from functioning correctly, including login, navigation or security features. srcplay does not use a cookie setting to guarantee a gaming outcome or alter the probability of a casino result.

8Disclosure of Personal Information

srcplay does not disclose personal information without a relevant purpose. Information may be shared with carefully selected service providers that support hosting, cybersecurity, identity checks, payment processing, fraud detection, technical maintenance, customer service or data storage.

Disclosure may also occur where reasonably necessary to comply with a valid legal obligation, protect the safety or rights of users, investigate fraud, enforce the Terms & Conditions, or establish and defend legal claims. srcplay may disclose aggregated statistics that do not reasonably identify an individual.

If srcplay undergoes a legitimate business restructuring, relevant data may be transferred subject to appropriate confidentiality and security measures. Any successor should continue to handle personal information consistently with applicable obligations.

9International Data Handling

Some technical or specialist providers may operate outside Malaysia. As a result, srcplay information could be stored or accessed in another jurisdiction with different data protection rules. Where such handling occurs, srcplay seeks to use appropriate contractual, technical or organisational safeguards relevant to the circumstances.

An international transfer does not permit a provider to use personal information for unrelated purposes. Access should remain limited to authorised personnel who require the information to deliver the relevant srcplay function.

10Information Security

srcplay applies reasonable measures intended to protect information against loss, misuse, alteration, unauthorised access and disclosure. Measures may include access controls, encryption in transit, monitoring, credential protections, system updates, backups and internal confidentiality requirements.

No internet service can promise absolute security. Users also play an important role by choosing a unique password, keeping one-time codes private, avoiding unknown devices and signing out after using a shared computer. Suspected unauthorised srcplay activity should be reported promptly.

11Data Retention

srcplay retains personal information for as long as reasonably needed for the purpose for which it was collected and for any applicable legal, security, accounting, dispute or responsible gambling requirement. Different categories may have different retention periods.

When information is no longer reasonably required, srcplay may delete it, anonymise it or place it beyond ordinary use until secure deletion is practicable. A deletion request may not result in immediate removal where srcplay must retain limited records to prevent fraud, maintain self-exclusion or address a legal claim.

12Responsible Gambling Information

srcplay may process account activity, deposit patterns, session behaviour, limit requests and support interactions to identify indicators of gambling harm and administer protective controls. Such processing may result in a responsible gambling message, account review, lower limit, temporary restriction or self-exclusion.

Self-exclusion data may be retained after other account functions end so that srcplay can continue enforcing the exclusion. Users aged under 21 must not access casino-style services. Further guidance appears on the Responsible Gambling page.