Privacy Policy – spd88 Malaysia Online Casino

Scope & Controller
Data We Collect
How We Use Your Data
Legal Basis
Data Sharing
Cookies & Tracking
Data Retention
International Transfers
Your Rights
Data Security
Children's Privacy
Changes to This Policy
Contact & Complaints

1. Scope & Data Controller

This Privacy Policy applies to all personal data processed by spd88 in connection with the operation of the spd88 online gaming platform accessible at spd88.asia and its associated mobile interfaces. spd88 acts as the data controller in respect of personal data collected directly from Members and visitors to the platform.

By registering an account with spd88 or continuing to use the spd88 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how spd88 processes personal data as described herein, you should not create an account or continue using the platform. You may contact the spd88 data protection team at any time using the contact details provided in Section 13 of this policy.

This policy is intended to comply with applicable data protection legislation, including but not limited to the Personal Data Protection Act 2010 of Malaysia (PDPA 2010), which governs the processing of personal data in commercial transactions involving Malaysian data subjects.

2. Personal Data We Collect

spd88 collects personal data in the following categories depending on how you interact with the platform:

2.1 Registration & Identity Data

Full legal name as it appears on your government-issued identification document
Date of birth (for age verification — all spd88 members must be 21 years of age or older)
Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor)
Email address and mobile phone number
Copies of identity documents submitted during Know Your Customer (KYC) verification (e.g., MyKad, passport)
Selfie photographs or video submitted for facial liveness verification where required

2.2 Financial & Transaction Data

Payment method details including e-wallet account identifiers (Touch 'n Go eWallet, Boost), bank account numbers, and FPX transaction reference numbers
Deposit and withdrawal transaction histories including amounts in MYR, timestamps, and payment channel used
Records of all bets placed, games played, and winnings received on the spd88 platform

2.3 Technical & Usage Data

IP address, device type, operating system, and browser type at time of login and throughout sessions
Session duration, pages visited, and features accessed within the spd88 platform
Geolocation data (country and region level only) derived from IP address
Cookie identifiers and similar tracking technologies as described in Section 6

2.4 Communications Data

Content of messages exchanged with spd88 customer support via live chat, email, or any other support channel
Preferences expressed regarding marketing communications
Feedback, complaints, and survey responses submitted by Members

Note: spd88 does not collect full payment card (credit or debit card) numbers. All card-based payment processing, where applicable, is handled by PCI-DSS compliant third-party payment processors who do not pass full card data to spd88.

3. How spd88 Uses Your Personal Data

spd88 processes your personal data for the following purposes:

Purpose	Description
Account Administration	Creating, maintaining, and managing your spd88 Member account including login authentication and password reset.
Age & Identity Verification	Confirming that all Members are 21 years of age or older and that account details match verified identity documents.
Payment Processing	Processing deposits and withdrawals in MYR via supported local payment channels including Touch 'n Go eWallet, Boost, and FPX banking.
Fraud & AML Compliance	Monitoring transactions and account behaviour to detect and prevent fraud, money laundering, and other prohibited activities.
Responsible Gaming	Monitoring gameplay patterns to identify potential problem gambling behaviour and enforcing Member-requested responsible gaming tools including deposit limits and self-exclusion.
Customer Support	Responding to Member queries, resolving disputes, and processing complaints.
Marketing Communications	Sending promotional offers, bonus notifications, and platform updates where a Member has provided consent to receive such communications. Members may opt out at any time.
Platform Improvement	Analysing aggregated usage data to improve the spd88 platform's performance, game selection, and user experience.
Legal Compliance	Meeting obligations under applicable law including PDPA 2010, anti-money laundering regulations, and international gaming authority licence conditions.

4. Legal Basis for Processing

spd88 relies on the following legal bases under applicable data protection law for processing your personal data:

Contractual necessity: Processing required to perform the Member agreement — including account creation, payment processing, and game access — is carried out on the basis that it is necessary to provide the spd88 service you have requested.
Legal obligation: Processing required by applicable law, including identity verification under anti-money laundering regulations and age verification under gaming licence conditions, is carried out to fulfil legal obligations binding on spd88.
Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of spd88's legitimate interests, balanced against Members' privacy rights.
Consent: Marketing communications and non-essential cookies are processed only where you have given explicit, freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Third Parties

spd88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. spd88 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in Section 3:

Payment service providers: Touch 'n Go eWallet, Boost, Maybank FPX, CIMB Clicks, Public Bank, and other FPX-connected banks as required to process deposits and withdrawals in MYR.
Identity verification providers: Third-party KYC and age-verification services that process identity document copies and liveness checks on spd88's behalf under binding data processing agreements.
Game content providers: Licensed game studios and RNG certification agencies that require limited technical session data to deliver certified gaming content on the spd88 platform.
Regulatory and law enforcement authorities: Where spd88 is required by applicable law, court order, or regulatory direction to disclose Member information, including obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) of Malaysia.
Professional advisors: Legal, audit, and compliance advisors engaged by spd88 under strict confidentiality obligations.

