spin888 Privacy Policy

1 Introduction

This Privacy Policy applies to all personal data processed by spin888 in connection with the operation of the online casino and sportsbook platform available at https://spin888.lat and any associated subdomains or mobile-optimised versions of the platform. It covers all members registered with spin888, visitors to the platform who have not registered, and any individual who contacts spin888 through any support channel.

spin888 is committed to protecting personal data in accordance with applicable data protection legislation and the standards expected under its international gaming authority licence. This policy is intended to give you a clear, honest account of how your data is handled — not a document designed to obscure its contents in legal language.

2 Data Controller

For the purposes of applicable data protection law, spin888 — the operator of https://spin888.lat — is the data controller responsible for the personal data described in this policy. Enquiries relating to this policy or to the exercise of your data rights should be directed to: [email protected]

3 Personal Data We Collect

3.1 Registration & Identity Data

When you create an account with spin888, we collect your full legal name, date of birth, gender, residential address (including city — for example, Kuala Lumpur, Penang, or Johor Bahru), email address, and contact telephone number. This information is required to establish your account and complete identity verification in compliance with our KYC obligations.

3.2 Identity Verification Documents

As part of the Know Your Customer (KYC) and anti-money-laundering compliance process, spin888 may collect copies of government-issued photographic identification (such as a Malaysian identity card or passport), proof of residential address, and proof of payment method ownership. These documents are collected and retained in accordance with regulatory requirements.

3.3 Financial Data

spin888 collects data relating to your deposit transactions, withdrawal requests, wagering activity, and account balances. Full payment card numbers are not stored by spin888 — payment processing is handled by regulated third-party payment processors. For e-wallet methods such as Touch n Go eWallet and Boost, we retain transaction reference data sufficient to reconcile payments and process withdrawals.

3.4 Platform Usage Data

spin888 collects data about how you use the platform, including game play history, session duration, login timestamps, device information, operating system, browser type, and IP address. This data is used for platform optimisation, security monitoring, responsible gaming analysis, and compliance reporting.

3.5 Communications Data

When you contact spin888 support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments, for the purposes of resolving your enquiry, training, and compliance.

4 How We Collect Your Data

spin888 collects personal data through the following mechanisms:

• Direct provision: Data you enter during registration, account updates, KYC submission, or when contacting support;
• Automated collection: Data collected automatically during your use of the platform via cookies, server logs, and device fingerprinting technology;
• Third-party sources: Identity verification and fraud prevention data received from regulated third-party identity verification services, payment processors, and, where applicable, credit reference agencies;
• Regulatory sources: Data received from gaming regulatory bodies or law enforcement in connection with licence compliance obligations.

5 Purposes & Legal Basis for Processing

spin888 processes personal data for the following purposes and on the following legal bases:

• Account creation and management — necessary for performance of the contract between you and spin888;
• Identity verification (KYC) — necessary for compliance with legal obligations under AML and gaming licence requirements;
• Payment processing — necessary for performance of the contract;
• Responsible gaming monitoring — legitimate interest in protecting players from gambling-related harm, and compliance with regulatory responsible gaming obligations;
• Fraud prevention and platform security — legitimate interest and legal obligation;
• Customer support — legitimate interest in resolving member enquiries and maintaining service quality;
• Marketing communications — where you have provided explicit consent, we may send promotional communications regarding spin888 products and offers. You may withdraw consent at any time;
• Regulatory compliance and reporting — legal obligation under gaming licence and applicable AML legislation.

6 Sharing Your Personal Data

spin888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Service providers: Third-party providers engaged by spin888 to deliver platform services, including payment processors (Touch n Go eWallet, Boost, banking partners), identity verification services, cloud infrastructure providers, and customer support software vendors. All service providers are bound by data processing agreements that restrict their use of your data;
• Gaming regulators: Where required by our international gaming authority licence, we may be obligated to share data with regulatory bodies;
• Law enforcement: In response to lawful requests from law enforcement or other governmental authorities, where spin888 is legally required to disclose data;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of spin888's business, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

7 International Data Transfers

Some of spin888's service providers operate infrastructure outside of Malaysia. Where personal data is transferred internationally, spin888 ensures that appropriate safeguards are in place — including contractual data protection clauses consistent with applicable data protection standards — to protect your data to a standard at least equivalent to that provided under applicable Malaysian data protection law.

8 Data Retention

spin888 retains personal data for as long as necessary to fulfil the purposes described in this policy. Specific retention periods are as follows:

• Account and transaction records: Retained for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations under applicable gaming licence requirements;
• KYC documentation: Retained for a minimum of 5 years following the end of the business relationship;
• Platform usage and session logs: Retained for 13 months for security and analytics purposes, then aggregated or deleted;
• Support communications: Retained for 3 years following resolution of the relevant enquiry;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence the basis of past communications.

9 Cookies & Tracking Technologies

spin888 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly necessary cookies: Required for platform functionality, including session management and login state persistence. These cannot be disabled without impairing platform operation;
• Analytics cookies: Used to collect aggregate data about platform usage patterns to improve performance. Data collected is anonymised where technically feasible;
• Security cookies: Used to detect and prevent fraudulent activity and bot access.

spin888 does not place third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings, noting that disabling necessary cookies will affect platform functionality.

10 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by spin888:

• Right of access: You may request a copy of the personal data spin888 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where spin888 has no legal obligation to retain it;
• Right to restriction: You may request that spin888 restrict processing of your data in certain circumstances;
• Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interest, including for direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact spin888 at [email protected]. Requests will be acknowledged within 5 business days and resolved within 30 days, or such extended period as may be permitted by applicable law with notice to you.

11 Children's Privacy

The spin888 platform is strictly for individuals aged 21 and above. spin888 does not knowingly collect or process personal data relating to individuals under the age of 21. If spin888 discovers that personal data relating to an underage individual has been collected, that data will be deleted and the associated account closed immediately. If you believe an underage individual has registered on the spin888 platform, please contact us immediately at [email protected].

12 Security Measures

spin888 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks of processing. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption at rest for sensitive personal and financial data;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular security testing and vulnerability assessments;
• Incident response procedures to detect, contain, and notify in the event of a data breach.

While spin888 maintains robust security measures, no system is entirely immune to breach. In the event of a data breach that poses a risk to your rights, spin888 will notify you and relevant authorities within the timeframes required by applicable law.

13 Third-Party Links

The spin888 platform does not contain links to third-party websites. In the event that third-party payment processor interfaces are displayed in connection with deposit or withdrawal transactions, those interfaces are governed by the respective payment provider's privacy policy. spin888 is not responsible for the privacy practices of any third-party payment processor beyond the data processing agreements in place between spin888 and those providers.

14 Changes to This Privacy Policy

spin888 reserves the right to amend this Privacy Policy at any time. Where changes are material, we will notify registered members via the email address on file at least 14 days before the revised policy takes effect. The effective date at the top of this policy will be updated to reflect the date of each revision. Continued use of the spin888 platform following the effective date of a revised policy constitutes acceptance of that policy.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data spin888 holds about you, please contact us via:

• Email: [email protected]
• Live Chat: Available 24/7 from within your spin888 Member Account dashboard

spin888 will respond to all privacy-related enquiries within 5 business days of receipt.