Privacy Policy Spin888 – Our Commitment to Protecting Your Data

Spin888 collects two main categories of information: information you provide directly to us, and information collected automatically as you use the platform.

Information you provide directly:

• Registration information: Full name, email address, Malaysian phone number, date of birth, and password upon registering your Spin888 account.
• Identity verification (KYC) information: A copy of your Malaysian identity card (MyKad) or passport when required for account verification or withdrawal processing.
• Financial information: Details of your chosen payment method — whether Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or an FPX account via Maybank2u or CIMB Clicks. Full bank card numbers are not stored by Spin888 — they are processed directly by authorised payment processors.
• Communications: Any messages, complaints, or enquiries you send via live chat, email, or WhatsApp to the Spin888 support team.

Information collected automatically:

• Log and device data: Your IP address, web browser type, operating system, device model, and access time when you visit spin888.express.
• Platform usage data: Pages visited, games played, session duration, bets placed, and other interactions within the Spin888 platform.
• General location data: Country or region detected based on your IP address for regional verification purposes. Spin888 does not collect the precise GPS location of your device.
• Cookie data: Information collected through cookies and other tracking technologies as described in Section 7.

Spin888 uses collected data for limited and specific purposes only. Below is a complete list of the purposes for which your personal data may be used:

• Account management: Creating and maintaining your Spin888 account, processing logins, and verifying your identity when required.
• Financial transaction processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and managing your winnings withdrawals in Malaysian Ringgit (RM).
• Provision of gaming services: Enabling you to access Sports Betting, live roulette, poker, slots, and all other games available on Spin888.
• Security and fraud prevention: Detect and prevent any attempts at fraud, money laundering, or platform abuse involving Spin888 accounts.
• Customer support: Responding to inquiries, resolving disputes, and providing technical support to you.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including financial reporting and anti-money laundering (AML) requirements.
• Platform improvements: Analyse aggregated usage patterns (not individual data) to improve user experience, platform performance, and game offerings on Spin888.
• Marketing communications: Sending you information about promotions, bonuses, and new offers at Spin888 – only if you have agreed to receive such communications.

Spin888 does not sell, rent, or distribute members' personal data to third parties for commercial purposes. However, there are limited situations where Spin888 needs to share certain information with external parties to keep the platform's services functioning properly:

In cases where Spin888 receives a request from legal authorities to disclose user data, we will carefully assess each request to verify its legal validity before sharing any information. Where possible, Spin888 will inform you of any such request unless prohibited from doing so by law.

Spin888 continually invests in security infrastructure to ensure the personal data and financial information of our members is protected at all times. The key security measures we maintain are:

• Encryption in transit: All communications between your device and Spin888's servers are encrypted using TLS 1.3 protocol with 256-bit SSL certificates.
• Encryption at rest: Sensitive data — including passwords (hashed using the bcrypt algorithm) and financial information — is encrypted when stored in Spin888's database.
• Layered access controls: Access to user data within Spin888's internal systems is restricted on a "need-to-know" basis – only staff who require access to carry out their duties are granted permission.
• Two-factor authentication (2FA): Spin888 provides and encourages the use of 2FA on all member accounts as an added layer of security.
• Real-time monitoring: Spin888's security systems monitor account activity and transactions 24/7 to detect any unusual or suspicious behaviour.
• Regular security assessments: Spin888 conducts regular penetration testing and security audits to identify and address system vulnerabilities before they can be exploited.

While Spin888 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. We therefore also encourage you to take your own security precautions, such as using a strong and unique password for your Spin888 account and never sharing your login credentials with anyone.

Spin888 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. The following is a general guide to our data retention periods:

• Active account data: Retained for as long as your Spin888 account is active and in use.
• Financial transaction record data: Retained for seven (7) years following the transaction, in accordance with Malaysian financial and reporting legal requirements.
• KYC verification documents: Retained for five (5) years after account closure or the date of last verification, whichever is later.
• Customer support communication logs: Retained for two (2) years from the date of the communication, unless related to an ongoing dispute.
• Technical log data: Retained for 90 days for troubleshooting and security purposes, then automatically deleted.
• Marketing and preference data: Retained until you withdraw your consent or close your account.

