Privacy Policy

This Privacy Policy ("Policy") is issued by MySpin88 ("the Company", "we", "us", "our") and applies to all personal data processed in connection with your use of the MySpin88 website at myspin88.cam and all associated services, including online casino games, sports betting markets, live dealer tables, promotional programmes, and customer support interactions.

MySpin88 operates as an online casino and sports betting platform primarily serving players in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions of Malaysia. As such, we are acutely aware of the sensitivity of personal and financial data processed in this context, and we treat the protection of that data as a core operational obligation — not merely a legal formality.

By creating an account on MySpin88 or by accessing and using this Platform, you acknowledge that you have read and understood this Privacy Policy, and that you consent to the collection, processing, and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which collectively govern your relationship with MySpin88.

The following terms are used throughout this Privacy Policy with the meanings set out below:

MySpin88 collects personal data in three primary ways: data you provide directly to us, data generated automatically through your use of the Platform, and data obtained from third parties in limited circumstances. The categories of data we collect are set out in the table below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, unless this arises incidentally in the context of responsible gambling support. Where sensitive data is disclosed to us in such a context, it will be handled with additional care and stored only for the period necessary to action the support request.

MySpin88 uses the personal data we collect for the following purposes:

• Account management: To create and manage your MySpin88 account, process your registration, and authenticate your identity at login.
• Payment processing: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency methods (BTC, USDT). All transactions are conducted in Malaysian Ringgit (MYR).
• Identity verification (KYC): To verify that you are who you say you are, that you meet the minimum age requirement of 21 years, and to comply with anti-money laundering obligations.
• Game and betting services: To operate, deliver, and improve the casino games, live dealer tables, and sports betting markets available on the Platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance in English, Bahasa Melayu, and Mandarin.
• Responsible gambling compliance: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, and administer deposit limit settings as part of our duty of care obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited activity on the Platform.
• Platform improvement: To analyse aggregated usage data (de-identified where possible) to improve site performance, game selection, and user experience.
• Legal and regulatory compliance: To meet our obligations under applicable gaming, financial services, and data protection regulations.
• Communications: To send you transactional notifications (account activity, withdrawal confirmations), promotional communications (if you have opted in), and policy update notifications.

MySpin88 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you — including account management, payment processing, and service delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable legal requirements — including KYC/AML identity verification, record-keeping obligations, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, Platform security, responsible gambling monitoring, and improving the quality of our services is based on our legitimate interests as a Platform operator, balanced against your rights as a data subject.
• Consent: Where we rely on consent — for example, for marketing communications or the use of non-essential cookies — we will ask for your explicit consent before processing, and you may withdraw that consent at any time without affecting the lawfulness of prior processing.

MySpin88 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers: We share transaction data with payment partners — including Touch 'n Go, Boost, GrabPay, DuitNow gateway operators, FPX networks, and participating Malaysian banks — solely to process your deposits and withdrawals. These partners operate under their own privacy policies and applicable financial service regulations.
• Identity verification providers: We may engage regulated third-party KYC providers to assist with identity document verification and age confirmation. These providers act as Data Processors under binding data processing agreements and may not use your data for their own purposes.
• Game technology providers: Aggregated or pseudonymised gameplay data may be shared with game studio partners to enable game functionality and reporting. No directly identifiable personal data is shared with game providers beyond what is technically required for game operation.
• Regulatory and law enforcement authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where we have reasonable grounds to believe disclosure is necessary to prevent fraud, money laundering, or harm to a third party.
• Professional advisers: We may disclose data to our legal advisers, auditors, or accountants where necessary for the conduct of our business, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of MySpin88's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection safeguards.

MySpin88 processes financial transaction data in connection with deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, major Malaysian bank transfers (Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency methods (Bitcoin and USDT). All MYR-denominated transactions are processed natively without currency conversion.

