Privacy Policy Spin88 — Malaysia User Data Protection

Spin88 understands that personal data is both sensitive and valuable. We do not take lightly the responsibility you place in us when you register and use the Spin88 platform. Every data management decision is made with our users' best interests in mind.

This Privacy Policy applies to all Spin88 platform users regardless of how they access it — whether via desktop web browser, iOS or Android smartphone, or any other device. It also covers all data collected through your interactions with Spin88's customer support team, whether by email, live chat, or any other communication channel.

Spin88 collects various categories of data depending on the nature of your interactions with our platform. Below is a full breakdown of the data we may collect:

It should be noted that Spin88 never stores full credit or debit card details users. All financial transactions are processed through registered and recognized third-party payment providers in Malaysia, and sensitive payment data does not pass directly through Spin88's servers.

Spin88 collects users' personal data through several methods:

• Directly from You: When you complete the Spin88 registration form, update your account profile, contact our support team, or fill in any form within our platform.
• Through Use of the Platform: Data generated automatically when you use Spin88's services — including activity logs, betting records, and gaming session data.
• Through Automated Technology: Cookies, web beacons, tracking pixels, and similar technologies that help us understand how users interact with the Spin88 platform.
• From Third Parties: In some cases, we may receive data from identity verification service providers, payment processors such as Touch 'n Go, GrabPay, DuitNow, or Boost, and fraud prevention bodies for legitimate purposes.

Spin88 uses users' personal data solely for the following legitimate and stated purposes:

• Service Provision: To create, manage, and maintain your Spin88 account; process deposits and withdrawals; and grant you access to all games and platform features.
• Identity Verification (KYC): To verify your age, identity, and eligibility before permitting use of Spin88's services, in line with legal requirements.
• Account Security: To detect and prevent unauthorised access, fraud, money laundering, and other suspicious activity that may compromise your account or the Spin88 platform.
• Service Communications: To send important notices regarding your account, changes to our terms, security updates, and other information relevant to your use of Spin88.
• Responsible Gaming: To monitor usage patterns and identify signs of problem gambling, and to provide effective responsible gaming tools to users who need them.
• Platform Improvements: To analyze how users interact with Spin88 in order to improve platform design, performance, and overall user experience.
• Legal Compliance: To fulfil legal obligations including reporting requirements, audits, and compliance with Malaysia's PDPA and other applicable legislation.

Spin88 does not use user data to make automated decisions that significantly affect user rights without human oversight. Any material decisions relating to your account are subject to review by the responsible Spin88 team.

Spin88 does not sell, rent, or trade users' personal data. However, under the limited circumstances set out below, Spin88 may share data with certain parties:

• Service Providers: Third parties that assist Spin88 in delivering its services, such as game providers (e.g., Pragmatic Play, Evolution Gaming), payment processors (Touch 'n Go, GrabPay, DuitNow), and IT infrastructure providers. All such parties are bound by strict confidentiality agreements.
• Legal Requirements: When required by Malaysian law, a court order, or a legitimate request from authorities such as MACC or PDRM in the context of a valid legal investigation.
• Fraud Prevention: With recognised fraud prevention bodies and platforms to protect Spin88 users and the integrity of the platform from malicious activity.
• Your Consent: In any other circumstances that require data sharing, Spin88 will obtain your explicit consent beforehand.

Spin88 continually invests in cybersecurity infrastructure to protect user data. The security measures we have in place include:

• 256-bit SSL/TLS Encryption for all data transmissions between users' devices and Spin88's servers.
• Data-at-rest encryption for all sensitive information stored in Spin88's databases.
• Two-factor authentication (2FA) available to all Spin88 user accounts as an additional layer of security.
• 24/7 security monitoring by Spin88's experienced IT security team.
• Penetration testing conducted periodically by independent parties to identify and remediate any system vulnerabilities.
• Internal access control policy strictly enforced — only Spin88 staff with a legitimate business need are permitted to access user data.
• Incident response plan comprehensive measures to ensure that any security breaches are addressed promptly and effectively.

While Spin88 takes all reasonable steps to protect your data, no security system is 100% impenetrable. You also play an important role in keeping your account secure by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to Spin88.

Spin88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected as described in this Policy, or as required by Malaysian law.

• Active Account Data: Retained for the duration your Spin88 account is active and for 7 years after account closure, for legal compliance and audit purposes.
• Financial Transaction Records: Retained for 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support Communication Logs: Retained for 2 years from the date of last interaction for reference and service improvement purposes.
• Technical Data (Logs, Cookies): Retained for 12 months or less, depending on the type of data.

Once the defined retention period has ended, your data will be securely deleted or anonymized so that it can no longer be linked to your identity.

As a Spin88 user whose personal data we hold, you have the following rights, which we fully respect:

To exercise any of these rights, please contact Spin88's data protection team by email at privacy@spin88.info. We will process your request within 30 days of receipt.

Spin88 uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. The types of cookies used are as follows:

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the Spin88 platform.

Spin88 takes the protection of minors very seriously. Our platform is exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

Should Spin88 discover that personal data belonging to a minor has been collected without proper knowledge or consent, we will take immediate steps to delete that data and close the account in question.

Spin88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant changes are made, we will notify users via:

• A clear notice on the Spin88 platform's main page
• Notification emails sent to your registered email address
• In-account notification upon logging in to Spin88

The date this Policy was last updated is always displayed at the top of this page. It is your responsibility to review this Policy periodically. Continued use of the Spin88 platform after any amendments take effect constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Spin88 manages your personal data, please contact our Data Protection Officer (DPO):

For further reading on other Spin88 policies and procedures, you may refer to Terms & Conditions, Responsible Gaming, and FAQ ours.