1 Introduction
iSpin88 ("iSpin88", "we", "us", "our") is committed to safeguarding the privacy and personal data of all individuals who access or use the iSpin88 online gaming platform at ispin88.cam ("the Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed, stored, and protected.
This Policy applies to all users of the Platform, including registered account holders, visitors who browse the Platform without registering, and any individual whose personal data is submitted to us in the course of a transaction or enquiry. By accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.
iSpin88 processes personal data in accordance with applicable data protection laws and regulations. We are committed to handling all personal data responsibly, transparently, and with respect for the rights of our players — whether they are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else in Malaysia.
Your data, your rights. You have meaningful rights over the personal data iSpin88 holds about you, including rights of access, correction, erasure, and objection. Section 10 of this Policy sets out how to exercise those rights.
2 Definitions
For the purposes of this Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, location data, or online identifiers such as IP address. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | iSpin88, the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of iSpin88 under written instruction and subject to confidentiality obligations. |
| "Consent" | A freely given, specific, informed, and unambiguous indication by you that you agree to the processing of your personal data for a stated purpose. |
| "KYC Data" | Identity and address verification documents collected as part of iSpin88's Know Your Customer obligations, including MyKad copies, passport scans, and proof of address documents. |
| "Cookies" | Small text files placed on your device by the Platform to store preference and session information. |
3 Information We Collect
iSpin88 collects personal data through several channels, including direct submission by you during account registration, automatic collection through your use of the Platform, and from third-party sources in connection with our verification obligations. The categories of personal data we collect include:
- Full legal name as it appears on your government-issued identity document
- Date of birth (to verify the 21+ age requirement)
- Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru)
- Email address
- Mobile phone number
- Username and encrypted password
- Preferred currency (MYR by default)
- Scanned copy or photograph of Malaysian MyKad, passport, or driver's licence
- Selfie photograph with identity document (liveness verification)
- Proof of address documents (utility bills from Tenaga Nasional Berhad, Syabas, or Indah Water; bank statements from Maybank, CIMB, Public Bank, Hong Leong, or similar)
- Proof of payment method ownership (e-wallet screenshots or bank statements)
- Deposit and withdrawal amounts and timestamps
- Payment method identifiers (masked card numbers, e-wallet account IDs for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect)
- Transaction reference numbers
- Cryptocurrency wallet addresses (where applicable)
- Game session history, including game titles played, bet amounts, win/loss records, and session durations
- Sports betting selections, stake amounts, and settlement outcomes
- Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)
- Bonus participation history and wagering requirement progress
- IP address and geolocation data (country and region level)
- Device type, operating system, and browser version
- Session identifiers and authentication tokens
- Platform interaction logs (page visits, clicks, feature usage)
- Content of customer support conversations (live chat transcripts, email correspondence)
- Feedback, complaints, and dispute correspondence
- Survey or promotional participation responses
4 How We Use Your Data
iSpin88 uses the personal data we collect solely for legitimate, specified purposes. We do not use personal data for purposes incompatible with those stated at the time of collection. The primary purposes for which we process your personal data are:
| Purpose | Description |
|---|---|
| Account Administration | Creating, maintaining, and managing your iSpin88 account, including authentication, balance management, and preference settings. |
| Identity Verification | Conducting KYC checks to verify your identity, age (21+ requirement), and residential address in compliance with AML and regulatory obligations. |
| Payment Processing | Facilitating deposits and withdrawals through your chosen Malaysian payment method (e.g., DuitNow, Touch 'n Go eWallet, Maybank2u, FPX) and maintaining transaction records. |
| Fraud & AML Prevention | Monitoring transactions and account activity to detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. |
| Customer Support | Responding to enquiries, resolving disputes, processing complaints, and providing technical assistance through our 24/7 live chat and email support channels. |
| Responsible Gambling | Monitoring gameplay patterns to identify potential problem gambling behaviours, administering responsible gambling tools, and enforcing self-exclusion and deposit limit settings. |
| Platform Improvement | Analysing aggregated usage data to improve Platform performance, enhance the user experience, and develop new features and game offerings. |
| Marketing Communications | Sending promotional offers, bonus notifications, and relevant Platform updates to players who have opted in to receive marketing communications. You may unsubscribe at any time. |
| Legal Compliance | Meeting our obligations under applicable law, including responding to lawful requests from competent regulatory or law enforcement authorities. |
5 Legal Basis for Processing
iSpin88 processes your personal data on one or more of the following legal bases:
- Contractual Necessity: Processing required to fulfil our obligations to you under the iSpin88 Terms & Conditions, including account management, payment processing, and game delivery.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including AML laws, KYC requirements, and lawful regulatory instructions.
- Legitimate Interests: Processing carried out to pursue iSpin88's legitimate business interests — including fraud prevention, Platform security, and service improvement — where those interests do not override your rights and freedoms.
- Consent: Processing based on your explicit, freely given consent — particularly for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Withdrawing Consent: Where we rely on consent as a legal basis for processing (such as marketing emails), you may withdraw that consent at any time by updating your notification preferences in your Account settings or by contacting our support team.
