Spingo Privacy Policy – Personal Data Protection for Malaysian Members

Spingo takes the privacy of every member who entrusts us with their personal information seriously. This document clearly sets out what data we collect, how it is used, who may access it, and your rights as a user under Malaysia's Personal Data Protection Act (PDPA) 2010. Please read it carefully before using the Spingo platform.

Last updated: 1 January 2026 Bahasa Melayu (ms-MY) Compliant with PDPA 2010

Six Privacy Principles We Uphold at Spingo
This is not just words — it is a daily practice embedded in every aspect of Spingo's data operations.
Malaysia PDPA Compliance

All data collection and processing practices at Spingo comply with Malaysia's Personal Data Protection Act (PDPA) 2010. We ensure that every action involving user data is lawful and consistent with applicable Malaysian data protection legislation.

128-bit SSL encryption

All data transmitted between your device and Spingo's servers is protected by 128-bit SSL encryption — the same security standard used by major Malaysian financial institutions such as Maybank and CIMB. Your data cannot be intercepted or read by any third party.

No Data Selling

Spingo does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we use it only to operate the platform as you agreed to at registration.

Minimum Data Collection

Spingo only collects data that is strictly necessary to operate the platform and provide services to you. We do not collect excessive information or data that has no direct relevance to the platform's operational and security requirements.

Full User Control

You have the right to access, correct, restrict, and request deletion of your personal data held by Spingo at any time. All requests will be processed within 14 business days in accordance with Malaysia's PDPA requirements.

Limited Retention Period

Spingo does not retain your personal data longer than necessary. Active account data is kept for the duration of the active account period plus 7 years, in line with Malaysia's financial compliance requirements. Data from closed accounts is deleted or anonymised after that period.


1Information We Collect at Spingo

Spingo collects several categories of personal information from registered members and platform visitors. All data collection is carried out on a lawful basis and is limited to what is genuinely necessary for the safe and effective operation of the platform.

1.1 Personal Identification Information
  • Full name as stated on your Malaysian identity card (MyKad)
  • Date of birth for age verification (minimum 18 years)
  • Malaysian identity card number (MyKad) for the KYC process
  • Gender (optional, to personalise your platform experience)
1.2 Contact Information
  • An active email address for account communications and notifications
  • A valid Malaysian phone number for two-factor authentication
  • Malaysian residential address (required for withdrawals exceeding a specified threshold)
1.3 Financial Information
  • Registered payment method details — Touch 'n Go eWallet account name, GrabPay, Boost, ShopeePay, DuitNow account number, or FPX details
  • Deposit and withdrawal transaction records in Malaysian Ringgit (RM)
  • Betting activity history for compliance and Responsible Gambling purposes
1.4 Technical Information
  • IP address of the device used to log in
  • Device type, operating system, and web browser version
  • Session log data — login times, logout times, and in-platform activity
  • Cookie data and device identifiers for account security

Note: Spingo does not store credit or debit card information directly. All payments are processed through Malaysia-licensed payment gateways that handle sensitive financial data under their own PCI DSS security standards.

2How We Collect Your Data

Spingo collects your personal data through the following methods:

2.1 Directly From You

This is the primary method of data collection at Spingo. Data is collected when you register a new account and complete the registration form, submit identity verification documents during the KYC process, contact the Spingo customer support team via live chat or email, fill in a feedback form or customer satisfaction survey, or join the VIP programme and provide any additional information requested.

2.2 Automatically During Platform Use

When you use the Spingo platform, our systems automatically record certain technical information, including your IP address, device and browser type, pages visited within the platform, time spent in each section, and general usage patterns. This helps Spingo detect fraudulent activity, maintain account security, and continuously improve the user experience.

2.3 Through Cookies and Related Technologies

Spingo uses cookies and similar tracking technologies to maintain your login session, remember your language preferences and display settings, analyse platform traffic and usage patterns in aggregate without identifying individuals, and detect unauthorised access attempts. Further details about cookies are covered in Section 6 of this document.

3How We Use Your Personal Data

Spingo uses collected personal data solely for legitimate purposes directly related to the operation of our online casino platform. Below is a detailed breakdown of how your data is used:

Purpose of Use Types of Data Used Legal Basis
Member account management and verification Name, email, phone number, date of birth, MyKad Contractual compliance
Deposit and withdrawal processing Payment details, MYR transaction records Contractual compliance
Age verification and KYC Date of birth, MyKad, supporting documents Legal obligations
Fraud prevention and security IP address, session data, transaction records Spingo's legitimate interests
Responsible Gambling Betting history, activity patterns Legal obligations
Customer support and complaint resolution Name, email, related transaction records Contractual compliance
Marketing communications (with your consent) Email, phone number Your consent
Platform analytics and improvement Aggregated usage data (anonymised) Spingo's legitimate interests

Spingo will not use your personal data for any purpose not stated in this Privacy Policy without first obtaining your renewed consent, unless required to do so by Malaysian law.

