Sped88 Privacy Policy — Member Data Protection and Privacy

1. Introduction and Scope of Privacy Policy

This Privacy Policy is the official sped88 document that explains in detail how we collect, use, store, protect and, in certain circumstances, disclose your personal information when you use the sped88 platform — whether via the website at sped88.org or our mobile app.

This document is written with the intent of being transparent and easy to understand for all our members. We understand that data privacy is a serious matter, especially in the context of an online gaming platform. sped88 is therefore committed to managing your personal information with full integrity, responsibility, and in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and the relevant Bank Negara Malaysia guidelines on consumer protection in the digital financial industry.

By registering an account or using any sped88 service, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us for further assistance. We encourage all members to read this document carefully and to reach out to our support team with any questions or concerns regarding your data privacy.

---

2. Types of Personal Data We Collect

Sped88 only collects information that is strictly necessary to provide a secure, orderly service that meets legal requirements. Below are the categories of data we collect and their purposes:

2.1 Data You Provide Directly

• Identity information: Full name as per identification document, identity card or passport number, date of birth, and gender.
• Contact information: Active email address, Malaysian mobile number and current residential address.
• Financial information: Bank name, bank account number, digital wallet details (such as Touch 'n Go eWallet and GrabPay), and Visa/Mastercard credit or debit card details.
• KYC verification documents: Copies of identity cards, passports, driving licences, or other official government documents required to complete the Know Your Customer (KYC) process.
• Profile information: Preferred username, password (stored in hashed form), language preference, and other account settings.

2.2 Data Collected Automatically

• Technical data: IP address, web browser type and version, device operating system, screen resolution and unique device identifier.
• Usage data: Pages visited, session duration, games played, login frequency, and in-platform navigation history.
• Transaction data: Deposit and withdrawal history, claimed bonuses, transaction dates and times, and payment methods used.
• Location data: General geographic location based on IP address, for regional compliance and fraud detection purposes.

Data Category	Example	Primary Purposes
Identity Data	Name, IC, date of birth	KYC verification and fraud prevention
Contact Data	Email, phone, address	Account communications and customer support
Financial Data	Bank accounts, digital wallets	Deposit and withdrawal processing
Technical Data	IP, browser type, device	Account security and fraud detection
Game Data	Wagering history and bonuses	Legal compliance and internal audit

---

3. How We Use Your Personal Information

Every piece of information we collect serves a clear and legitimate purpose. sped88 does not use your data for unrelated purposes without your consent. The following are the primary purposes for which your data is used:

• Account management: Registering your account, verifying your identity through the KYC process, handling secure logins, and ensuring the security of your account at all times.
• Financial transaction processing: Processing deposits via FPX, Touch 'n Go eWallet, GrabPay, DuitNow QR, and credit/debit cards; as well as withdrawals to a bank account or digital wallet registered in your name.
• Legal and regulatory compliance: To fulfil legal obligations under the PDPA 2010, Anti-Money Laundering regulations (AMLA), and other reporting requirements mandated by Malaysian authorities.
• Fraud prevention and security: Identifying and investigating suspicious activity, preventing money laundering, and maintaining the integrity of the sped88 platform.
• Service improvement: Analysing usage patterns to improve the user experience, enhance the platform interface, and develop new features that are more useful to members.
• Marketing communications (with consent): Sending you information about promotions, bonuses, and special offers via email or in-app notifications, only where you have given consent to receive such communications.
• Customer support: Enables our support team to resolve your complaints, enquiries, and technical issues more efficiently and effectively.

---

4. Data Sharing with Third Parties

Sped88 understands how important your trust is to us. We do not sell, rent, or disclose your personal information to third parties for their own marketing or commercial purposes. However, in certain limited situations, we share data with the following parties solely for sped88 operational purposes:

• Payment service providers: Financial institutions, payment gateways, and digital wallet providers that process your deposit and withdrawal transactions. They receive only the data necessary to complete the relevant transaction.
• Game software providers: Game development companies that provide slots, live games, and fish shooting games on the sped88 platform. Data sharing is limited to game session information required for technical operations.
• Government authorities and law enforcement: In situations where we are required by Malaysian law or a court order to disclose information, we will do so in accordance with proper legal procedures.
• Audit and compliance firms: An independent auditor appointed to ensure sped88 operations comply with all applicable licensing and regulatory requirements.
• Technical service providers: Cloud infrastructure providers, analytics services, and technical support partners that help us operate the platform safely and efficiently. All such providers are bound by strict data confidentiality agreements.

