Spinggo Privacy Policy

Spinggo ("we", "us", "our", "the Company", "the Platform") is the operator of the online gaming platform accessible at spinggo.cam ("the Website"). We are committed to protecting the privacy and personal data of every individual who accesses, registers on, or otherwise interacts with the Spinggo platform.

This Privacy Policy ("Policy") describes the types of personal information we collect from users ("you", "your", "Member", "Player") of the Spinggo platform, the purposes for which that information is collected and processed, how it is stored and protected, with whom it may be shared, and the rights available to you in respect of your personal data.

This Policy applies to all personal data collected through the Spinggo website, mobile-optimised interface, customer support channels, payment processing flows, and any other interaction you have with the Platform. It should be read alongside our Terms & Conditions, which constitute the full agreement governing your use of Spinggo.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

Spinggo collects personal data across several categories depending on the nature of your interaction with the Platform. We collect only what is necessary for the purposes described in this Policy.

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you are aged 21 or above)
• Username selected during registration
• Email address
• Copies of identity documents submitted during KYC verification (MyKad, passport, or driving licence)

3.2 Financial & Transaction Data

• Deposit and withdrawal transaction amounts and timestamps
• Payment method used (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, USDT TRC20)
• Bank account identifiers or e-wallet account references associated with your transactions
• Account balance history and MYR transaction records

3.3 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Session identifiers and login timestamps
• Cookie identifiers as described in Section 9

3.4 Gameplay & Usage Data

• Game activity records — games played, bet amounts, outcomes, and session durations
• Sports betting selections, stake amounts, and settlement results
• Bonus and promotion claim history
• Responsible gambling tool settings (deposit limits, self-exclusion requests, session reminders)

3.5 Communications Data

• Customer support interaction records — live chat transcripts and email correspondence
• Feedback or complaints submitted through support channels
• Responses to any surveys or account-related communications

Spinggo collects your personal data through the following channels and mechanisms:

• Directly from you — when you register an account, complete the KYC verification process, make a deposit, contact customer support, or update your account profile.
• Automatically through technology — via cookies, session tracking, server logs, and analytics tools that record your activity on the Platform as described in Section 9.
• From payment service providers — when you initiate a deposit or withdrawal, the relevant payment provider (FPX, DuitNow, Touch 'n Go, Boost, Maybank, CIMB, etc.) may transmit transaction confirmation data to us.
• From identity verification providers — where we engage third-party KYC or age verification services to authenticate your identity documents.
• From fraud and compliance monitoring systems — automated systems that flag unusual account activity for review by our compliance team.

Spinggo processes your personal data strictly for the purposes described below. We do not use your data for any purpose that is incompatible with the original reason for which it was collected.

Spinggo processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws and regulatory requirements, including identity verification, anti-money laundering checks, and record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, platform security, compliance monitoring, and aggregated analytics where our interests do not override your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided clear and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Spinggo does not sell, rent, or trade your personal data to third-party marketers or advertisers. We may share your data with third parties only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under contractual data processing agreements. These include payment processors, identity verification platforms, cloud hosting providers, customer support software providers, and fraud detection systems. All service providers are bound by confidentiality obligations and are permitted to process your data only as instructed by Spinggo.

7.2 Regulatory and Legal Authorities

Spinggo may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or binding regulatory instruction. We will notify you of any such disclosure to the extent permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Spinggo's assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer that materially affects this Policy.

7.4 Aggregated and Anonymised Data

We may share aggregated, anonymised data that cannot reasonably be used to identify you — for example, general platform usage statistics — with partners and analytics providers. Such data is not personal data for the purposes of this Policy.

All MYR payment transactions on Spinggo are processed through regulated third-party payment providers — including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and USDT TRC20 for cryptocurrency. Each of these providers operates under its own privacy and security standards, which apply to the data you submit directly to them during a payment transaction.

Spinggo does not store your full bank account credentials, online banking passwords, or full payment card numbers on our servers. We retain transaction confirmation data — including amounts, timestamps, payment method type, and partial account identifiers — for our financial records and compliance obligations.

Cryptocurrency transactions processed via USDT TRC20 are recorded on the public TRON blockchain. Spinggo does not control or have access to your external wallet details beyond the wallet address you provide for withdrawal purposes.

If you believe an unauthorised transaction has occurred on your Spinggo account, contact our support team immediately at support@spinggo.cam. Do not share your payment credentials with anyone, including our support staff.

