Spin888 Privacy Policy

Introduction

Spin888 ("Spin888", "we", "us", or "our") is committed to protecting the privacy and personal data of every individual who uses or interacts with the Spin888 platform at spin888.cam (the "Platform"). This Privacy Policy (the "Policy") describes how we collect, use, store, disclose, and safeguard your personal information when you register an account, make deposits or withdrawals, place bets, participate in promotions, or contact our support team.

Spin888 operates as a Malaysia-facing online casino and sports betting service. All transactions are conducted in Malaysian Ringgit (MYR). Our user base includes adult players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, and we process personal data in a manner consistent with the obligations owed to users in this market.

By registering an account or continuing to use the Platform, you confirm that you have read, understood, and agree to the processing of your personal data as described in this Policy. If you do not agree, you should discontinue use of the Platform and contact us to arrange account closure.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that can identify you directly or indirectly, including your name, date of birth, contact details, financial information, device identifiers, and account activity records.
• "Processing" — Any operation performed on personal data, including collection, storage, use, transfer, deletion, or any combination thereof.
• "Data Controller" — Spin888, the entity that determines the purposes and means of processing your personal data.
• "User" or "you" — Any individual who registers an account, visits the Platform, or contacts Spin888 in any capacity.
• "KYC" — Know Your Customer identity verification procedures required before withdrawal processing and for ongoing account compliance.
• "Cookies" — Small text files stored on your device by your browser when you visit the Platform, used to maintain session information and analyse usage patterns.
• "Third-Party Processor" — An external organisation that processes personal data on Spin888's behalf under a formal data processing agreement.

Personal Data We Collect

Spin888 collects different categories of personal data depending on how you interact with the Platform. The categories and examples are set out below:

How We Collect Your Data

Spin888 collects personal data through the following primary means:

4.1 Direct Submission

You provide personal data directly when you register an account, complete KYC verification, deposit or withdraw funds, configure responsible gambling settings, contact our support team, or participate in promotional activities. The accuracy of directly submitted data is your responsibility.

4.2 Automated Technical Collection

When you access the Platform, we automatically collect technical data including your IP address, device identifiers, browser characteristics, and session information. This data is collected through server logs, analytics tools, and cookies (see Section 09 for more detail on cookie usage).

4.3 Payment Processors and Financial Institutions

When you make a deposit or withdrawal, transaction reference data is shared between Spin888 and your chosen payment provider — which may include Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Bank. Each payment provider operates under its own privacy policy; Spin888 is not responsible for how payment providers process data on their own systems.

4.4 Third-Party Identity Verification Services

Spin888 may engage licensed third-party KYC service providers to assist with identity document verification. These providers process only the minimum data necessary to complete verification and are bound by data processing agreements with Spin888.

Purposes of Data Processing

Spin888 processes your personal data for the following specific purposes:

• Account Creation and Management: To register your account, authenticate your identity, maintain account records, and deliver the core Platform features;
• Identity Verification (KYC): To verify your age (21+), identity, and source of funds in accordance with anti-money-laundering obligations;
• Payment Processing: To facilitate MYR deposits and withdrawals through your chosen Malaysian payment methods and to maintain accurate financial records;
• Regulatory Compliance: To meet obligations under applicable laws relating to anti-money laundering, fraud prevention, and responsible gambling;
• Responsible Gambling: To operate deposit limits, session controls, cooling-off periods, and self-exclusion features; to detect potentially problematic gambling patterns;
• Customer Support: To investigate and resolve your questions, complaints, disputes, and technical issues;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorised account access;
• Platform Improvement: To analyse aggregate usage patterns and improve the design, functionality, and content of the Platform;
• Promotional Communications: To send relevant bonus offers, deposit notifications, and account-related communications — subject to your communication preferences;
• Legal Proceedings: To establish, exercise, or defend legal claims where necessary.

Legal Basis for Processing

Spin888 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the agreement between you and Spin888, including account registration, deposits, withdrawals, and access to games;
• Legal Obligation: Processing required to comply with applicable anti-money-laundering, fraud prevention, and responsible gambling obligations;
• Legitimate Interests: Processing carried out in Spin888's legitimate interests (fraud prevention, platform security, analytics, and service improvement), where these interests are not overridden by your data protection rights;
• Consent: Where you have given specific, informed consent to particular processing activities — for example, optional promotional communications. You may withdraw consent at any time by contacting support.

Data Sharing and Disclosure

Spin888 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with the following categories of recipient where necessary and appropriate:

7.1 Service Providers and Processors

Organisations contracted to provide services on our behalf, including KYC verification providers, payment processing partners, customer support platform providers, analytics services, and cloud hosting providers. All third-party processors are required to handle your data securely and only for the purposes for which it was shared.

