spd888 Privacy Policy

1. Introduction

spd888 ("spd888", "we", "us", "our") operates the online gaming platform accessible at https://spd888.asia and all associated sub-domains (the "Platform"). We are committed to protecting the privacy and security of personal data belonging to our members, prospective members, and visitors (collectively "you").

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by spd888. By registering an account on the Platform or by continuing to access the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing activities described herein.

2. Data Controller

For the purposes of applicable data protection law, spd888 is the data controller responsible for personal data processed through the Platform. Where spd888 engages third-party service providers to process data on its behalf, such providers act as data processors under written contractual obligations that require them to process data only on spd888's documented instructions and to maintain appropriate security measures.

If you have any questions regarding how spd888 processes your personal data, please contact our Data Protection contact using the details provided in Section 14 of this Policy.

3. Data We Collect

3.1 Identity and Contact Data

When you register a spd888 account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This data is required to create and maintain your account, verify your identity, and comply with our know-your-customer (KYC) obligations.

3.2 Financial Data

We collect information about the payment methods you use to transact on the Platform, including your bank account details (for FPX transfers), e-wallet identifiers (for Touch 'n Go eWallet and Boost), transaction amounts, and transaction timestamps. We do not store full card numbers or CVV data — payment processing is handled by PCI-DSS compliant third-party payment providers.

3.3 Gaming and Transactional Data

We record your betting history, game play activity, deposit and withdrawal records, bonus redemptions, and account balance information. This data is used to operate your account, resolve disputes, detect fraud, and comply with regulatory requirements.

3.4 Technical and Device Data

When you access the Platform, we automatically collect technical data including your IP address, browser type and version, device operating system, device identifiers, screen resolution, and access timestamps. This data is used for security, fraud prevention, and Platform performance optimisation.

3.5 Communications Data

We retain records of your communications with spd888 support staff, including live chat transcripts and email correspondence. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.6 Verification Documents

When required for KYC verification, we may collect copies of identity documents such as a Malaysian identity card (MyKad), passport, or utility bill. These documents are processed solely for identity verification purposes and are stored securely with access restricted to authorised personnel.

4. How We Collect Data

spd888 collects personal data through the following means:

• Direct interactions — data you provide when registering, completing KYC verification, making deposits or withdrawals, placing bets, or contacting support.
• Automated technologies — data collected automatically when you access the Platform, including via cookies, server logs, and session tracking technologies.
• Third-party payment providers — transaction confirmation and verification data transmitted to spd888 by your chosen payment provider (e.g., Maybank FPX, Touch 'n Go eWallet) upon completion of a transaction.
• Fraud prevention and verification services — data received from identity verification and fraud screening service providers engaged by spd888 to assist with KYC and anti-money laundering (AML) compliance.

5. How We Use Your Data

spd888 processes your personal data for the following purposes and on the following legal bases:

• Account creation and operation (contractual necessity) — to register your spd888 account, verify your identity, process transactions, and provide Platform services.
• Payment processing (contractual necessity) — to process MYR deposits and withdrawals via your chosen payment method and maintain accurate financial records.
• Legal and regulatory compliance (legal obligation) — to comply with KYC, AML, and other regulatory requirements applicable to online gaming operators, including retention of transaction records.
• Fraud prevention and security (legitimate interests) — to detect, investigate, and prevent fraudulent activity, money laundering, and unauthorised account access.
• Responsible gaming (legitimate interests and legal obligation) — to monitor for indicators of problem gambling behaviour and apply protective measures where appropriate, including account restrictions.
• Platform improvement (legitimate interests) — to analyse usage patterns and improve Platform performance, user experience, and game offering.
• Marketing communications (consent) — to send you promotional communications about spd888 offers, bonuses, and seasonal campaigns (including Deepavali and Chinese New Year promotions) where you have given your consent. You may withdraw this consent at any time by contacting support.

6. Data Sharing

spd888 does not sell your personal data. We may share your data with the following categories of recipients only as necessary to fulfil the purposes set out in this Policy:

• Payment service providers — to process your MYR deposits and withdrawals (e.g., FPX network participants, Touch 'n Go eWallet, Boost).
• Game software providers — limited technical data necessary to operate licensed games on the Platform. Game providers are contractually prohibited from using this data for any purpose other than game delivery.
• Identity verification services — to fulfil KYC and AML obligations.
• Fraud prevention and analytics providers — to maintain Platform security and integrity.
• Regulatory and law enforcement authorities — where spd888 is required by law, court order, or regulatory authority to disclose personal data.

7. International Data Transfers

The spd888 Platform is operated with infrastructure that may involve the processing of data in jurisdictions outside Malaysia. Where personal data is transferred internationally, spd888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian personal data protection law. Such safeguards may include contractual data transfer agreements with receiving entities based on approved standard contractual clauses.

8. Data Retention

spd888 retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to the following general principles:

• Account data and transactional records are retained for a minimum of five (5) years from the date of account closure, as required for AML and regulatory compliance purposes.
• KYC verification documents are retained for the duration of your account and for five (5) years thereafter.
• Live chat and support communication records are retained for two (2) years.
• Technical and device data logs are retained for up to twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Security Measures

spd888 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmission pathways.
• Access controls restricting personal data access to authorised personnel only, on a need-to-know basis.
• Regular security audits and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative system access.
• Incident response procedures for the prompt detection, containment, and notification of data security events.

Despite these measures, no internet-based transmission or electronic storage system is completely secure. Members are advised to use strong, unique passwords for their spd888 accounts and to report any suspected unauthorised account activity to our support team immediately.

10. Cookies & Tracking Technologies

spd888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies — required for Platform functionality, including session management and login state persistence. These cannot be disabled without impairing Platform usability.
• Performance cookies — used to collect anonymised data about how members use the Platform, enabling spd888 to improve performance and user experience.
• Security cookies — used to detect and prevent fraudulent activity and to protect account security.

You may configure your browser to refuse all or some cookies; however, disabling essential cookies may prevent you from accessing certain features of the spd888 Platform, including the ability to log in to your account.

11. Your Rights

Subject to applicable data protection legislation, you have the following rights in relation to your personal data held by spd888:

• Right of access — to request a copy of the personal data we hold about you.
• Right of rectification — to request correction of inaccurate or incomplete personal data.
• Right of erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to object — to object to processing based on legitimate interests, including direct marketing.
• Right to restrict processing — to request that processing of your data be restricted in certain circumstances.
• Right to data portability — to receive personal data you have provided to spd888 in a structured, commonly used, machine-readable format.

To exercise any of these rights, please submit a written request to spd888 support at [email protected]. We will respond within thirty (30) days. Identity verification will be required before processing any data subject request.

12. Minors

The spd888 Platform is strictly restricted to individuals aged 21 years and above. spd888 does not knowingly collect or process personal data relating to persons under 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately close the account, delete associated personal data, and where appropriate report the matter to relevant authorities. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

13. Policy Changes

spd888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Where material changes are made, we will provide reasonable advance notice via the Platform or via the email address registered to your account. The effective date of the current version is displayed at the top of this Policy. Continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by spd888, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly via the spd888 Platform
• Response Time: Live chat responses within 3–5 minutes; email responses within 24 hours

Our support team serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Ipoh, and all other regions in English, around the clock.