Privacy Policy

1 Who We Are

spin88 ("we," "us," "our") operates the online casino and sports betting platform accessible at spin88.bio and any associated subdomains or mobile interfaces. For the purposes of applicable data protection law, spin88 is the data controller responsible for the personal data of its registered account holders and website visitors.

This Privacy Policy is incorporated by reference into the spin88 Terms & Conditions and should be read alongside that document. Your use of the spin88 platform following the effective date of this Privacy Policy constitutes your acknowledgement that you have read and understood its contents.

2 Data We Collect

spin88 collects personal data through several means: directly from you during account registration and ongoing use of the platform; automatically through technical systems as you interact with our services; and, in limited circumstances, from third-party sources such as payment processors and identity verification providers.

The categories of personal data we may collect are set out in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless you voluntarily disclose such information in the course of a support communication, in which case it is handled with additional care and not processed for any purpose other than resolving your support matter.

3 How We Use Your Data

spin88 uses the personal data we collect only for the following defined purposes:

• Account registration and management: Creating and maintaining your spin88 player account, including identity verification and authentication;
• Service delivery: Processing deposits and withdrawals in Malaysian Ringgit (MYR), operating gaming services, settling bets, and crediting winnings to your wallet;
• Regulatory compliance: Fulfilling our obligations under the KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements prescribed by our licensing authority, including verifying your identity and the source of your funds;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and abuse of the platform;
• Responsible gaming: Monitoring account activity patterns to identify potential problem gambling behaviours and administering self-exclusion and other responsible gaming tools where requested by the account holder;
• Customer support: Responding to your enquiries, resolving disputes, and managing feedback;
• Marketing communications: Sending promotional offers, bonus notifications, and news relevant to your spin88 account — only where you have consented to receive such communications. You may withdraw consent at any time by contacting [email protected];
• Platform improvement: Analysing aggregated, anonymised usage data to improve the spin88 platform, optimise game performance, and enhance the user experience for Malaysian players;
• Legal obligations: Complying with applicable laws, court orders, and lawful requests from regulatory or law enforcement authorities.

spin88 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except for automated fraud detection systems which are subject to human oversight and may be reviewed upon request.

4 Legal Basis for Processing

spin88 processes personal data only where a lawful basis exists for doing so. The primary legal bases on which we rely are:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted — including account creation, payment processing, and game settlement;
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and licensing obligations;
• Legitimate interests: Processing carried out for purposes that are within spin88's reasonable legitimate business interests, including fraud prevention, platform security, and aggregated analytics — provided those interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, where your express consent has been obtained. You retain the right to withdraw consent at any time.

5 Data Sharing & Disclosure

spin88 does not sell, rent, or trade your personal data to third-party marketing organisations. We may share your personal data with the following categories of recipients, strictly for the purposes described in Section 3:

• Payment service providers: Including Touch n Go eWallet, Boost, DuitNow QR, Maybank, CIMB, Public Bank, and card networks (Visa/Mastercard), for the processing of deposits and withdrawals;
• Identity verification providers: Third-party KYC service providers engaged to assist with age verification and identity document authentication;
• Game studio partners: Licensed game content providers (such as JILI Games, PG Soft, and Spadegaming) may receive anonymised session data for game performance and RTP reporting purposes — no personally identifiable data is shared;
• Regulatory authorities: We may disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required by law or where we are legally compelled to do so;
• IT and infrastructure providers: Hosting, CDN, and security service providers engaged by spin88 to operate the platform, subject to data processing agreements that require them to handle your data only on our instructions.

All third parties with whom spin88 shares personal data are contractually required to maintain appropriate technical and organisational security measures to protect that data.

6 Cookies & Tracking Technologies

spin88 uses cookies and similar tracking technologies (including local storage and session tokens) on the spin88.bio platform. Cookies are small text files stored on your device that help us recognise returning users, maintain your login session, remember your preferences, and analyse how the platform is used.

