Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by SPD888 ("the Company", "we", "us", "our"), the operator of the online sports betting and gaming platform accessible at spd888.cam ("the Platform"). It describes how we collect, use, disclose, store, and protect the personal data of individuals who register as players, visit the Platform, or otherwise interact with our services ("you", "the Player", "the User").

SPD888 is committed to handling personal data responsibly and in accordance with applicable international data protection standards, including those required under our international gaming licensing framework. We recognise that our players, including the many Malaysians from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across the country who use our Platform, entrust us with sensitive personal and financial information. We take that responsibility seriously.

By accessing or using the SPD888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to arrange account closure.

2 Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details, device identifiers, and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, SPD888.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a binding agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "Cookie" means a small text file placed on your device by the Platform for session management, analytics, or personalisation purposes.
• "KYC Data" means identity verification documents and information collected as part of the Know Your Customer verification process.

3 Data Controller

SPD888 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, SPD888 determines what data is collected, for what purposes, and how it is processed. Where SPD888 engages third-party service providers to process data on its behalf — such as payment processors, identity verification providers, or analytics platforms — those parties act as Data Processors under contractual agreements that impose data protection obligations consistent with this Policy.

For all privacy-related enquiries, data access requests, or complaints, please contact our Data Privacy team at [email protected] with the subject line "Privacy Request".

4 Data We Collect

SPD888 collects personal data in the following categories:

4.1 Registration & Account Data

When you create an account on SPD888, we collect the information you provide during registration, including:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Residential address
• Phone number (optional at registration; may be required for account verification)
• Username and encrypted password
• Account preferences and communication settings

4.2 Identity Verification (KYC) Data

Before processing withdrawal requests, we require identity verification documentation, which may include:

• Government-issued photo identification (MyKad, passport, or driving licence)
• Proof of address (utility bill, bank statement dated within 3 months)
• Proof of payment method (front of bank card, screenshot of e-wallet account)
• Selfie photograph for identity matching, where required

4.3 Financial & Transaction Data

When you make deposits or withdrawals using Malaysian payment methods (such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, GrabPay, Boost, or FPX), we collect:

• Transaction amounts in MYR
• Payment method type and masked payment identifiers
• Transaction timestamps and reference numbers
• Cryptocurrency wallet addresses (where applicable)

4.4 Gaming & Betting Activity Data

• Betting history, wager amounts, game session logs
• Sports markets accessed (including EPL, Liga Super Malaysia, UFC)
• Bonus usage and wagering progress records
• Casino game session data and outcomes

4.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration, page views, and navigation paths
• Cookie identifiers and analytics tracking data

4.6 Communications Data

• Records of live chat conversations with our support team
• Email correspondence
• Feedback, complaints, and dispute records

5 How We Collect Data

SPD888 collects personal data through the following mechanisms:

• Direct submission: Information you actively provide during registration, KYC verification, deposit/withdrawal requests, or when contacting our support team.
• Automated collection: Technical data collected automatically when you interact with the Platform, including via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification providers may return verified identity data to us; payment processors may confirm transaction status and payment method ownership.
• Fraud prevention services: We may receive risk signals or flagged data from fraud detection service providers as part of our anti-money-laundering and responsible gambling obligations.

6 Purposes of Data Processing

We process your personal data for the following purposes:

7 Legal Basis for Processing

SPD888 processes personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Player Account Agreement — including account management, payment processing, and service delivery.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and improving our services — where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with anti-money-laundering legislation, identity verification requirements under our gaming licence, and any lawful regulatory requests.
• Consent: Where we send optional marketing communications or use non-essential cookies, we do so on the basis of your explicit consent, which you may withdraw at any time.

8 Data Sharing & Disclosure

SPD888 does not sell, rent, or trade your personal data to any third party. We may share your personal data with third parties only in the following circumstances:

8.1 Service Providers

We engage carefully selected third-party service providers — including identity verification platforms, payment processors (covering Malaysian channels such as Touch 'n Go eWallet, Maybank2u, DuitNow, and FPX), game content providers, analytics tools, and fraud detection services — who process data on our behalf under binding data processing agreements. These providers are permitted to use your data only for the specific services they are contracted to provide.

8.2 Regulatory and Legal Authorities

We may disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where required to do so by law, court order, or in connection with any legal proceedings. Such disclosures are made only to the minimum extent required.

8.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of SPD888's business assets, personal data held by SPD888 may be transferred to the acquiring entity. Where such a transfer involves a change to this Privacy Policy, players will be notified in advance.

9 International Data Transfers

SPD888 operates under international gaming licensing and may engage service providers located outside Malaysia. Where personal data is transferred to third parties in countries that may not have equivalent data protection standards, SPD888 implements appropriate safeguards — including contractual clauses and data processing agreements — to ensure that your data continues to receive a level of protection consistent with this Policy.

By using the SPD888 Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia for the purposes described in this Policy.

10 Data Retention

SPD888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account relationship plus a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, as required under applicable financial compliance frameworks.
• KYC verification documents: Retained for the duration of the account relationship plus a minimum of 5 years.
• Customer support and communications records: Retained for a minimum of 2 years from the date of the last interaction.
• Technical and device data: Retained for up to 13 months from collection, unless required for an ongoing investigation or dispute.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

11 Cookies & Tracking Technologies

SPD888 uses cookies and similar tracking technologies on the Platform to deliver core functionality, improve your user experience, and analyse how the Platform is used. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your login session, enabling secure transactions, and supporting core functionality. These cannot be disabled without affecting Platform performance.
• Performance and analytics cookies: Used to collect anonymised data about how players interact with the Platform — including pages visited, session duration, and device type — to help us improve performance and content.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gambling tool configurations, to provide a more personalised experience.
• Marketing cookies (with consent): Where you have explicitly consented, marketing cookies may be used to deliver relevant promotional content. You may withdraw this consent at any time.

12 Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by SPD888:

To exercise any of these rights, please contact our Data Privacy team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt of your request. In some circumstances, we may need to verify your identity before processing your request.

13 Children's Privacy

The SPD888 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual who does not meet this minimum age requirement, we will take immediate steps to delete that data and close the associated account.

If you have reason to believe that a minor has registered an account on SPD888, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

14 Security Measures

SPD888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data at rest, including payment information and identity documents
• Two-factor authentication (2FA) available for all player accounts
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular independent security audits and penetration testing
• Intrusion detection systems and continuous security monitoring
• Incident response procedures covering data breach notification

15 Third-Party Links & Services

The SPD888 Platform may contain references to third-party services — such as game providers or payment processors — whose privacy practices are governed by their own policies. SPD888 is not responsible for the privacy practices of any third party and encourages you to review the privacy policies of any external service you interact with in connection with the Platform.

16 Amendments to This Policy

SPD888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Where changes are material, we will notify registered Players by email or through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform following publication of an updated Policy constitutes your acceptance of the changes.

17 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way SPD888 handles your personal data, please contact our Data Privacy team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.