Privacy Policy

scr99 ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy applies to all personal data collected through our website at https://scr99.cam and any related services, mobile applications, or communication channels operated by scr99.

We recognize that privacy is important to our Indonesian user base, which includes players from Jakarta, Surabaya, Bandung, Medan, Bali, and other cities across the archipelago. We have designed this policy to align with international best practices, including principles consistent with the European Union's General Data Protection Regulation (GDPR), while respecting Indonesia's regulatory environment.

By accessing or using scr99 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any aspect of this policy, please discontinue use of our platform immediately.

For the purposes of data protection law, scr99 is the data controller responsible for your personal information. This means we determine the purposes for which and the manner in which your personal data is processed.

If you have any questions, concerns, or requests regarding how we handle your personal data, you may contact our Data Protection Officer at [email protected] (displayed as plain text only). We aim to respond to all privacy-related inquiries within 5 business days.

scr99 collects various types of personal information to provide, maintain, and improve our services. The categories of data we collect include:

We may also collect aggregated or anonymized data that cannot be used to identify you individually. This data is used for statistical analysis, market research, and service improvement and is not subject to this Privacy Policy.

We collect personal information through the following methods:

• Direct interactions: When you register an account, make a deposit, request a withdrawal, contact customer support, or subscribe to promotional communications, you directly provide us with personal information.
• Automated technologies: As you navigate our website and use our services, we automatically collect technical data about your device, browsing actions, and usage patterns using cookies, server logs, and similar tracking technologies.
• Third parties: We may receive personal data from third-party service providers such as payment processors (when you deposit via BCA, BRI, BNI, Mandiri, OVO, DANA, or GoPay), identity verification services, fraud detection agencies, and analytics providers.
• Publicly available sources: In limited circumstances, we may obtain information from publicly accessible databases to verify your identity or comply with anti-money-laundering (AML) regulations.

scr99 processes your personal information for the following purposes:

1. Account Management: To create and maintain your user account, verify your identity, authenticate your login credentials, and manage your profile settings.
2. Transaction Processing: To process deposits and withdrawals, facilitate payments through Indonesian banks and e-wallets, maintain transaction records, and detect fraudulent financial activity.
3. Service Delivery: To provide access to our casino games, sports betting markets, live dealer experiences, and other platform features; to calculate and credit winnings; to process bonus awards and promotions.
4. Regulatory Compliance: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, verify that you are at least 21 years of age, respond to law enforcement requests, and fulfill other legal and regulatory requirements.
5. Customer Support: To respond to your inquiries, troubleshoot technical issues, handle complaints, and provide 24/7 Indonesian-speaking assistance.
6. Security & Fraud Prevention: To detect and prevent fraud, collusion, match-fixing, bonus abuse, unauthorized access, and other prohibited activities; to protect the integrity of our games and the security of our platform.
7. Marketing & Communication: To send you promotional offers, bonus notifications, newsletters, and other marketing communications (only if you have opted in); to conduct market research and customer satisfaction surveys.
8. Platform Improvement: To analyze usage patterns, conduct A/B testing, improve user experience, develop new features, and optimize our website performance.
9. Responsible Gaming: To monitor gambling behavior, identify users who may be at risk of problem gambling, enforce deposit limits and self-exclusion requests, and support responsible gaming initiatives.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible reason. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis for doing so.

scr99 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals. These providers receive only the minimum data necessary to complete transactions.
• Identity Verification Services: Third-party KYC and AML compliance vendors who verify your identity documents and check against sanctions lists and politically exposed persons (PEP) databases.
• Game Providers: Software suppliers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe who deliver casino games and live dealer experiences. These providers may collect usage data related to your gameplay.
• Fraud Prevention & Security Services: Specialized agencies that monitor transactions, detect fraudulent behavior, and protect against cyber threats.
• Cloud Storage & Hosting Providers: Companies that host our servers and store data on our behalf under strict confidentiality agreements.
• Analytics Providers: Services that help us understand how users interact with our platform, such as Google Analytics (with IP anonymization enabled).
• Legal & Regulatory Authorities: Government agencies, law enforcement, regulators, and courts when required by law or when necessary to protect our legal rights.
• Professional Advisors: Lawyers, auditors, accountants, and consultants who provide services to scr99 under confidentiality obligations.

All third parties with whom we share your data are required to respect the security of your personal information and to treat it in accordance with applicable data protection laws. We do not allow them to use your data for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.

scr99 employs industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same technology used by major financial institutions worldwide.
• Secure Storage: Personal data stored on our servers is encrypted at rest using AES-256 encryption. Access to databases is restricted to authorized personnel only.
• Access Controls: We implement role-based access control (RBAC) to ensure that employees and contractors can only access data necessary for their specific job functions.
• Password Protection: User passwords are hashed using bcrypt or similar cryptographic algorithms and are never stored in plain text.
• Firewalls & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious activity.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration tests to identify and remediate potential weaknesses.
• Staff Training: All scr99 employees receive training on data protection principles and are bound by confidentiality agreements.

