Privacy Policy Spade88 – Our Commitment to Protecting Malaysian Players' Data

In this spade88 Privacy Policy, the following words and expressions carry the meanings as defined below:

• "spade88", "we" or "platform" refers to the spade88.site website and all services provided through it.
• "You", "member" or "player" refers to any individual who accesses or uses the spade88 platform, whether as a visitor or a registered member.
• "Personal Data" refers to any information that can be used to identify you directly or indirectly, including your name, phone number, email address, and payment details.
• "Processing" refers to any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• "PDPA" refers to the Personal Data Protection Act 2010 of Malaysia, which governs the collection and processing of personal data in Malaysia.
• "Service Providers" refers to third parties involved in the operation of spade88, such as payment gateway providers and technology infrastructure providers.

Spade88 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we may collect:

Spade88 collects your personal data only for legitimate and specific purposes. We do not collect data for any purpose not stated in this policy. The primary purposes for data collection at spade88 are:

• Identity Verification & KYC: To verify that you are a legitimate individual aged 18 and above, in line with Malaysian legal requirements and anti-money laundering (AML) regulations.
• Account Management: To create, manage, and maintain your Spade88 account, including betting records, balance, and transaction history.
• Payment Processing: To process deposits and withdrawals via your preferred Malaysian payment method — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u and CIMB Clicks.
• Fraud Prevention & Security: To identify, investigate, and prevent any suspicious activity, fraud, or money laundering on the Spade88 platform.
• Customer Support: To assist you whenever you contact the spade88 support team, including resolving disputes and responding to inquiries.
• Legal Compliance: To fulfil Spade88's legal obligations under PDPA 2010 and applicable Malaysian laws.
• Service Improvement: To analyze how the platform is used in order to improve the user experience, identify technical issues, and develop new features.
• Service Communications: To send important notifications relating to your account, such as deposit confirmations, withdrawal outcomes, or changes to terms.

Spade88 does not use your data for third-party marketing without your explicit consent. You may opt out of marketing communications from Spade88 itself at any time by contacting our support team.

Personal data collected by Spade88 is used responsibly and strictly limited to the operational needs of the platform. Below is a more detailed explanation of how data is used within the context of Spade88's services:

For Sports Betting & E-Sports: Your betting records — including wagers on Malaysia Super League football, BWF championship badminton, MLBB MPL MY, and other e-sports — are retained for account management, dispute resolution, and legal compliance purposes. This data is not shared with any third party without your consent.

For VIP Programme & Bonuses: Your betting activity data is used to calculate VIP points, determine bonus eligibility, and manage the Spade88 VIP Rewards programme. This system operates automatically based on your actual account activity, without unnecessary manual intervention.

For Platform Analytics: Usage data collected through cookies and server logs is processed in aggregate (non-personally identifiable) form to understand how players interact with the spade88 platform, identify areas for improvement, and ensure optimal technical performance for all Malaysian players.

Spade88 does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, in the course of operating the platform, we may need to share certain information with the following categories of service providers:

• Payment Gateway Providers: To process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, we are required to share minimal transaction information with the relevant payment service providers. This information is limited strictly to what is necessary to complete the transaction.
• Game Providers: To provide live casino games, slots, and e-sports, minimal session data is shared with the relevant game content providers, who are bound by strict data protection agreements with Spade88.
• Technology Infrastructure Providers: Cloud and server service providers used to host the Spade88 platform may process your data as part of their infrastructure services, subject to strict data processing agreements.
• Legal Authorities: Spade88 may be required to disclose personal data to Malaysian authorities such as the police, courts, or financial regulators when mandated by law or a valid court order.

All third-party service providers working with Spade88 are required to maintain data protection standards equal to or higher than those practised by Spade88 itself. We do not permit third-party providers to use your data for their own purposes.

Spade88 continuously invests in the latest security technologies and procedures to protect the personal data of every Malaysian player. The key security measures we practise include:

• Data Encryption in Transit: All communications between your browser and Spade88's servers are encrypted using TLS 1.3 protocol with 256-bit SSL encryption. This means the information you submit — including passwords and payment details — cannot be read by third parties while in transit.
• Stored Data Encryption: Sensitive data stored in Spade88's databases — including passwords and payment account information — is encrypted using modern encryption algorithms. Passwords are never stored in readable form.
• Internal Access Controls: Only spade88 staff who require access to personal data to carry out their duties are granted the necessary permissions — and only to the data they need (least privilege principle).
• 24/7 Security Monitoring: spade88's systems are monitored around the clock to detect any unauthorized access attempts, cyberattacks, or suspicious activity.
• Regular Security Audits: The Spade88 platform undergoes regular independent security audits by third-party security experts to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Spade88 offers two-factor authentication for all member accounts as an added layer of security on top of your password.

While Spade88 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. We encourage you to play your part in keeping your account secure by using a strong password, not sharing your login credentials, and enabling 2FA.

Spade88 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are retention period guidelines for key data categories:

• Active Account Information: Retained for as long as your spade88 account is active and for two years after the account is closed, unless a longer retention period is required by law.
• Financial Transaction Records: Deposit, withdrawal, and financial transaction records are retained for seven years in accordance with Malaysian financial law requirements, including anti-money laundering obligations.
• Betting Records: Records of sports betting, live baccarat, slots, e-sports, and live match activity are retained for three years for dispute resolution and internal audit purposes.
• Support Communication Logs: All communication records with the Spade88 customer support team are retained for two years for service quality and dispute resolution purposes.
• Technical Data & Logs: Server logs and technical data are retained for ninety days for security purposes and technical troubleshooting.

When data is no longer required and there is no legal obligation to retain it, Spade88 will securely dispose of it using industry-standard deletion procedures. Disposed data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights in relation to personal data held by spade88:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time. Such requests will be processed within 21 business days.
• Right to Rectification: If you find that your personal data held by Spade88 is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data at any time, provided that such withdrawal does not affect any processing that was lawfully carried out prior to that point.
• Right to Object to Processing: Under certain circumstances, you have the right to object to the processing of your personal data, particularly for direct marketing purposes.
• Right to Erasure: You may request the deletion of your personal data that is no longer required by Spade88, subject to any legal obligations that may require such data to be retained.
• Right to Complain: If you believe spade88 has violated your privacy rights, you are entitled to file a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the rights above, please contact the Spade88 privacy team by email at support@spade88.site stating the right you wish to exercise and sufficient information for us to identify your account. We will respond within three business days with a confirmation of receipt and details on the next steps.

The Spade88 platform uses cookies — small text files stored on your device — to enhance your experience, maintain session security, and understand how the platform is used. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings. Please note, however, that removing or blocking essential cookies may affect the functionality of the Spade88 platform, including your ability to log in and place bets. Analytics cookies can be disabled without impacting the platform's core functionality.

If you have any questions, concerns, or requests regarding Spade88's Privacy Policy or how we handle your personal data, please do not hesitate to reach us through the following channels:

• Privacy Email: support@spade88.site — Please write "Privacy Enquiry" in your email subject line. We will respond within three business days.
• Live Chat: Available directly within the spade88 platform, 24 hours a day, seven days a week. For urgent privacy inquiries, this is the fastest channel.
• Support Operating Hours: The Spade88 support team operates 24/7 and is able to assist in Bahasa Malaysia, ensuring every Malaysian player gets the help they need.

Spade88 is committed to addressing all privacy-related inquiries seriously and in a timely manner. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Department under the Ministry of Communications.