6 Sharing of Personal Data
iSpin88 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share personal data with the following categories of recipients solely for the purposes described in this Policy:
We engage trusted third-party service providers to assist in operating the Platform, including payment processing providers (such as those facilitating FPX, DuitNow, and e-wallet transactions), identity verification and KYC service providers, cloud infrastructure and hosting providers, fraud detection and cybersecurity services, and customer support platform operators. All such providers are bound by data processing agreements that prohibit the use of your personal data for any purpose other than providing the contracted service to iSpin88.
iSpin88 may disclose personal data to relevant regulatory authorities, financial intelligence units, law enforcement agencies, or other government bodies where required to do so by applicable law, court order, or lawful regulatory instruction. Such disclosures are made only to the extent strictly necessary and in accordance with applicable data protection requirements.
In the event of a merger, acquisition, restructuring, or sale of all or part of iSpin88's business assets, personal data may be transferred to the acquiring entity as part of the transaction, provided that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy. Affected users will be notified of any such transfer and of any material change to privacy practices that results.
Where necessary to facilitate gameplay, certain anonymised or pseudonymised session data (such as game session tokens) may be shared with our licensed game studio partners to deliver and support their games on the Platform. No directly identifiable personal data (such as your name or payment details) is shared with game studios.
7 Data Retention
iSpin88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention approach is as follows:
- Account and Registration Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
- KYC Documents: Retained for a minimum of five (5) years following account closure or the last verified transaction, as required under applicable financial regulations.
- Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
- Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a dispute or regulatory matter requires extended retention.
- Marketing Consent Records: Retained for three (3) years from the date of consent or withdrawal of consent, whichever is later.
- Technical Logs: Retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymised or deleted.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.
8 Data Security
iSpin88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the iSpin88 Platform is encrypted using industry-standard TLS protocols.
- Data Encryption at Rest: Sensitive personal data stored in our systems — including KYC documents and payment identifiers — is encrypted at rest using AES-256 encryption.
- Access Controls: Personal data is accessible only to authorised iSpin88 personnel and service providers with a legitimate need, subject to role-based access controls and audit logging.
- Two-Factor Authentication: All administrative access to iSpin88 internal systems requires multi-factor authentication. Players are also offered 2FA for their accounts.
- Regular Security Audits: iSpin88 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the Platform.
- Incident Response: In the event of a data security incident that is likely to affect your rights and freedoms, iSpin88 will notify affected users promptly and take all reasonable steps to contain and remediate the incident.
Your Responsibility: While iSpin88 takes robust technical precautions, account security also depends on the steps you take — particularly safeguarding your login credentials. Never share your password with anyone, including iSpin88 support staff, who will never ask for your password.
10 Your Rights
Subject to applicable data protection law, you have the following rights in respect of your personal data held by iSpin88. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) calendar days of receipt of a valid request.
- Right of Access: You have the right to request a copy of the personal data iSpin88 holds about you, along with information about how it is processed.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
- Right to Erasure ("Right to be Forgotten"): In certain circumstances, you have the right to request that we delete personal data we hold about you. This right may be limited where retention is required by law (e.g., AML record-keeping obligations).
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
- Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have the right to object to direct marketing at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
Identity Verification: To protect the security of your personal data, we may ask you to verify your identity before processing a data rights request. This ensures that we do not inadvertently disclose your data to an unauthorised third party.
11 Protection of Minors
The iSpin88 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the account registration process, and all accounts are subject to mandatory KYC verification that includes proof of age.
If iSpin88 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to close the associated account, delete the personal data collected, and return any deposited funds to the verified payment method. If you believe that a minor may be using the Platform, please notify us immediately at [email protected].
21+ Only. Access to and use of iSpin88 by anyone under 21 years of age is strictly prohibited. We take our child protection obligations seriously and enforce them without exception.
12 International Data Transfers
iSpin88's primary operations and data infrastructure are maintained in accordance with the requirements of the jurisdictions in which we are licensed. In certain circumstances, personal data may be transferred to and processed in countries outside Malaysia — for example, where a third-party service provider (such as a cloud hosting provider or KYC verification service) operates infrastructure in another jurisdiction.
Where personal data is transferred internationally, iSpin88 ensures that appropriate safeguards are in place to protect the data, including contractual protections equivalent to those applicable in Malaysia. We do not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate supplementary measures.
13 Policy Amendments
iSpin88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users by email and/or via a prominent notice on the Platform, with a minimum notice period of seven (7) days prior to the changes taking effect, unless the change is required urgently to comply with applicable law or to address an immediate security concern.
The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the changes.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by iSpin88, please contact our Data Protection team using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.
Email: [email protected] — subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Live Chat: Available 24 hours a day, 7 days a week on the iSpin88 Platform. For urgent data security concerns, live chat is recommended for the fastest response.
This Privacy Policy was last reviewed and updated on 1 January 2026. All prior versions of this Policy are superseded by this version from the effective date stated above.