4Disclosure of Data to Third Parties

Spingo does not sell, rent, or trade your personal data to third parties. However, in operating the platform, Spingo may need to share certain information with the following parties for legitimate purposes:

4.1 Payment Service Providers

Financial information required to process deposits and withdrawals will be shared with Malaysia-licensed payment gateways that handle Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions. These providers are bound by strict confidentiality agreements and may only use your data for the purpose of processing transactions you have initiated.

4.2 Game Providers

Spingo's game providers, such as Evolution Gaming, Pragmatic Play, and other live casino studio partners, may receive anonymised account identifiers to ensure a seamless gaming experience. No personally identifiable information is shared — only session identifiers that cannot directly identify any individual.

4.3 Relevant Authorities

Spingo may be required to disclose certain information to Malaysian authorities for the following reasons: a valid court order or warrant, investigations into financial crime or money laundering involving the platform, official requests from the Companies Commission of Malaysia (SSM) or relevant regulatory bodies, and statutory reporting obligations under applicable Malaysian law.

4.4 Technology Service Providers

Spingo works with several third-party technology service providers to operate the platform's infrastructure, including server hosting, cybersecurity solutions, and platform performance analytics. All such providers are bound by data processing agreements that comply with Malaysia's PDPA and may only process your data in accordance with Spingo's instructions.

In all cases of disclosure to third parties, Spingo ensures that appropriate contractual safeguards are in place to protect your personal data in accordance with Malaysia's PDPA standards.

5Data Storage & Security
5.1 Where Data Is Stored

Spingo members' personal data is stored on secure servers located in certified data centres. Spingo takes reasonable technical and organisational precautions to protect your personal data against unauthorised access, alteration, disclosure, or accidental destruction.

5.2 Security Measures Implemented
  • Data encryption in transit: SSL/TLS 128-bit encryption for all communications between your device and Spingo's servers
  • Data encryption at rest: Sensitive data such as passwords are encrypted using the bcrypt hashing algorithm before being stored
  • Two-factor authentication: OTP via Malaysian phone number for login and financial transactions
  • 24/7 Monitoring: An intrusion detection system (IDS) continuously monitors platform traffic
  • Internal access controls: Only authorised Spingo staff may access user data, and only to the extent required by their role
  • Regular security audits: Penetration testing and security audits are conducted regularly by independent third parties
5.3 Data Retention Period

Spingo retains your personal data for the duration your account remains active, plus a further 7 years after account closure, in accordance with Malaysia's financial and legal compliance requirements. After this period, data will be permanently deleted or anonymised so it can no longer be linked to your identity. Financial transaction data may need to be retained for a longer period subject to applicable Malaysian tax and financial legislation.

While Spingo takes all reasonable steps to protect your data, no security system can guarantee 100% protection against every cyber threat. We strongly encourage you to use a strong, unique password for your Spingo account.

6Cookies & Tracking Technologies

Spingo uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit Spingo. They help us recognise your device, maintain your login session, and deliver a more personalised experience.

6.1 Types of Cookies We Use
  • Essential cookies (required): Required for core platform functions such as maintaining login sessions and account security. These cookies cannot be disabled without affecting Spingo's basic functionality.
  • User preference cookies: Saves your preferences such as display language, theme, and other display settings so you do not need to reconfigure them each time you log in.
  • Analytics cookies: Helps us understand how members use the Spingo platform in aggregate — which pages are visited most, where users drop off, and so on. This data is used to improve the platform.
  • Security cookies: Helps Spingo detect suspicious activity such as login attempts from unusual locations or usage patterns indicative of fraud.
6.2 Managing Cookie Preferences

You can manage or delete cookies through your web browser settings. However, disabling essential cookies will affect the functionality of the Spingo platform and your experience may be impacted. To set your cookie preferences or withdraw consent, contact the Spingo support team at support@spingo.ws.

7Your Rights as a Spingo User

As a user of the Spingo platform subject to Malaysia's PDPA 2010, you have the following rights regarding your personal data. All requests to exercise these rights should be submitted by email to support@spingo.ws and will be processed within 14 business days.

Right of Access

You may request a copy of the personal data Spingo holds about you at any time. We will provide the information in a readable format within 14 business days.

Right to Rectification

If any data we hold about you is inaccurate or out of date, you have the right to request a correction. Details such as your phone number and email address can be updated directly through your account settings.

