Privacy Policy spin88 — Our Commitment to Protecting Your Personal Data

1 Personal Data We Collect

In operating the spin88 platform, we collect several categories of personal data from our players. This data is divided into three main categories:

A. Registration & Identity Data

• Full name as stated on official identification documents.
• National identity card number (MyKad) or passport number for foreign nationals.
• Date of birth for player age eligibility verification.
• An active, reachable email address.
• Registered Malaysian mobile phone number.
• Current residential address.

B. Financial & Payment Data

• Bank name and bank account number for fund withdrawal purposes.
• E-wallet account number (DuitNow, Touch 'n Go eWallet, GrabPay, Boost) if applicable.
• Deposit and withdrawal transaction records.
• KYC data includes images of identity documents.

C. Platform Usage Data

• IP address, device type, and operating system used.
• Login and logout session records.
• Game history and wagering activity.
• Game selection and navigation behaviour within the platform.

2 How Personal Data Is Collected

Personal data is collected through several different channels as you interact with the spin88 platform:

• Registration Form: Basic information is collected when you register a new account at spin88.
• KYC Process: Identity documents and proof of bank account are collected during identity verification to enable withdrawals to be processed.
• Platform Usage: Usage data is collected automatically when you log in, play, or make a transaction.
• Communications with Support: Any information you share when contacting the spin88 customer support team is retained for case resolution records.
• Cookies and Similar Technologies: Your navigation data and preferences are collected via cookies installed on your web browser.

3 Personal Data Usage Purpose

Spin88 uses your personal data for specific and lawful purposes. The table below shows the relationship between data types and their intended use:

Spin88 does not use your personal data for purposes beyond those stated in this table without obtaining your consent first. Any new purpose will be communicated to you before it takes effect.

4 Data Sharing with Third Parties

Spin88 understands that your trust is the most valuable asset in our relationship. As such, we only share your personal data in limited situations and with strict safeguards:

• Payment Service Providers: Information required to process transactions is shared with registered payment gateways such as DuitNow, FPX, and e-wallet providers — solely for payment processing purposes.
• Game Software Providers: The minimum data required to operate games is shared with third-party providers who have confidentiality agreements with spin88.
• Competent Authority: spin88 will disclose required information if mandated by a court order or direction from a legitimate law enforcement agency.
• Audit & Compliance: Independent audit bodies that inspect the integrity of spin88's systems may have limited access to certain data under strict confidentiality agreements.

All third parties receiving data from spin88 are bound by data processing agreements that require them to protect that information to a standard equal to or higher than our own.

5 Data Security Measures at spin88

Protecting your personal data is a core technical and operational priority at spin88. We implement multiple layers of security to ensure your information remains safe at all times:

• Encryption in Transit: All communications between your device and spin88 servers are secured by TLS 1.3 with 256-bit encryption.
• Storage Encryption: Sensitive data such as banking information is stored in encrypted format using AES-256 algorithms.
• Role-Based Access Control: spin88 staff can only access data relevant to their specific responsibilities.
• Two-Factor Authentication: spin88's internal systems require two-factor authentication for all access to sensitive data.
• Continuous Monitoring: An automated threat detection system monitors for any suspicious activity 24 hours a day.
• Regular Security Audits: Penetration testing and independent security audits are conducted periodically to identify and address vulnerabilities.

6 Cookies and Tracking Technologies

Spin88 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, currency, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand how players use the platform so we can make meaningful improvements. Analytics data is processed in aggregate and is not linked to individual identities.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the spin88 platform.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by spin88:

8 Data Retention & Deletion

Spin88 does not retain personal data longer than is necessary for the stated purpose or as required by law:

• Active Account Data: Retained for the duration your account remains active and for 7 years after account closure to meet financial record-keeping and audit requirements.
• Transaction Data: Retained for 7 years in accordance with Malaysian financial legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends in accordance with anti-money laundering requirements.
• Security Logs: Retained for 2 years for security incident investigation purposes.
• Aggregate Analytics Data: Anonymised analytics data may be retained indefinitely as it can no longer be linked back to any specific individual.

Once the retention period expires, your personal data will be securely deleted using methods that ensure the data cannot be recovered.

9 Changes to This Privacy Policy

Spin88 reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological advancements. When material changes occur, we will:

• Displaying a clear notice on the platform's home page for at least 14 days before the changes take effect.
• Sending email notifications to all registered players summarising the changes made.
• Updating the "Last Updated" date at the top of this document.

Continued use of the spin88 platform after the effective date of any updated Privacy Policy changes constitutes acceptance of those changes. If you do not agree with any changes, you may close your account and request data deletion before the changes take effect.

10 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how spin88 handles your personal data, do not hesitate to contact us:

If you are not satisfied with our response, you have the right to escalate your complaint to the Malaysia Department of Personal Data Protection or the relevant regulatory body.