The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function — including session authentication tokens that keep you logged in to your spin88 account. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Collect anonymised data about how visitors use the platform (pages visited, errors encountered, load times). Used exclusively for internal platform improvement. No personally identifiable information is collected.
• Functionality cookies: Store your preferences such as language settings and display options to provide a more personalised experience on subsequent visits.

You may configure your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse strictly necessary cookies, some parts of the spin88 platform — including the login session — will not function correctly.

7 Data Retention

spin88 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods required by our regulatory obligations:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, in accordance with standard AML record-keeping requirements applicable to licensed gaming platforms;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: Retained for two (2) years from the date of the last communication, or longer if the matter relates to an unresolved dispute;
• Technical and usage data (server logs): Retained for a rolling period of twelve (12) months, after which aggregated anonymised analytics data may be retained indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it impossible to re-identify the data subject.

8 Data Security

spin88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and spin88 servers;
• Encrypted storage of all sensitive personal data and financial information at rest;
• Access controls: Personal data is accessible internally only to spin88 personnel whose roles require access for the purposes described in this policy. Access is governed by role-based permissions and logged for audit purposes;
• Rate limiting and brute-force protection on the spin88 login endpoint and other authentication surfaces;
• Automated anomaly detection to identify unusual account activity patterns that may indicate unauthorised access.

Notwithstanding these measures, no internet-based system can be guaranteed to be fully secure. In the event of a personal data breach that presents a material risk to account holders, spin88 will notify affected individuals and the relevant regulatory authority in accordance with applicable breach notification obligations.

9 Your Rights

Subject to applicable data protection law, spin88 account holders have the following rights with respect to their personal data. These rights may be exercised by submitting a written request to [email protected]:

• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure ("right to be forgotten"): The right to request deletion of your personal data, subject to any overriding retention obligations described in Section 7;
• Right to restriction: The right to request that we restrict processing of your data in certain circumstances, for example while a dispute about its accuracy is resolved;
• Right to data portability: The right to receive a copy of your personal data in a structured, machine-readable format;
• Right to object: The right to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

spin88 will respond to all valid data rights requests within 30 days of receipt. In cases of complexity or high volume, the response period may be extended by a further 60 days, with notice provided within the initial 30-day window.

10 Children's Privacy

The spin88 platform is strictly intended for adults aged 21 years and above. spin88 does not knowingly collect or process personal data from persons under the age of 21. If spin88 discovers that a person under 21 has registered an account or provided personal data, that account will be closed immediately, all associated data will be deleted, and any deposited funds returned to the payment source used (net of any winnings already paid out, which will be forfeited).

If you are aware of a person under the age of 21 accessing or using spin88, please notify us immediately at [email protected].

11 Cross-Border Data Transfers

As an online platform with servers and service providers located in multiple jurisdictions, spin88 may transfer your personal data outside of Malaysia in the course of providing its services. Where such transfers occur, spin88 ensures that appropriate safeguards are in place, including contractual obligations on receiving parties that require them to afford your personal data a standard of protection equivalent to that applied within Malaysia.

By registering an account and using the spin88 platform, you acknowledge and consent to the transfer of your personal data to other countries for the purposes described in this Privacy Policy.

12 Amendments to this Privacy Policy

spin88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the way we operate our services. When material changes are made, we will provide advance notice via a notification within the spin88 platform or by email to your registered address.

The "Last updated" date at the top of this page will be revised to reflect the effective date of any amendment. We encourage account holders to review this Privacy Policy periodically. Your continued use of the spin88 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13 Contact & Complaints

For any questions, requests, or concerns regarding this Privacy Policy or the way spin88 handles your personal data, please contact us:

If you are not satisfied with spin88's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Malaysian users may also seek guidance from the Department of Personal Data Protection (PDPD) or its successor body under the Personal Data Protection Act 2010 (PDPA).