Privacy Policy

1 Introduction

This Privacy Policy (hereinafter "Policy") issued by Spider88 (hereinafter "we", "us", "our", or "the Platform") and applies to all personal data collected through the website located at spider88.cam and any associated mobile applications, services, or platforms operated by Spider88.

Spider88 takes the privacy and security of your personal data seriously. This Policy is intended to provide you with a clear and transparent account of how we handle the personal information you provide to us — directly or indirectly — as part of your use of the Platform's services, including account registration, deposits, withdrawals, gameplay, sports betting, and customer support interactions.

By accessing, registering with, or using the Spider88 Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

If you do not consent to the practices described in this Policy, you must discontinue use of the Platform immediately and contact our support team to request Account closure.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, email address, phone number, financial details, IP address, and device identifiers.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, transmission, erasure, or destruction.
• "Data Controller" — Spider88, the entity that determines the purposes and means of Processing of Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of Spider88 under a data processing agreement, such as payment service providers, KYC verification services, or cloud infrastructure providers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the User's agreement to the Processing of their Personal Data for a stated purpose.
• "KYC" — Know Your Customer. The regulatory identity and age verification process required before a Member may withdraw funds from the Platform.
• "Cookie" — a small data file placed on a User's device by the Platform for the purpose of recognising the device and improving the user experience.
• "Member" or "User" — any individual who has registered for an Account on the Spider88 Platform.

3 Data We Collect

Spider88 collects the following categories of Personal Data, depending on the nature of your interaction with the Platform:

Spider88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where expressly required for identity verification under applicable anti-money laundering legislation.

4 How Data Is Collected

Spider88 collects Personal Data through the following means:

• Directly from you: when you complete the account registration form, submit KYC documentation, conduct payment transactions, contact customer support, or respond to surveys or promotions.
• Automatically: when you access and browse the Platform, through server logs, cookies, pixel tags, and similar tracking technologies that record technical and usage data.
• From third parties: including identity verification and KYC service providers, payment processors (including FPX, DuitNow, and e-wallet platforms), fraud detection services, and, where applicable, credit reference agencies.

5 Data Processing & Use

Spider88 processes your Personal Data for the following purposes:

1. Account Management: to create, manage, and maintain your Member Account, verify your identity and age (21+), and administer your use of the Platform's services.
2. Payment Processing: to facilitate deposits and withdrawals in Malaysian Ringgit (MYR) via supported payment channels including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and cryptocurrency platforms.
3. Regulatory Compliance: to comply with applicable Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gambling regulations, and any applicable legal or regulatory obligations imposed by competent authorities.
4. Fraud Prevention and Security: to detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other unlawful activities on the Platform.
5. Responsible Gambling: to monitor gameplay patterns that may indicate problem gambling behaviour and, where appropriate, to contact Members about available responsible gambling tools such as deposit limits, loss limits, and self-exclusion.
6. Customer Support: to respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
7. Platform Improvement: to analyse aggregate usage data to improve the functionality, performance, and user experience of the Platform.
8. Marketing Communications (where consented): to send promotional communications, bonus offers, and Platform updates to Members who have provided explicit consent. You may withdraw marketing consent at any time by contacting support or updating your Account preferences.

6 Legal Basis for Processing

Spider88 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and Spider88, specifically to provide you with Platform access, process transactions, and manage your Account.
• Legal Obligation: Processing is required for Spider88 to comply with applicable laws and regulations, including AML obligations, KYC requirements, and gaming licensing conditions.
• Legitimate Interests: Processing is in the legitimate interests of Spider88, including fraud prevention, security monitoring, responsible gambling oversight, and Platform improvement, provided such interests are not overridden by your rights and freedoms.
• Consent: For processing activities not covered by the above bases — such as marketing communications — Spider88 will seek and rely upon your explicit, freely given consent. You retain the right to withdraw consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal.

7 Data Sharing & Disclosure

Spider88 does not sell, rent, or trade your Personal Data. We may share Personal Data with third parties only in the following strictly defined circumstances:

• Payment Service Providers: to facilitate your deposit and withdrawal transactions, your payment details are necessarily shared with relevant payment processors, including banks, FPX, DuitNow, and e-wallet providers such as Touch 'n Go and Boost. These providers process your data solely as required to complete the transaction.
• KYC and Identity Verification Providers: your identity documents may be shared with accredited third-party KYC service providers for verification purposes.
• Fraud and AML Screening Services: transaction and account data may be processed by fraud detection and anti-money laundering screening service providers as required by our regulatory obligations.
• Game Studio Partners: anonymised gameplay session data may be shared with our game studio partners for audit, RTP verification, and dispute resolution purposes. No personally identifiable information is shared with game studios for marketing purposes.
• Legal and Regulatory Authorities: Spider88 may be required to disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, a lawful court order, or to protect the legal rights of Spider88 or third parties.
• Corporate Transactions: in the event of a merger, acquisition, asset sale, or restructuring of Spider88's business, your Personal Data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

8 Data Retention

Spider88 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guideline, Spider88 applies the following retention periods:

• Account Data: retained for the duration of your active Account and for a minimum of five (5) years following Account closure, as required by applicable AML and gaming regulations.
• Transaction Records: retained for a minimum of seven (7) years following the transaction date to comply with financial record-keeping obligations.
• KYC Documents: retained for a minimum of five (5) years following the conclusion of the business relationship with the Member.
• Support Communications: retained for a maximum of three (3) years from the date of the communication, unless the record is relevant to an ongoing dispute or regulatory matter.
• Technical and Log Data: typically retained for twelve (12) months for performance and security monitoring purposes.

Where Personal Data is no longer required and no legal obligation requires its retention, Spider88 will securely delete or irreversibly anonymise it in accordance with our internal data management procedures.

9 Cookies & Tracking Technologies

Spider88 uses cookies and similar tracking technologies to enhance Platform functionality, maintain session state, support security measures, and — where you have consented — to provide a more personalised experience.

The following types of cookies may be used on the Platform:

• Strictly Necessary Cookies: essential for the Platform to function and for security. These cannot be disabled. Examples include session authentication tokens and security cookies.
• Functional Cookies: used to remember your preferences such as language selection and session settings. These improve the usability of the Platform but are not strictly required for core functionality.
• Analytics Cookies: used to collect anonymised data about how Members interact with the Platform, enabling us to understand usage patterns and improve performance. Analytics data is processed in aggregate and is not linked to individual identities.
• Security Cookies: used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts on the Platform.

You may configure your browser settings to refuse or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of the Platform. Spider88 does not use third-party advertising cookies.

10 Data Security

Spider88 implements appropriate technical and organisational security measures to protect your Personal Data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and Spider88 servers;
• Encrypted storage of sensitive data including passwords (which are hashed and salted) and financial information;
• Two-factor authentication (2FA) available to all Members as an additional Account security measure;
• Role-based access controls restricting internal staff access to Personal Data on a need-to-know basis;
• Continuous automated monitoring for suspicious access patterns and potential data breaches;
• Regular security audits and penetration testing conducted by independent security professionals.

Notwithstanding these measures, no method of data transmission over the internet or method of electronic storage is entirely secure. Spider88 cannot guarantee the absolute security of Personal Data. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Spider88 will notify affected Members without undue delay in accordance with applicable notification obligations.

11 Your Rights

Subject to applicable law and certain conditions, you hold the following rights with respect to your Personal Data held by Spider88: