Privacy Policy – How spin88 Collects, Uses & Protects Your Data

1. Data Controller

spin88 is the data controller responsible for the personal data collected and processed through the spin88 platform. As the data controller, spin88 determines the purposes and means of processing your personal data, and is responsible for ensuring that such processing complies with applicable data protection legislation.

For all data protection enquiries, requests to exercise your rights, or formal complaints relating to the handling of your personal data, please contact the spin88 Data Protection contact via the details provided in Section 14 of this policy.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you create a spin88 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify the 21+ age requirement);
• Malaysian IC (MyKad) number, or passport number for non-citizens;
• Residential address;
• Email address (used as primary account identifier and for communications);
• Malaysian mobile phone number (+60) for account verification and two-factor authentication.

2.2 Financial Data

To process deposits and withdrawals in Malaysian Ringgit, spin88 collects:

• Payment method details (e-wallet account identifiers for Touch 'n Go, Boost, GrabPay; bank account numbers for Maybank2u, CIMB Clicks, and FPX transactions; DuitNow registered numbers);
• Transaction history including deposit amounts, withdrawal requests, bonus credits, and wagering records;
• Documentation provided for KYC purposes, including copies of government-issued identity documents and payment method verification where required.

2.3 Platform Usage Data

During your use of the spin88 platform, we automatically collect:

• IP address and general geolocation (country/region level, not precise location);
• Device type, operating system, browser type and version;
• Session timestamps, login history, and session duration;
• Game play history, betting activity, and balance changes;
• Customer support interaction records including chat logs and email correspondence.

2.4 Communications Data

Where you contact spin88 customer support, we retain records of such communications — including Live Chat transcripts and email correspondence — for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Collect Your Data

spin88 collects personal data through the following means:

• Directly from you: Data you provide during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and promotional opt-ins;
• Automatically: Technical data collected through cookies, server logs, and platform analytics tools during your active sessions on the spin88 platform;
• From third parties: Identity verification data from KYC service providers engaged by spin88; transaction confirmation data from payment processors and e-wallet providers (Touch 'n Go, Boost, GrabPay, Maybank, CIMB, FPX, DuitNow); fraud detection signals from security service providers.

4. Legal Basis for Processing

spin88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the spin88 Terms & Conditions — including account management, payment processing, and provision of gaming services;
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, gaming authority reporting requirements, and tax obligations — including KYC identity verification and transaction record retention;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming enforcement, and improvement of the spin88 platform, where such interests are not overridden by your rights;
• Consent: Where you have provided explicit consent for specific processing activities such as marketing communications. You may withdraw consent at any time by contacting support or updating your account communication preferences.

5. How We Use Your Personal Data

spin88 uses your personal data for the following purposes:

• Creating and managing your spin88 account, including identity verification and KYC compliance;
• Processing deposits and withdrawals in Malaysian Ringgit through your registered payment methods;
• Providing access to all spin88 gaming products including live casino, slots, sportsbook, football betting, and poker;
• Detecting and preventing fraud, money laundering, collusion, and other prohibited conduct as defined in the spin88 Terms & Conditions;
• Enforcing age verification requirements (21+ restriction) and responsible gaming obligations including deposit limits, self-exclusion, and cooling-off periods;
• Providing 24/7 customer support via Live Chat and email;
• Sending transactional communications (account notifications, deposit confirmations, withdrawal updates, security alerts) — these cannot be opted out of as they are necessary for account operation;
• Sending promotional communications where you have consented, including information about spin88 bonuses, new game launches, and platform updates — you may opt out of these at any time;
• Complying with reporting obligations to applicable gaming authorities and financial regulators;
• Analysing platform usage patterns to improve the spin88 user experience — using aggregated, anonymised data where possible.

6. Data Sharing & Disclosure

spin88 does not sell your personal data to third parties. Your data may be shared in the following limited circumstances:

6.1 Service Providers

spin88 engages third-party service providers who process personal data on our behalf and under our instructions, subject to contractual data protection obligations. These include: payment processors and e-wallet platforms (Touch 'n Go, Boost, GrabPay, Maybank, CIMB, FPX, DuitNow); KYC and identity verification providers; customer support platform providers; IT infrastructure and hosting providers; fraud detection and security service providers.