We record the following transaction metadata for every deposit and withdrawal:

• The payment method type used (e.g., Touch 'n Go eWallet, FPX — Maybank)
• Transaction amount in MYR
• Transaction date and timestamp
• Transaction reference number assigned by the payment provider
• Transaction status (completed, pending, rejected)

MySpin88 does not store full bank account numbers, full card numbers, or full e-wallet credential details on our own servers. Payment credential data is handled directly by the relevant payment provider under their own security infrastructure. We retain only the minimum payment metadata necessary for transaction reconciliation, dispute resolution, and AML compliance.

Transaction records are retained for the periods specified in Section 8 (Data Retention) of this Policy, in compliance with applicable financial record-keeping requirements.

MySpin88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where deletion is not immediately technically feasible (for example, data held in encrypted backup archives), the data will be isolated from active processing and deleted at the next scheduled maintenance cycle.

MySpin88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Our entire Platform operates under HTTPS.
• Encryption at rest: Sensitive data fields — including password hashes, KYC document files, and payment reference data — are encrypted at rest using strong symmetric encryption.
• Access controls: Personal data is accessible only to MySpin88 staff and systems that have a genuine operational need. Access is governed by role-based permission systems with audit logging.
• Penetration testing and vulnerability scanning: We conduct regular security assessments of our Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: MySpin88 maintains a documented data breach response procedure. In the event of a breach that is likely to result in risk to affected individuals, we will take appropriate remedial action and notify relevant parties in accordance with applicable law.
• Staff training: All MySpin88 employees with access to personal data receive regular data protection and security awareness training.

MySpin88 uses cookies and similar technologies to operate the Platform. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Functionality cookies: Remember your preferences, such as language settings or previously selected game categories, to improve your experience on repeat visits.
• Performance and analytics cookies: Collect anonymised, aggregated information about how players interact with the Platform — such as page load times, error rates, and navigation patterns — to help us identify and fix performance issues.

MySpin88 does not use third-party advertising cookies, behavioural tracking pixels, or social media retargeting technologies. You will not see MySpin88 adverts following you around the internet based on data collected during your visit to our Platform.

You may manage or disable cookies through your browser settings. Please note that disabling cookies beyond the strictly necessary category may affect the functionality of certain Platform features. Refer to your browser's help documentation for instructions on managing cookies.

Subject to applicable data protection law and certain exceptions, you hold the following rights in respect of your personal data processed by MySpin88. To exercise any of these rights, please contact our support team using the details in Section 15.

We will aim to respond to all data subject requests within 30 calendar days. In complex cases, we may extend this by a further 60 days, in which case we will notify you of the extension and the reason for it.

MySpin88 is strictly an adult platform intended for players aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21, and we actively employ age verification measures to prevent underage access.

If you believe a minor may have created an account on MySpin88 using false information, please notify our support team immediately so that we can take appropriate action. We treat reports of this nature as high priority.

MySpin88 operates globally and may process your personal data on servers or through service providers located outside of Malaysia. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data to at least the standard required under applicable data protection law. Such safeguards may include:

• Standard contractual clauses or equivalent data transfer mechanisms agreed with the receiving entity.
• Binding data processing agreements that impose equivalent data protection obligations on the receiving party.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.

All of MySpin88's primary payment processing infrastructure for Malaysian players — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian bank channels — operates within Malaysia or under Malaysian financial regulatory oversight.

MySpin88 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, changes in our data processing activities, or improvements to our privacy practices. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered Players via email to the address registered on their account, where the changes are significant.
• Where required by law, obtain fresh consent from Players before processing their data under the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed of how MySpin88 is protecting your data. The most current version of this Policy is always accessible at myspin88.cam/privacy-policy. Your continued use of the Platform following notification of an updated Privacy Policy constitutes your acknowledgment of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way MySpin88 processes your personal data, please contact our support and data protection team using the details below. All privacy-related enquiries will be handled with appropriate confidentiality and care.

When contacting us regarding a data subject rights request, please state clearly the nature of your request (e.g., "Data Access Request", "Data Deletion Request", "Marketing Opt-Out") in the subject line or opening message to ensure it is routed to the appropriate team member promptly.

We aim to acknowledge all privacy-related requests within 5 business days and to resolve them within 30 calendar days of receipt, in accordance with our obligations under applicable data protection law.