When your data is no longer needed and there is no legal requirement to retain it, Spin888 will securely delete or anonymise it so that it can no longer be linked back to you.

As a Spin888 member, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@spin888.express with the email subject "Privacy Rights Request".

• Right to access: You may request a copy of all personal data Spin888 holds about you. We will provide this information in a readable format within 30 working days.
• Right to rectification: If any data we hold about you is inaccurate or out of date, you have the right to request a correction. Most basic information can be updated directly in your Spin888 account settings.
• Right to erasure: Under certain circumstances, you may request that Spin888 delete your personal data. This right is subject to our legal obligations to retain certain records, such as financial transaction records.
• Right to restriction of processing: You may request that we restrict how we process your data in certain circumstances, for example while you are disputing the accuracy of your data.
• Right to withdraw consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time.
• Right to Data Portability: You may request to receive the data you have provided to us in a structured, machine-readable format.

Spin888 uses cookies and similar technologies to keep the platform running smoothly, enhance your experience, and understand how users interact with our website. We use four types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Spin888 platform to function. They allow you to log in, save your language preferences, and remain in your game session. They cannot be disabled without affecting the platform's core functionality.
• Functional Cookies: Storing your preferences such as display settings and language so you don't have to reset them each time you visit Spin888. This data is not shared with third parties.
• Analytics Cookies: Helps us understand how users interact with the Spin888 platform in aggregate — which pages are most visited, where users encounter issues — so we can improve the overall experience. This information is collected anonymously.
• Marketing Cookies: Used to display relevant Spin888 promotional content to you. These cookies are only activated with your consent and can be disabled at any time.

You can manage your cookie preferences through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling essential cookies may affect your experience on the Spin888 platform.

The security of your financial data is Spin888's top priority. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX through Maybank2u or CIMB Clicks, here is how we protect your financial information:

• All financial transactions on Spin888 are conducted in Malaysian Ringgit (MYR) and processed through fully encrypted payment channels.
• Spin888 does not store your PIN numbers, e-wallet passwords, or online banking login credentials. This information is handled directly and exclusively by your chosen payment processors — Touch 'n Go, GrabPay, DuitNow, and others — each of which maintains their own high security standards.
• Every deposit and withdrawal transaction on Spin888 is logged and can be reviewed by you through your account's transaction history at any time.
• In cases of suspicious transactions, Spin888 reserves the right to temporarily freeze the account and contact you for additional verification before allowing the transaction to proceed — this is a protective measure in your best interest.

Spin888 may update this Privacy Policy from time to time to reflect changes in our data protection practices, relevant legal requirements, or the introduction of new platform features. When changes are made:

• The "Last Updated" date at the top of this page will be revised to reflect the latest version of the policy.
• For material changes — those that significantly affect how we use your data — we will notify you via your registered email and/or an in-platform Spin888 notification at least 14 days before the changes take effect.
• For minor changes such as clarifications or language corrections, we may update this page without sending a specific notification.
• Your continued use of the Spin888 platform after the updated Privacy Policy's effective date constitutes your acceptance of those changes.

We encourage you to review this Privacy Policy page periodically to stay informed about how Spin888 protects your information. If you disagree with any changes made, you may close your account and withdraw your remaining funds before the new policy takes effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Spin888 handles your personal data, please reach out to us through the following channels:

• Email: support@spin888.express – use the subject line "Privacy Inquiry" for faster handling
• Live Chat: Available directly on the Spin888 platform, 24 hours a day, 7 days a week
• WhatsApp: Spin888 support WhatsApp channel – response within 30 minutes during operating hours

Spin888's privacy team will respond to all privacy-related inquiries within 3 working days. For formal data rights requests (access, deletion, correction), please refer to Section 6 above for details on the applicable process.