Every third party that receives your data from sped88 is required to comply with data protection standards equivalent to our own and is not permitted to use that data for any purpose other than what has been agreed in writing with sped88.

---

5. Data Security and Protection

Data security is sped88's number one priority. We continuously invest in the latest security technologies and procedures to ensure your personal information is protected from unauthorised access, loss, alteration, or accidental disclosure.

5.1 Technical Security Measures

• Data in transit is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
• Data at rest is encrypted using AES-256 for all sensitive information.
• Two-factor authentication (2FA) is available for all member accounts.
• A real-time 24/7 security monitoring system that automatically detects and neutralises cyber threats.
• Regular penetration testing conducted by independent cybersecurity firms.
• A multi-layered data backup system that ensures data availability even in the event of a technical failure.

5.2 Organisational Security Measures

• Strict access control policy — only staff with specific authorisation may access member data.
• Mandatory cybersecurity awareness training attended by all sped88 staff on a regular basis.
• Clear incident response procedures are in place to address any data breach swiftly and effectively.
• Binding confidentiality agreements are signed by all staff and contractors who handle member data.

---

6. Use of Cookies and Tracking Technologies

Sped88 uses cookies and similar technologies to enhance your experience on our platform, ensure smooth technical functionality, and help us understand how members use the platform for continuous improvement.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session verification, account security and transaction processing. These cookies cannot be disabled without affecting the platform's primary functionality.
• Preference Cookies: Saving your personal settings such as language preference, display theme, and currency format for your convenience.
• Analytics Cookies: Helps us understand how members interact with the platform — the most frequently visited pages, time spent in each section, and overall navigation patterns. This data is used in aggregate form and does not identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent unauthorised access and verify user identity during active sessions.

You can manage your cookie settings through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the full functionality of the sped88 platform.

---

7. Data Retention Period

Sped88 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. The following are general guidelines for our data retention periods:

• Active account data: Stored for as long as your account remains active and for the required period after account closure to meet legal obligations.
• Financial transaction records: Stored for a minimum of 7 years after the transaction date, in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Stored for a minimum of 5 years after the business relationship ends, in accordance with Malaysia's AMLA requirements.
• Security logs: Stored for 2 years for investigation purposes in the event of a security incident or dispute.
• Marketing communication data: Retained until you withdraw your consent or close your account, whichever comes first.

Once the retention period expires, your data will be permanently deleted or anonymised in a manner that prevents re-identification.

---

8. Your Privacy Rights

As a sped88 member, you have certain rights regarding the personal information we hold about you. sped88 fully respects and facilitates the exercise of these rights:

---

9. Protection of Children's Data

The sped88 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal information from individuals under 18. Should we discover that a minor's data has been collected without our knowledge, it will be deleted immediately and the account in question will be terminated in accordance with established procedures.

If you are a parent or guardian and discover that your child who is under age has registered an account at sped88, please contact our support team immediately by email at [email protected] and we will take the appropriate action without delay.

---

10. Links to Third-Party Websites

The sped88 platform may contain links to business partner websites or third-party service providers in certain contexts. This Privacy Policy applies solely to the sped88 platform. sped88 is not responsible for the privacy practices of third-party websites and encourages you to read the privacy policy of each website you visit separately.

---

11. Changes to This Privacy Policy

Sped88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or improvements to the services we offer. Any significant changes will be communicated to all members via their registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy currently in effect. Continued use of the sped88 platform after such changes take effect will be deemed as your acceptance of the latest version of our Privacy Policy.

---

12. How to Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (Subject: Data Privacy Enquiry)
• Live Chat: Available 24/7 in Malay via the sped88 platform

We are committed to responding to all privacy-related enquiries within 5 business days from the date of receiving your enquiry. For more complex complaints requiring in-depth investigation, we will provide a status update within 14 business days.