spd888 Privacy Policy

1. Who We Are

spd888 is the operator of the online gaming platform accessible at spd888.win, operating under international gaming authority licensing. spd888 acts as the data controller in respect of personal data collected from Players and Platform visitors. For the purposes of this Privacy Policy, "Platform" refers to spd888.win, all associated subdomains, and any official spd888 mobile applications.

All data processing activities conducted by spd888 are governed by this Privacy Policy and the applicable data protection laws under our licensing jurisdiction. spd888 is committed to processing personal data lawfully, fairly, and transparently.

2. Data We Collect

2.1 Registration Data

When you create a spd888 Account, we collect the following data categories:

• Identity data: full legal name, date of birth, nationality;
• Contact data: email address, Malaysian mobile number, residential address;
• Authentication data: username, hashed and salted password;
• KYC documentation: MyKad, passport, or other government-issued identification documents submitted for age and identity verification.

2.2 Transactional Data

In connection with your use of the spd888 Platform, we collect:

• Deposit and withdrawal records, including payment method identifiers (e.g., Touch n Go eWallet account reference, Boost account reference, bank account last four digits for Maybank, CIMB, Public Bank transfers);
• Wagering history — bet amounts, game types, outcomes, and timestamps;
• Bonus and promotion redemption history;
• Account balance records.

2.3 Technical & Usage Data

When you access the spd888 Platform, our systems automatically collect:

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, browser type and version;
• Session duration, pages visited, features accessed, and click-path data;
• Cookie and similar tracking technology data as described in Section 5.

2.4 Communications Data

Records of communications between you and the spd888 support team via Live Chat or email, including the content of those communications, timestamps, and resolution notes.

2.5 Data You Choose to Provide

Any additional information you voluntarily provide to spd888 in the course of using the Platform, including responsible gaming self-assessments and feedback submitted via any Platform feature.

3. How We Use Your Data

spd888 uses the personal data collected for the following purposes:

• Account creation and management: to register your Account, verify your identity and age, and administer your account settings and preferences;
• Service delivery: to process deposits and withdrawals via Touch n Go eWallet, Boost, and Malaysian bank transfers; to enable participation in games and sports betting; to credit bonuses and process promotion opt-ins;
• Security and fraud prevention: to detect and prevent unauthorised access, fraudulent activity, money laundering, and other prohibited conduct;
• Regulatory compliance: to comply with our obligations under international gaming authority licensing, including KYC, AML/CFT screening, and reporting requirements;
• Customer support: to respond to your queries, resolve disputes, and maintain records of support interactions;
• Responsible Gaming: to monitor play patterns for indicators of problem gambling and to administer self-limitation tools including deposit limits, cooling-off periods, and self-exclusion;
• Platform improvement: to analyse usage data and improve the functionality, performance, and user experience of the spd888 Platform;
• Marketing communications: to send you promotional communications regarding spd888 offers and features, subject to your marketing preferences and applicable opt-out rights.

4. Legal Basis for Processing

spd888 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform our contract with you — namely, operating your Account, processing transactions, and delivering Platform services;
• Legal obligation: processing required to comply with applicable laws and regulatory requirements under our gaming licence, including KYC, AML/CFT, and record-keeping obligations;
• Legitimate interests: processing for fraud prevention, security monitoring, Platform analytics, and operational communications — where our interests do not override your fundamental rights and freedoms;
• Consent: where we rely on your consent as the legal basis (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5. Cookies & Tracking Technologies

5.1 Types of Cookies Used

The spd888 Platform uses the following categories of cookies and similar technologies:

• Strictly necessary cookies: essential for Platform operation — session authentication, security tokens, load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: remember your preferences such as language, display settings, and login state ("Remember Me" selections).
• Analytical cookies: collect anonymised usage data to help spd888 understand how Players interact with the Platform and to identify areas for improvement.

5.2 Cookie Consent

Where applicable law requires consent for non-essential cookies, spd888 presents a cookie preference interface upon your first visit. You may update your cookie preferences at any time via your Account settings or browser controls. Please note that disabling cookies may affect the functionality of certain Platform features.