Spinggo uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences, and collect aggregated usage analytics. By using the Spinggo website, you consent to our use of cookies as described in this Section.

9.1 Types of Cookies We Use

9.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using core platform features. Instructions for managing cookies are available in the help documentation for most major browsers including Chrome, Safari, Firefox, and Edge.

Spinggo retains your personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law or regulatory obligation.

• Active account data — retained for the full duration of your account's active status plus a post-closure period as required by our record-keeping obligations.
• Financial and transaction records — retained for a minimum of 7 years from the date of each transaction in compliance with financial record-keeping requirements.
• KYC and identity verification documents — retained for the period required under applicable anti-money laundering regulations, typically 5 to 7 years from account closure.
• Customer support communications — retained for up to 3 years from the date of the interaction.
• Marketing consent records — retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.
• Self-exclusion records — retained permanently where a permanent self-exclusion has been applied, to prevent re-registration during the exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Spinggo implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our primary security controls include:

• Encryption in transit: All data transmitted between your device and the Spinggo platform is encrypted using TLS 1.2 or higher (256-bit SSL). This is the same standard used by Maybank2u and CIMB Clicks for secure online banking in Malaysia.
• Encryption at rest: Sensitive personal data stored on our servers — including identity documents, financial records, and KYC data — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within Spinggo is restricted to authorised personnel on a strictly need-to-know basis. All staff with access to personal data are subject to binding confidentiality obligations.
• System monitoring: Our infrastructure is continuously monitored for suspicious activity, intrusion attempts, and anomalous access patterns. Security incidents are investigated and addressed in accordance with our internal incident response procedures.
• Password security: User account passwords are stored using one-way cryptographic hashing. Spinggo staff cannot retrieve your password in plain text.

Whilst we implement robust technical measures, no system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your own login credentials. If you suspect that your account has been accessed without your authorisation, please contact us immediately at support@spinggo.cam.

Subject to applicable law, you have the following rights with respect to your personal data held by Spinggo. To exercise any of these rights, please contact us at support@spinggo.cam with a clear description of your request.

We will respond to all valid data rights requests within 30 calendar days of receipt. In cases of complexity or high volume, we may extend this period by a further 30 days with prior notification. We will not charge a fee for standard requests, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

The Spinggo platform is strictly for use by persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification checks are applied at the point of registration, and we may request documentary evidence of age (such as a MyKad or passport) at any stage.

If Spinggo becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete all associated personal data to the extent permitted by law, and refund any deposited real-money funds to their source. Any bonus funds associated with the account will be forfeited.

If you believe that a minor has registered an account on the Spinggo platform, please contact us immediately at support@spinggo.cam so that we can investigate and take appropriate action.

Spinggo's platform serves players primarily in Malaysia, and our core operations are focused on the Malaysian market. However, certain service providers that we engage — including cloud infrastructure providers and KYC verification platforms — may process personal data in jurisdictions outside of Malaysia.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy. Such safeguards may include contractual data processing agreements, standard contractual clauses, or reliance on the data protection laws of the recipient jurisdiction.

By using the Spinggo platform and accepting this Policy, you acknowledge and consent to the transfer of your personal data to third-party service providers in other jurisdictions as described in this Section, subject to the safeguards outlined above.

The Spinggo platform may contain references to or integrations with third-party payment providers (Maybank, CIMB, Touch 'n Go, Boost, GrabPay, FPX, DuitNow) and other service providers. When you interact with these third-party services — for example, when completing a payment transaction through Maybank2u or Touch 'n Go eWallet — you are subject to the privacy policies of those respective providers.

Spinggo is not responsible for the privacy practices, data security standards, or content of third-party services. We encourage you to review the privacy policies of any third-party provider you interact with in connection with your use of the Spinggo platform.

Spinggo reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — for example, where we propose to use your data for a new purpose not covered by the current Policy — we will notify registered Members via email or a prominent notice on the Platform at least 14 days prior to the changes taking effect.

Your continued use of the Spinggo platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data Spinggo holds about you, please contact us using the details below. All communications regarding privacy and data protection are handled in English by our support team.

For questions related to the terms governing your account and use of the Platform, please refer to our Terms & Conditions. For information about our responsible gambling tools, visit our Responsible Gambling page.