888 Spins Privacy Policy — Data Protection for Malaysian Users

888 Spins ("we", "platform", "888spins.click") respects the privacy of every user who uses our services. This Privacy Policy has been drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and explains in detail how we handle your personal information.

This Privacy Policy applies to all users who access the 888 Spins website, register an account, conduct financial transactions, participate in games, or interact with any part of our platform — whether via web browser or mobile device.

We are committed to ensuring that your personal data is processed lawfully, fairly, and transparently. If you have any questions about how we handle your data, please contact us at support@888spins.click at any time.

Your continued use of the 888 Spins platform after any amendments to this Privacy Policy are published constitutes your acceptance of those changes. We encourage you to review this page periodically.

888 Spins collects various types of information depending on how you interact with our platform. The following are the categories of information we collect:

A. Information You Provide Directly

• Full name as stated on your Malaysian identity card (MyKad)
• National identity card number or passport number
• Date of birth
• Active email address
• Registered Malaysian mobile phone number
• Residential address in Malaysia
• Bank account details or digital wallet information (for payment purposes only)
• Account password (stored in encrypted form)

B. Automatically Collected Information

• Your device's IP address
• Web browser type and version
• Device type (smartphone, tablet, computer)
• Device operating system
• Date, time, and duration of visits to our website
• Pages you visit within the 888 Spins platform
• Referral source (how you found our website)
• Cookie data and similar tracking technologies

C. Transaction Information

• Deposit and withdrawal records including amounts, methods, and transaction timestamps
• Betting and gaming history
• Records of bonuses and promotions claimed
• Communication records with the customer support team

888 Spins uses the information collected for the following purposes:

We will not use your personal data for any purpose not stated here without first obtaining your consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), 888 Spins processes your personal data on the following legal bases:

• Consent: By registering an account with 888 Spins, you consent to our processing of your personal data for the purposes set out in this Privacy Policy.
• Contract Performance: Data processing necessary to fulfil the service agreement between you and 888 Spins — including account management, payment processing, and the delivery of gaming services.
• Legitimate Interests: Data processing for the purposes of fraud prevention, platform security, and service improvement that does not adversely affect your fundamental privacy rights.
• Legal Compliance: Data processing required to comply with Malaysian legal obligations, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.

888 Spins does not sell your personal data to any third party for marketing or commercial purposes. We only share your information in limited circumstances, as outlined below:

• Payment Service Providers: Information required to process your financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, and other licensed payment providers in Malaysia. These providers are bound by strict confidentiality agreements.
• Game Providers: The minimum data required to deliver games from third-party providers. This data is limited to session identifiers only and does not include your full personal information.
• Analytics Services: Anonymised usage data to understand platform usage patterns and improve the user experience.
• Legal Authority: When required by Malaysian law, court order, or a valid request from a relevant law enforcement agency.
• Corporate Processes: In the event of a merger, acquisition, or sale of company assets, user data may be transferred to the new entity — users will be notified in advance via email and in-platform notification.

888 Spins implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Key security measures we practise:

• 256-bit SSL Encryption: All communications between your browser or app and our servers are protected with 256-bit SSL/TLS encryption — the same security standard used by banking institutions.
• Data Encryption at Rest: Sensitive information stored in our databases, including passwords and financial details, is encrypted using industry-recognised algorithms.
• Internal Access Controls: Access to user data within 888 Spins is restricted to staff members who require that information to carry out their specific duties only (least privilege principle).
• 24/7 Monitoring: A cyber threat monitoring system operates around the clock to detect and respond to any suspicious activity.
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.
• Two-Factor Authentication (2FA): 2FA is available for all user accounts as an additional layer of protection.

While we take every reasonable step to protect your data, no security system can guarantee 100% protection against all threats. We encourage you to use a strong password, never share your login credentials with anyone, and contact us immediately if you suspect any unauthorised activity on your account.

888 Spins uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting the website's functionality.
• Performance Cookies: Collects information about how visitors use our website — such as the most frequently visited pages and any error messages encountered. All information is anonymised.
• Functional Cookies: Allows the website to remember your preferences (such as language or region) to provide a more personalised experience.
• Analytics Cookies: Helps us understand how users interact with the platform so we can improve the overall experience.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality or your experience on the 888 Spins platform. Essential cookies cannot be disabled as they are required for the platform's security and core operations.

Your personal data is stored on secure servers. 888 Spins retains your personal data for as long as your account remains active or as long as necessary to provide services to you.

Data retention period:

• Active Account Data: Retained for as long as your account remains active on the 888 Spins platform.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support Communication Data: Retained for 3 years for reference and dispute resolution purposes.
• Closed Account Data: After account closure, basic information will be retained for 5 years for legal compliance purposes before being permanently deleted.

If your data needs to be transferred outside Malaysia (for example, to backup servers or international service providers), we will ensure that protections equivalent to the standards set out under Malaysia's PDPA are fully observed.

As an 888 Spins user and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of the rights above, please submit a written request to support@888spins.click stating the right you wish to exercise and the identity verification details required. We will process your request within 30 working days.

888 Spins upholds a strict policy on the protection of minors. Our platform is not for individuals under 18 years of age. We do not knowingly collect or process any personal data from individuals under the age of 18.

During registration, we verify user age based on the date of birth provided. Our KYC process also includes identity document verification to confirm age eligibility.

The 888 Spins platform may contain links to third-party websites or services in certain instances. These links are provided for your convenience only. 888 Spins is not responsible for the privacy practices or content of those third-party websites.

We encourage you to read the privacy policy of every website you visit, particularly before providing any personal information. The 888 Spins Privacy Policy applies only to information collected on the 888spins.click platform and does not cover any other websites.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 888 Spins, please contact us through any of the following channels:

• Email: support@888spins.click
• Live Chat: Available 24 hours a day, 7 days a week via the 888 Spins platform

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex personal data rights requests, processing may take up to 30 working days.

If you are dissatisfied with how we handle your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital.

888 Spins reserves the right to update this Privacy Policy from time to time. Any material changes will be communicated via in-platform notifications or by email to registered users at least 14 days before the changes take effect.