6. Data Sharing & Third Parties

6.1 Operational Partners

spd888 shares personal data with third-party service providers where necessary to deliver the Platform, including:

• Payment processors facilitating Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank transactions;
• Game content providers and live casino studio operators whose titles are made available on the Platform — such providers receive the minimum data necessary for game operation and fairness verification;
• KYC and identity verification service providers;
• Cloud infrastructure and hosting providers;
• Customer support tooling providers.

All third-party service providers are contractually required to process personal data only on spd888's instructions, to maintain appropriate security measures, and to comply with applicable data protection law.

6.2 Regulatory Disclosure

spd888 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, court order, or in connection with legal proceedings. spd888 will notify affected Players of such disclosures where legally permitted to do so.

6.3 No Sale of Personal Data

spd888 does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes.

7. Data Security

spd888 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• All data transmitted between your device and spd888 servers is encrypted using TLS 1.3;
• Personal data stored at rest is encrypted using AES-256;
• Passwords are stored exclusively as salted cryptographic hashes — neither spd888 staff nor systems can retrieve your plaintext password;
• Access to personal data within spd888's internal systems is restricted on a strict need-to-know basis with role-based access controls and audit logging;
• spd888 conducts periodic security assessments and penetration testing of Platform infrastructure.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, spd888 will notify affected Players without undue delay in accordance with applicable regulatory requirements.

8. Data Retention

spd888 retains personal data for the following periods:

• Active Account data: retained for the duration of your Account and for a period of 5 years following Account closure, in accordance with anti-money laundering record-keeping obligations under our gaming licence;
• KYC documents: retained for a minimum of 5 years from the date of verification or Account closure, whichever is later, as required by applicable AML/CFT regulations;
• Transactional records: retained for 7 years to satisfy financial record-keeping requirements;
• Communications records: retained for 3 years from the date of the last communication, or longer where records relate to an unresolved dispute or legal matter;
• Technical and usage data: anonymised after 13 months and retained in aggregated form for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by spd888:

• Right of access: to request a copy of the personal data spd888 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data, subject to spd888's legal retention obligations and any overriding legitimate interests;
• Right to restriction: to request that spd888 restrict processing of your personal data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity;
• Right to object: to object to processing of your personal data based on legitimate interests, including profiling;
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact spd888 via Live Chat or email at [email protected]. spd888 will respond to all verified rights requests within 30 days. We may request additional verification of your identity before processing a rights request.

10. Children's Privacy

The spd888 Platform is strictly restricted to individuals aged 21 and above. spd888 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age, that Account will be immediately closed and all associated personal data deleted. If you believe a minor has registered on the Platform, contact spd888 immediately via Live Chat.

11. International Data Transfers

spd888's infrastructure and operational partners may process personal data in jurisdictions outside of Malaysia. Where personal data is transferred internationally, spd888 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include contractual data processing agreements incorporating standard contractual clauses, or reliance on adequacy determinations applicable to the receiving jurisdiction.

12. Third-Party Links

The spd888 Platform may contain references to game providers or services operated by third parties. Where you navigate away from spd888.win to a third-party platform, this Privacy Policy does not apply to that third party's processing activities. spd888 is not responsible for the privacy practices of third-party operators. You are encouraged to review the privacy policy of any third party whose platform you access.

13. Amendments to This Policy

spd888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. Material changes will be communicated to registered Players via the email address on file at least 14 days prior to the effective date of the change. The current version of this Privacy Policy, with the date of last update, is always accessible at spd888.win/privacy-policy. Continued use of the Platform following the effective date of an updated Privacy Policy constitutes acceptance of the updated terms.

14. Contact & Complaints

For questions, concerns, or to exercise your data rights, contact spd888 using the following channels:

• Live Chat: Available 24/7 at spd888.win — average response time under 3 minutes.
• Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client).

If you are not satisfied with spd888's response to a privacy concern, you have the right to lodge a complaint with the competent data protection authority in your jurisdiction or with the regulatory body overseeing our gaming licence. spd888 is committed to resolving all privacy complaints in good faith and in a timely manner.