All third parties who process personal data on spd88's behalf are required to do so under written data processing agreements that impose obligations equivalent to those in this Privacy Policy.

6. Cookies & Tracking Technologies

The spd88 platform uses cookies and similar technologies to operate core platform functions and to understand how Members use the service. The categories of cookies used by spd88 are as follows:

Strictly necessary cookies: Essential for platform operation, including authentication session cookies that keep you logged in to your spd88 account and security cookies that protect against cross-site request forgery. These cannot be disabled without preventing core platform functionality.
Functional cookies: Store Member preferences such as language settings, preferred game categories, and responsible gaming tool configurations. Disabling these will require you to re-enter preferences on each visit.
Analytics cookies: Aggregate, anonymised data on page views, session durations, and feature usage, used by spd88 to identify platform improvements. These cookies are only set where Member consent has been obtained.

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to spd88 or using core platform features.

7. Data Retention

spd88 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods required by applicable law and regulatory obligations:

Account registration data and KYC documentation: minimum 5 years from account closure, in accordance with anti-money laundering record-keeping requirements.
Financial transaction records: minimum 7 years from the date of each transaction, in accordance with applicable financial reporting obligations.
Customer support communications: 3 years from the date of the interaction, or longer where the communication relates to an ongoing complaint or legal matter.
Marketing consent records: retained for as long as the consent is active plus 2 years from the date of withdrawal, to demonstrate that communications were sent with valid consent.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymous, aggregated data derived from Member activity may be retained indefinitely for statistical and research purposes, as such data does not constitute personal data.

8. International Data Transfers

spd88 primarily processes Member data within infrastructure located in jurisdictions covered by the platform's operating licence. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to Malaysia's PDPA 2010, spd88 implements appropriate safeguards including contractual clauses that impose data protection obligations on the recipient equivalent to those in this Privacy Policy. spd88 does not transfer Malaysian Member data to third parties in jurisdictions with inadequate data protection frameworks without such safeguards in place.

9. Your Data Rights

As a data subject under applicable Malaysian and international data protection law, you have the following rights in respect of personal data held by spd88:

Right of access: You may request a copy of the personal data spd88 holds about you.
Right of correction: You may request that inaccurate or incomplete personal data be corrected.
Right to withdraw consent: Where processing is based on consent (e.g., marketing emails, analytics cookies), you may withdraw that consent at any time.
Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, subject to spd88's overriding legal or licence-based obligations.
Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to spd88's legal retention obligations which may override this right.

To exercise any of these rights, please contact the spd88 data protection team using the details in Section 13. spd88 will respond to all verified data rights requests within thirty (30) calendar days. Complex requests may require an additional extension of up to sixty (60) days, in which case spd88 will notify you of the extended timeline.

Identity Verification Required: For the protection of all Members, spd88 requires that data rights requests be submitted from the email address registered to your account, or be accompanied by sufficient identifying information to verify your identity before any data is disclosed or amended.

10. Data Security

spd88 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed on the platform. These measures include:

Transport Layer Security (TLS/SSL) encryption for all data transmitted between your browser or mobile device and the spd88 platform.
Encryption at rest for sensitive data stored in spd88's databases, including identity document copies and financial account details.
Role-based access controls ensuring that spd88 staff can only access Member data that is necessary for their specific job function.
Regular penetration testing and vulnerability assessments of the spd88 platform infrastructure.
Incident response procedures for detecting, assessing, and notifying affected Members of any data breach that poses a risk to their rights, within the timeframes required by applicable law.

While spd88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Members should also take steps to protect their own accounts, as described in the spd88 Terms & Conditions.

11. Children's Privacy

The spd88 platform is strictly intended for adults aged 21 years and above. spd88 does not knowingly collect or process personal data of individuals under the age of 21. If spd88 discovers that personal data has been collected from an individual who is under 21, that data will be deleted and the associated account permanently closed in accordance with our age verification policy. Parents or guardians who believe that a minor has registered an account with spd88 should contact our support team immediately.

12. Changes to This Privacy Policy

spd88 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or spd88's data processing practices. Where changes are material, spd88 will provide advance notice to registered Members via their registered email address and/or a prominent notice on the spd88 platform, no less than fourteen (14) calendar days before the changes take effect. Continued use of the spd88 platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. Members who do not accept the revised policy may close their account by contacting spd88 support.

13. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or spd88's processing of your personal data, please contact the spd88 data protection team at: support@spd88.asia

spd88 will acknowledge all privacy enquiries within 48 hours and aims to fully resolve them within 30 calendar days. If you are not satisfied with spd88's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

spd88 Privacy Policy

Contents