Right to Erasure

You may request deletion of your personal data upon account closure. Deletion is subject to the legal and financial retention obligations binding on Spingo under Malaysian law.

Right to Restriction

In certain circumstances, you may request that the processing of your data be temporarily restricted — for example, while the accuracy of disputed data is under investigation.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Upon receiving your objection, Spingo will immediately cease using your data for that purpose.

Right to Data Portability

You have the right to receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider upon request.

To exercise any of the rights above, send an email to support@spingo.ws with the subject line "DATA RIGHTS REQUEST – [your account number]". Please include your MyKad number for identity verification. Spingo does not charge any fee for reasonable requests.

8Children's Data

The Spingo platform is strictly for individuals aged 18 and above. Spingo does not knowingly collect or store any personal data from individuals under the age of 18. If Spingo discovers that a minor's personal data has been collected inadvertently, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and suspect that your minor child has registered for or accessed the Spingo platform, please contact our support team at support@spingo.ws immediately. Spingo takes this matter seriously and will respond within 24 hours.

9Cross-Border Data Transfers

In operating an online casino platform, some of Spingo's service providers may be based outside Malaysia — particularly game providers such as Evolution Gaming and Pragmatic Play, which have studios in various countries. Where such data transfers occur, Spingo ensures that appropriate contractual safeguards are in place, including the use of internationally recognised standard contractual clauses, to ensure your data receives a level of protection equivalent to that afforded under Malaysia's PDPA.

Spingo will not transfer your personal data to countries without adequate data protection laws without first obtaining your explicit consent or putting appropriate contractual safeguards in place. For more information on cross-border data transfers, contact our team at support@spingo.ws.

10Amendments to This Privacy Policy

Spingo reserves the right to amend this Privacy Policy at any time to reflect changes in Malaysian law, industry practices, or platform operations. The "Last Updated" date at the top of this document will always reflect the most current version.

For material amendments — that is, changes that reduce your protections or significantly alter how we use your data — Spingo will notify registered members via email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the Spingo platform.

Your continued use of the Spingo platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please close your account and discontinue use of the Spingo platform.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Spingo handles your personal data, please reach out to us through the following channels:

  • Email: support@spingo.ws (subject: "PRIVACY ENQUIRY")
  • Live Chat: Available 24 hours within the Spingo platform
  • Response Time: Privacy inquiries will be responded to within 5 business days

We are committed to resolving any privacy concerns you may have in a fair and transparent manner, in line with Malaysia's PDPA requirements. If you are not satisfied with Spingo's response, you have the right to lodge a complaint with the relevant Malaysian Personal Data Protection Department.

Spingo complies with Malaysia's Personal Data Protection Act (PDPA) 2010 in all aspects of personal data handling. We are committed to protecting the privacy and personal data of every member on our platform.


Spingo's Commitment to Protecting the Personal Data of Malaysian Players

When you register and play at Spingo, you are trusting us with highly personal information — your full name, phone number, financial details, and activity records. We do not take that trust lightly. This Privacy Policy is not merely a legal document drafted to satisfy compliance requirements. It is an honest account of how we handle your information and a commitment we make to every Spingo member.

Malaysia's Personal Data Protection Act (PDPA) 2010 grants individuals certain rights over their personal data. Spingo doesn't just comply with this law because it's required — we genuinely believe that strong data protection is the foundation of the trust we want to build with our Malaysian player community. Players who know their data is well protected can enjoy a more confident and stress-free gaming experience.

One of Spingo's strongest commitments is the principle of minimum data collection. This means we only gather information that is genuinely necessary to provide our services to you. We do not collect irrelevant demographic data, we do not monitor your activity outside the Spingo platform, and we do not build psychographic profiles for marketing manipulation purposes. What we do collect is to keep your account secure, process your financial transactions correctly, and ensure you receive the support you need when issues arise.

In the context of an online casino platform, the security of financial data is critically important. When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, or FPX via Maybank2u or CIMB Clicks, your transaction information passes through several layers of security before it is processed. Spingo uses 128-bit SSL encryption for all data communications, ensuring no outside party can intercept your financial information in transit. The payment gateways we use are licensed Malaysian providers that comply with international payment security standards.

One thing we want to be completely clear about in Spingo's Privacy Policy is our position on marketing. We may send registered members notifications about promotions, new bonuses, and platform updates via email or in-app notifications — but only with your consent. If you'd rather not receive marketing communications from Spingo, you can easily opt out through the notification settings in your account or by contacting our support team. We won't bombard you with unwanted marketing messages.