Despite our security safeguards, no method of transmission over the internet or electronic storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

scr99 uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

Types of cookies we use:

• Essential Cookies: Required for the operation of our website. These cookies enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies.
• Performance Cookies: Collect information about how visitors use our site, including which pages are visited most often and whether users receive error messages. This data helps us improve site performance.
• Functionality Cookies: Remember your preferences (such as language, region, and display settings) and provide enhanced, personalized features.
• Analytics Cookies: Help us understand user behavior through tools like Google Analytics. These cookies track metrics such as session duration, page views, and traffic sources.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies, but please note that blocking all cookies (including essential cookies) may prevent you from accessing certain parts of our website or using key features.

For more information about the cookies we use and how to manage your preferences, please contact our support team.

Under applicable data protection laws, you have the following rights regarding your personal information:

1. Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
2. Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it.
3. Right to Erasure: Also known as the "right to be forgotten," you may request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
4. Right to Restrict Processing: You may request that we limit the way we use your personal data in specific situations, such as while we verify the accuracy of data you have challenged.
5. Right to Data Portability: You have the right to obtain your personal data in a portable format and to transmit it to another service provider where technically feasible.
6. Right to Object: You may object to our processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests under certain conditions.
7. Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected] (plain text display only) with the subject line "Privacy Rights Request." We will respond to all legitimate requests within 30 days. In some cases, we may need to verify your identity before processing your request.

Please note that certain rights may not apply in all circumstances. For example, we may be required to retain certain data for legal or regulatory compliance reasons even if you request deletion.

scr99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal, regulatory, accounting, and reporting obligations.

The retention periods for different categories of data are as follows:

• Account Data: Retained for the duration of your active account and for 5 years after account closure to comply with financial and gaming regulations.
• Transaction Records: Maintained for 7 years from the date of the transaction to satisfy tax and financial reporting requirements.
• Identity Verification Documents: Stored for 5 years after account closure for regulatory compliance and fraud prevention purposes.
• Marketing Preferences: Retained until you withdraw consent or for 3 years of inactivity, whichever comes first.
• Customer Support Communications: Kept for 3 years to resolve disputes and improve service quality.
• Technical Logs: Retained for 12 months for security monitoring and troubleshooting purposes.

When personal data is no longer required, we securely delete or anonymize it so that it cannot be reconstructed or linked back to you. In cases where deletion is not immediately possible (e.g., data stored in backup systems), we will securely isolate your data from further processing until deletion is feasible.

scr99 operates internationally and may transfer your personal data to servers located outside Indonesia. When we transfer data to countries that do not provide an equivalent level of data protection, we implement appropriate safeguards to ensure your information remains secure.

These safeguards may include:

• Using standard contractual clauses approved by international data protection authorities
• Ensuring that the recipient is part of a framework that provides adequate protection (such as the EU-US Data Privacy Framework)
• Obtaining your explicit consent for the transfer where required by law

If you would like further information about the safeguards we use for international data transfers, please contact our Data Protection Officer.

scr99 is strictly an adult-only platform. Our services are intended solely for individuals who are at least 21 years of age. We do not knowingly collect, use, or solicit personal information from anyone under the age of 21.

If we discover that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that information from our systems. If you believe that we may have collected information from a minor, please contact us immediately at [email protected] (plain text display only).

Parents and guardians should monitor their children's internet usage and ensure that minors do not access gambling websites. We recommend enabling parental control software to prevent underage access to age-restricted content.

scr99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification to the address associated with your account (for significant changes that affect your rights)
• Displaying a prominent notice on our website or within your account dashboard

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of scr99 services after the effective date of any changes constitutes your acceptance of the updated policy.

If you do not agree with the revised Privacy Policy, you may close your account by contacting our customer support team. However, please note that closure of your account does not automatically trigger deletion of your data if we are required to retain it for legal or regulatory purposes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how scr99 handles your personal information, please contact our Data Protection Officer:

• Email: [email protected] (plain text display, not a clickable link)
• Live Chat: Available 24/7 via the chat widget on our website
• Support Hours: Our Indonesian-speaking privacy specialists are available around the clock to assist you

We will acknowledge receipt of your inquiry within 2 business days and provide a substantive response within 30 days. In complex cases, we may need to extend this period, but we will keep you informed of our progress.

If you are not satisfied with our response to a privacy-related complaint, you may have the right to lodge a complaint with your local data protection authority.