Privacy Policy — spingo88

1. Overview & Scope

This Privacy Policy applies to all personal data processed by spingo88 in connection with the operation of the spingo88 online casino and sportsbook platform at spingo88.one. It covers data collected when you visit our website, register an account, make deposits or withdrawals, interact with our games or sportsbook, contact our support team, or otherwise engage with any spingo88 service.

spingo88 takes data privacy seriously. We process personal data only for legitimate, defined purposes and in a manner consistent with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and equivalent international frameworks where applicable.

2. Data Controller

The data controller responsible for your personal data is the entity operating the spingo88 platform under its international gaming licence. For privacy-related enquiries, requests, and complaints, the designated point of contact is the spingo88 Data Protection team, reachable via the contact details in Section 14 of this Policy.

Where spingo88 engages third-party service providers who process personal data on our behalf (for example, payment processors, KYC verification providers, and live chat software vendors), those parties act as data processors under contractual agreements that impose equivalent data protection obligations.

3. Data We Collect

spingo88 collects personal data across several categories depending on your interaction with the platform. The table below summarises the main data types collected:

spingo88 does not collect sensitive personal data categories (such as racial or ethnic origin, religious beliefs, or health data) except where strictly required by responsible gaming compliance obligations — for example, where a player voluntarily discloses a gambling-related health concern to our support team.

4. How We Use Your Data

spingo88 uses the personal data it collects for the following purposes:

• Account management — creating and maintaining your spingo88 player account, verifying your identity, and administering your profile settings;
• Service delivery — processing deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank transfer channels; delivering casino games and sportsbook services;
• Legal and regulatory compliance — satisfying KYC and anti-money laundering obligations under our licensing authority's requirements; retaining records as required by law;
• Fraud prevention and security — detecting and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct;
• Responsible gaming — monitoring betting patterns to identify potential problem gambling indicators and enabling self-exclusion or limit-setting tools;
• Customer support — responding to your queries and resolving complaints via live chat and email;
• Communications — sending transactional notifications (deposit confirmations, withdrawal approvals, account security alerts) and, where you have consented, promotional communications about bonuses and new features;
• Platform improvement — analysing aggregated usage data to improve the spingo88 user experience, game library curation, and mobile performance.

spingo88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Legal Basis for Processing

Each processing activity carried out by spingo88 is conducted on one or more of the following legal grounds:

• Contractual necessity — processing required to perform the contract between you and spingo88 (operating your account, processing payments, delivering games);
• Legal obligation — processing required to comply with KYC, AML, licensing, and regulatory requirements;
• Legitimate interests — fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights;
• Consent — for optional marketing communications, which you may withdraw at any time by contacting support or updating your account preferences.

6. Cookies & Tracking Technologies

spingo88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session state during gameplay, and analyse aggregate website usage. The main categories of cookies used are:

• Strictly necessary cookies — required for the platform to function, including session management, login state, and security tokens. These cannot be disabled.
• Functional cookies — remember your language preference, display settings, and notification preferences.
• Analytics cookies — aggregate, anonymised data on page visits, game popularity, and navigation paths used to improve the spingo88 experience. No individual player data is shared with analytics providers.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the spingo88 platform from functioning correctly.

7. Data Sharing & Third Parties

spingo88 shares personal data with third parties only where necessary and under appropriate contractual safeguards. Categories of recipients include:

• Payment processors — Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX providers, and Malaysian banking partners require transaction data to process deposits and withdrawals;
• KYC and AML verification providers — third-party identity verification services receive identity documentation to verify your age and identity;
• Game providers — live casino and slot game studios (such as Evolution Gaming and Pragmatic Play) receive session data required to deliver their games;
• Licensing authority — our gaming licence regulator may require access to player records for audit and compliance purposes;
• Law enforcement — where required by applicable law, court order, or regulatory direction, spingo88 may disclose personal data to relevant authorities.

All third-party processors operating on behalf of spingo88 are bound by data processing agreements that prohibit secondary use of the data shared with them.

8. International Data Transfers

spingo88 operates infrastructure across multiple jurisdictions. Your personal data may be transferred to and processed in countries outside Malaysia where spingo88's technology partners and licensing infrastructure are located. In all such cases, spingo88 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and where applicable, adequacy decisions — to protect your data to a standard equivalent to that required under Malaysian data protection law.

9. Data Retention

spingo88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law and licensing obligations:

• Account and transaction records: minimum 5 years from account closure or last transaction, in compliance with AML regulatory requirements;
• KYC identity documents: minimum 5 years from the date of verification;
• Customer support communications: 2 years from resolution of the relevant matter;
• Technical and analytics data: up to 24 months in anonymised aggregate form.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data spingo88 holds about you:

• Right of access — you may request a copy of the personal data spingo88 holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete data;
• Right to erasure — you may request deletion of your data in circumstances where retention is no longer legally required;
• Right to restrict processing — you may request that we limit the use of your data in certain circumstances;
• Right to object — you may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact the spingo88 Data Protection team at the details in Section 14. We will respond within 30 days of receiving a valid request. Note that certain rights may be limited where retention of data is required by law or licensing authority mandate.

11. Data Security

spingo88 implements technical and organisational security measures appropriate to the risk associated with processing personal data. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and spingo88 servers;
• Encryption of sensitive data fields at rest, including identity document copies and financial data;
• Role-based access controls ensuring that spingo88 staff can only access the minimum data necessary for their function;
• Two-factor authentication requirements for all internal administrative system access;
• Regular third-party security audits and penetration testing of platform infrastructure;
• Automated fraud detection systems monitoring for anomalous account activity.

In the event of a data breach that poses a risk to your rights and freedoms, spingo88 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

12. Children's Privacy

The spingo88 platform is strictly intended for individuals aged 21 years and above. 21+ spingo88 does not knowingly collect personal data from persons under the age of 21. Age verification is enforced through mandatory KYC procedures prior to first withdrawal and may be applied at account registration or at any subsequent stage.

If spingo88 discovers that a person under the age of 21 has created an account, the account will be immediately closed, any balance returned in accordance with the Terms & Conditions, and all associated data deleted to the extent permitted by legal obligations.

13. Changes to This Policy

spingo88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email notice and/or a prominent notice on the platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically.

14. Contact & Complaints

For any questions, access requests, or complaints regarding the handling of your personal data by spingo88, please contact our Data Protection team:

• Live Chat: Available 24/7 from the spingo88 support section — select "Privacy / Data Request" as the subject
• Email: [email protected] — include "Privacy Request" in the subject line
• Response Time: Within 30 days of receipt of a valid, verifiable request

If you are not satisfied with spingo88's response to your privacy complaint, you may refer the matter to the relevant data protection supervisory authority in the jurisdiction where spingo88 holds its primary data processing registration.