Privacy concerns in the online casino industry are more sensitive than in many other industries, given that they involve financial data and highly personal behavioural patterns. At Spingo, we recognise that a member's betting activity records are extremely sensitive information. That is why we ensure that internal access to member betting activity data is strictly limited — only staff who need it to carry out compliance, Responsible Gambling, and customer support duties are permitted to access such data, and all access is logged and audited on a regular basis.

We also want to address how Spingo handles situations where we may be legally required to disclose information to the authorities. If Spingo receives a valid court order or official request from Malaysian authorities, we may be required to disclose certain information. In such cases, Spingo will verify the legitimacy of the request, disclose only the specific information required, and, where permitted by law, notify the relevant member of the disclosure. We will not exceed the scope mandated by the court order or legal request.

Ultimately, your privacy at Spingo is a shared responsibility. We put in place robust technical and organisational measures to protect your data. That said, you play an important role too — use a strong and unique password for your Spingo account, never share your login credentials with anyone, only log in from your own personal devices, and promptly report any suspicious activity in your account to our support team. Together, we can ensure your account and personal data remain secure on the Spingo platform.


Responsible Gaming at Spingo
Spingo is committed to ensuring every player enjoys a safe and controlled environment.
Personal Deposit Limit

Set your own daily or weekly deposit limits based on what you're comfortable with. Limits cannot be raised immediately — there's a 24-hour waiting period for your protection.

Self-Exclusion

Activate a break lasting anywhere from 24 hours to one month. All gaming activity is automatically suspended for the entire duration.

Self-Exclusion

Players may apply for a long-term self-exclusion. The account will be fully blocked for the chosen period with no exceptions.

Underage Prohibition

The Spingo platform is for users aged 18 and above only. Age verification is carried out during registration and when processing your first withdrawal.


Frequently Asked Questions About Spingo's Privacy Policy

No. Spingo does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared with service providers directly involved in the operation of the platform — such as payment gateways for processing your MYR transactions or game providers for ensuring a smooth gaming experience — and all such parties are bound by strict confidentiality agreements.

To request a copy of your personal data, send an email to support@spingo.ws with the subject line "DATA RIGHTS REQUEST – ACCESS", along with your account number and a copy of your MyKad for identity verification. Spingo will process your request within 14 business days and provide the data in a readable format. No fee will be charged for reasonable requests made under rights granted by Malaysia's PDPA.

Yes, you may request the deletion of your personal data upon closing your Spingo account. However, full deletion is subject to legal retention requirements — Spingo may be required to retain certain financial transaction records for a period prescribed by Malaysian tax and financial laws (typically 7 years). After that period, all data will be fully deleted or anonymised. To submit a request, contact support@spingo.ws with the subject line "DATA RIGHTS REQUEST – DELETION".

All financial transactions at Spingo pass through multiple layers of security. Communications between your device and Spingo's servers are protected by 128-bit SSL encryption. Transactions via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX are processed by licensed Malaysian payment gateways that comply with international payment security standards (PCI DSS). Spingo does not directly store your e-wallet account numbers or online banking login credentials — only transaction records and the name of your registered payment method are retained.

Yes. You can opt out of marketing emails from Spingo at any time by clicking the "Unsubscribe" link at the bottom of any marketing email we send, by updating your notification preferences in your account settings on the Spingo platform, or by contacting our support team at support@spingo.ws. Unsubscribe requests will be processed within 5 business days. Please note: opting out of marketing emails will not stop transactional emails related to your account, such as deposit confirmations and security notifications, as these are essential to the operation of your account.

If an account is closed due to fraud or a serious breach of Terms & Conditions, Spingo will retain the relevant data records for a longer period than usual — this is necessary for internal investigation, legal compliance, and as evidence should legal action be required. This data will not be used for any other purpose and is accessible only by Spingo's compliance staff and legal team, strictly within the context of the relevant investigation.

Contact Spingo's Privacy Officer

If you have any questions, concerns, or complaints about how Spingo handles your personal data, our team is here to help. All privacy enquiries will be taken seriously and addressed in accordance with the requirements of Malaysia's PDPA 2010.

Contact us at support@spingo.ws with the subject line "PRIVACY INQUIRY". Responses will be provided within 5 business days. You may also refer to Terms & Conditions us for more information about your rights and responsibilities as a Spingo member.


Your Privacy Protected, Your Game Secured – Register with Spingo Today

By registering, you agree to Spingo's Privacy Policy and Terms & Conditions. Minimum deposit of just RM10 using your preferred e-wallet — new members are eligible for a welcome bonus of up to RM500 on their first deposit.

For users aged 18 and above only. Please bet responsibly.


Bahasa Melayu