7.2 Regulatory and Law Enforcement Authorities

Spin888 may be required to disclose personal data to government bodies, regulatory agencies, or law enforcement authorities in response to a lawful request, court order, or applicable legal obligation. We will notify you of any such disclosure to the extent we are legally permitted to do so.

7.3 Fraud Prevention and Security Agencies

We may share information with fraud detection services and financial crime databases to protect the Platform and its users from dishonest or criminal activity, including money laundering and identity fraud.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of Spin888's business, personal data held by Spin888 may be transferred as part of that transaction. Users will be notified of any material change in data controller in advance of such a transfer taking effect.

Data Retention

Spin888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and operational requirements.

• Active Accounts: Personal data is retained throughout the period your Account remains active on the Platform;
• Post-Closure Retention: Following account closure, Spin888 retains identity and transaction records for a minimum of five (5) years to comply with anti-money-laundering record-keeping obligations;
• KYC Documents: Verification documents are retained for a minimum of five years after the associated account relationship ends;
• Support Records: Customer support communications are retained for up to three years from the date of the last interaction;
• Technical/Log Data: Server logs and technical session data are retained for up to 12 months for security and analytical purposes, after which they are anonymised or deleted.

Where data is no longer required, Spin888 will securely delete or anonymise it in accordance with data minimisation principles.

Cookies and Tracking Technologies

The Spin888 Platform uses cookies and similar tracking technologies to maintain session continuity, analyse Platform performance, support responsible gambling monitoring functions, and improve the overall user experience.

9.1 Types of Cookies Used

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform access;
• Functional Cookies: Remember your account preferences, language settings, and session-based configurations;
• Analytical Cookies: Collect aggregated, anonymised data about how users navigate the Platform to help us improve its structure and content;
• Security Cookies: Assist in detecting unusual login patterns, multi-accounting, and fraud indicators.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent you from logging in or accessing core Platform features. Spin888 does not use third-party advertising tracking cookies.

Your Data Rights

Subject to applicable law, you have the following rights with respect to your personal data held by Spin888. Requests may be submitted by contacting our support team using the details in Section 14.

• Right of Access: You have the right to request a copy of the personal data Spin888 holds about you and information about how it is being processed;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your Account;
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that this right may be limited where Spin888 is required to retain data for legal compliance purposes;
• Right to Restrict Processing: You may request that Spin888 limit how it uses your data in certain circumstances, such as while a complaint is under investigation;
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format;
• Right to Object: You may object to processing based on Spin888's legitimate interests. Spin888 will cease that processing unless compelling legitimate grounds can be demonstrated;
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Spin888 will respond to verified data rights requests within 30 calendar days. Complex requests may require additional time, in which case you will be informed of the expected timeline.

Security Measures

Spin888 applies a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Spin888 Platform is encrypted using industry-standard TLS protocols. Look for the padlock icon in your browser's address bar as confirmation;
• Secure Storage: Personal data and financial records are stored on secured servers with access controls restricting access to authorised personnel only;
• Access Controls: Spin888 staff access to personal data is limited by role and subject to formal access management procedures. Access logs are maintained and reviewed regularly;
• Fraud Detection Systems: Automated monitoring tools identify unusual patterns, multi-account activity, and potential security threats in real time;
• Data Minimisation: Spin888 collects only the personal data necessary for the stated purposes and does not retain data beyond the required retention periods;
• Incident Response: Spin888 maintains a data breach response procedure. In the event of a breach likely to affect your rights, we will notify you without undue delay.

Children and Minors

The Spin888 Platform is strictly intended for adults aged 21 years and above. Spin888 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If Spin888 becomes aware that personal data has been collected from a minor, the associated account will be closed immediately, all funds will be reviewed, and the data will be deleted as soon as reasonably practicable.

If you are a parent or guardian and believe that a minor has registered an account or provided personal data to Spin888, please contact our support team immediately using the details in Section 14. We take underage access very seriously and maintain age verification controls at registration and during KYC.

Changes to This Policy

Spin888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change to the purposes for which we process data, the categories of data we collect, or the third parties with whom we share data — Spin888 will provide advance notice by displaying a prominent notice on the Platform or by email communication to registered users.

The effective date at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Spin888, please contact our support team using the following details. The email address below is provided as plain text only and is not a clickable link.

• Email (plain text): [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Support Hours: Around the clock, operated on Malaysian Standard Time (MYT, UTC+8)

For account-related queries, please also review our Frequently Asked Questions page. For the full Terms governing your use of the Platform, see our Terms & Conditions.