6.2 Regulatory & Legal Disclosure

spin88 may disclose personal data to regulatory authorities, law enforcement agencies, gaming authority bodies, or as required by applicable law, including in response to lawful requests and court orders. Such disclosures are made only to the extent required and in accordance with applicable legal requirements.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of spin88's business, personal data held by spin88 may be transferred to the successor entity, subject to equivalent data protection obligations. Affected players will be notified in advance of any such transfer where required by applicable law.

7. Cookies & Tracking Technologies

spin88 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies: Required for basic platform functionality, session management, and security. These cannot be disabled as the platform will not function correctly without them;
• Performance cookies: Used to measure platform performance, identify technical issues, and analyse aggregate usage patterns. Data collected is anonymised and used solely for platform improvement;
• Security cookies: Used to detect and prevent fraudulent access, bot activity, and suspicious session behaviour.

spin88 does not use third-party advertising cookies, social media tracking pixels, or any cookies designed to track your behaviour across sites other than spin88.asia. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to use the spin88 platform.

8. Data Retention

spin88 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods:

• KYC and identity documents: Minimum 5 years from account closure, in compliance with applicable anti-money laundering regulations;
• Financial transaction records: Minimum 5 years from the date of each transaction;
• Customer support records: 3 years from the date of the interaction, or longer where records are relevant to an ongoing dispute;
• Platform usage logs: 12 months from the date of generation, unless extended retention is required for security or legal purposes;
• Self-exclusion records: For the duration of the self-exclusion period plus 5 years following the expiry of the exclusion.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data deletion procedures.

9. Data Security

spin88 implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and spin88 servers;
• Encryption at rest for sensitive personal data including identity documents and payment details;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate need;
• Two-factor authentication enforced for all spin88 staff with access to player account data;
• Regular security audits and penetration testing by independent third-party security professionals;
• Incident response procedures to detect, contain, and respond to data breaches within required regulatory notification timeframes.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is unconditionally secure. Players are advised to take personal security precautions including using strong passwords, enabling two-factor authentication, and accessing the spin88 platform only through secure connections.

10. Your Data Rights

Subject to applicable law and our regulatory obligations, registered spin88 players have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data spin88 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to our regulatory data retention obligations (see Section 8);
• Right to restriction: You may request that spin88 restricts processing of your data in certain circumstances;
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal;
• Right to object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please contact spin88 support via Live Chat or email as detailed in Section 14. spin88 will respond to all valid requests within 30 days. Identity verification will be required before any data access or deletion request is processed.

11. Children's Privacy & Age Verification

The spin88 platform is strictly restricted to individuals aged 21 and above. spin88 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the KYC process required for all account holders.

If spin88 determines that personal data has been collected from an individual under 21, the account will be immediately closed, all associated data will be deleted (or retained only as required by applicable regulatory obligations), and any funds will be returned to the source payment method to the extent possible. If you believe that spin88 has inadvertently collected data from an underage individual, please notify us immediately via the contact details in Section 14.

12. International Data Transfers

spin88 primarily processes player data within secure data centres. Where personal data is transferred to third-party service providers located outside Malaysia, spin88 ensures that appropriate safeguards are in place, including contractual data protection clauses requiring the recipient to maintain data protection standards equivalent to those applied by spin88.

Such transfers are limited to the minimum data necessary and occur only with service providers essential to platform operation, including KYC providers, payment processors, and IT infrastructure providers. Players may contact spin88 support to request information about specific international transfers affecting their data.

13. Amendments to This Policy

spin88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform practices. Material changes will be communicated to registered players via the email address on file, with not less than 14 days' notice prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this policy. Continued use of the spin88 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

14. Contact & Data Subject Requests

For all privacy-related enquiries, requests to exercise data rights, or formal complaints regarding spin88's handling of your personal data, please contact us through the following channels:

This Privacy Policy was last reviewed and updated on 12 June 2026. spin88 reserves all rights not expressly granted under this policy.