Spin88 Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

Spin88 (spin88.world), operated by Spin88 Entertainment Group, is fully committed to protecting the privacy and personal data security of all our players. This Privacy Policy sets out our practices regarding the collection, use, storage, and disclosure of personal data in the context of the Spin88 online casino and Sports Betting platform.

This policy applies to all users of the Spin88 platform — including unregistered visitors, registered members, and active players. We encourage you to read this document carefully and to reach out if you have any questions.

Spin88 only collects data that is strictly necessary to provide our services to you. The following are the categories of data we process:

Data collected by Spin88 is used solely for the following purposes:

• Account Management – Creating, verifying, and managing your player account, including the login process, two-factor authentication, and account recovery.
• Financial Transaction Processing – Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as your winnings withdrawals in Malaysian Ringgit (MYR).
• KYC & AML Compliance – Verifying your identity and meeting anti-money laundering requirements under applicable law.
• Gaming Services Provision – Operating live casino games, slots, poker, Malaysia Super League & EPL football betting, badminton, virtual sports, and all other games on the Spin88 platform.
• VIP Programme & Rewards – Calculating and awarding VIP points, bonuses, and rewards based on your betting activity on Spin88.
• Customer Support – Processing your enquiries, complaints, and technical support requests in a timely manner.
• Platform Security – Detecting and preventing fraud, bot usage, account hacking, and other suspicious activity.
• Platform Improvement – Analysing aggregated, anonymised usage patterns to improve Spin88's interface and overall user experience.
• Marketing Communications – Sending Spin88 promotions, exclusive offers, and the latest updates only to players who have given their consent.

Spin88 processes your personal data on the following legal bases in accordance with Malaysia's PDPA:

• Contract Performance – Data processing is necessary to provide Spin88's services to you as a registered player. Without this data, we are unable to process financial transactions or open your account.
• Legitimate Interest – Spin88 has a legitimate interest in detecting fraud, analysing security patterns, and improving our platform to protect all users.
• Legal Obligations – Certain data processing activities, in particular KYC and AML reporting, are mandatory under applicable Malaysian legislation.
• Consent – For marketing communications and non-essential cookies, Spin88 obtains your explicit consent in advance. You may withdraw this consent at any time.

Spin88 does not sell, rent, or trade your personal data. However, we may share required data with the following parties in limited circumstances:

• Payment Providers – Third parties processing Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX transactions receive only the minimum data required to process your payment.
• Game Software Providers – Evolution Gaming, Pragmatic Play, PG Soft, and other providers receive the technical data necessary to deliver their games. They are bound by strict confidentiality agreements with Spin88.
• KYC Services – Authorised third-party identity verification providers assist Spin88 in verifying player documents to meet AML requirements.
• Legal Authority – Spin88 will disclose data to law enforcement agencies or relevant authorities when required by law or court order.

All third parties that receive data from Spin88 are contractually bound to use it solely for the specified purpose and to comply with the security standards set by Spin88.

Spin88 uses cookies and similar tracking technologies to enhance your platform experience. The following are the types of cookies we use:

• Essential Cookies – Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies – Collects anonymous information about how you use Spin88 to help us identify and resolve technical issues.
• Functional Cookies – Stores your preferences such as language, display settings, and game configurations to deliver a more personalised experience.
• Analytics Cookies – Used to understand aggregate traffic patterns and user behaviour for the purpose of improving the Spin88 platform.

Spin88 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• Channel Encryption – All communications between your browser and Spin88's servers are protected by TLS 1.3 with a 256-bit SSL certificate.
• Encryption of Stored Data – Sensitive data such as financial information and passwords are stored in encrypted form using AES-256 on our servers.
• Two-Factor Authentication (2FA) – Spin88 offers 2FA via SMS or an authenticator app for all player accounts.
• Internal Access Controls – Only Spin88 staff who require data access for their assigned duties are granted permission, and all access is logged for audit purposes.
• 24/7 Security Monitoring – Our intrusion detection system continuously monitors platform traffic to identify suspicious activity.
• Regular Penetration Testing – Third-party security experts conduct quarterly vulnerability assessments and penetration testing on Spin88's infrastructure.

Spin88 retains your personal data based on operational needs and legal obligations. The following outlines our data retention guidelines:

• Active Account Data – Retained for the duration your account is active and for an additional 5 years after account closure, to meet legal requirements and dispute resolution needs.
• Financial & Transaction Records – A minimum of 7 years, as required under Malaysian financial and tax regulations.
• Support Communication Logs – 2 years from the date of last communication.
• Analytics Data – Retained indefinitely in anonymised form for platform improvement purposes.
• Security Logs – 2 years for security incident investigation purposes.

As a data subject under Malaysia's PDPA, you have the following rights regarding the personal data Spin88 holds about you:

The Spin88 platform is unsuitable and not intended for individuals under the age of 21. Spin88 does not knowingly collect any personal data from minors.

If Spin88 discovers that personal data belonging to an individual under 21 has been collected without appropriate age verification, we will immediately take the following steps:

• Suspending the account in question while the investigation is ongoing
• Securely delete all associated data
• Returning any fund balances of identifiable origin
• Reporting to the relevant authorities where required

In the context of Spin88's platform operations, your data may be processed on servers located outside Malaysia – primarily for cloud infrastructure services and game software providers. Whenever such transfers occur, Spin88 ensures adequate protection through:

• Data Processing Agreements (DPA) compliant with PDPA standards with all service partners
• Use of recognised Standard Contractual Clauses for international data transfers
• Risk assessment prior to engaging new vendors that process Malaysian players' data

While Spin88 maintains robust security measures, no system can guarantee absolute security. In the event of an unforeseen data breach, Spin88 is committed to:

• Real-time identification and containment of breaches 12 hours from tracking
• Notifying affected players within the stipulated timeframe 72 hours via registered email
• Reporting to the Malaysian Personal Data Protection Department as required by law
• Providing step-by-step guidance on the protective measures affected players should take
• Conducting a full investigation and submitting a post-incident report within 30 days

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Spin88, please contact us through the following channels:

• Privacy Email: privacy@spin88.world (response within 72 business hours)
• Live Chat Support: Available 24/7 via the Spin88 platform
• General Support Email: support@spin88.world

We also accept privacy-related complaints through the Malaysian Personal Data Protection Department if you believe your privacy rights have been violated and Spin88 has failed to address your concerns to your satisfaction.