bangspin Privacy Policy

1. Introduction

1.1 bangspin ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy describes how bangspin collects, uses, stores, discloses, and protects personal data in accordance with applicable data protection legislation.

1.2 bangspin operates as a licensed online gaming platform serving Malaysian users. As an operator subject to international gaming authority regulation, bangspin is required to collect and process certain categories of personal data as a condition of maintaining its gaming licence and satisfying Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.

1.3 This Policy should be read alongside the bangspin Terms & Conditions and Responsible Gaming Policy. By registering for a bangspin account or using any of our services, you consent to the processing of your personal data as described in this Policy.

2. Personal Data We Collect

2.1 bangspin collects personal data through multiple channels, including account registration, identity verification, payment processing, and ordinary use of the Platform. The categories of data we collect include:

2.1.1 Registration & Identity Data

• Full legal name and date of birth;
• Email address and Malaysian mobile telephone number;
• Residential address;
• Copies of identity documents submitted for KYC verification (e.g. NRIC, passport);
• Selfie or facial image submitted during enhanced verification processes.

2.1.2 Financial Data

• Payment method identifiers (eWallet IDs, bank account numbers masked to last 4 digits, FPX transaction references);
• Deposit and withdrawal transaction records including amounts, dates, and processing status;
• Source of funds documentation where required by AML procedures.

2.1.3 Technical & Usage Data

• IP address, device type, operating system, and browser type at the time of access;
• Session duration, pages visited, games accessed, and in-game activity;
• Login timestamps and approximate geolocation derived from IP address;
• Cookie and tracking data as described in Section 6.

2.1.4 Communications Data

• Content of live chat conversations, email correspondence, and support tickets submitted to bangspin;
• Records of marketing communications sent and your response to them.

3. How We Use Your Personal Data

3.1 bangspin processes personal data for the following purposes:

• Account management: Creating, maintaining, and securing your bangspin account; verifying your identity and age; processing bangspin login requests; and enabling account recovery.
• Service delivery: Facilitating deposits, withdrawals, game participation, bonus allocations, and all other services available through the Platform.
• Legal compliance: Fulfilling KYC, AML, and reporting obligations required by our gaming licence and applicable Malaysian and international regulations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, collusion, and other prohibited activities.
• Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling; administering self-exclusion requests; and notifying Members of deposit limit thresholds.
• Platform improvement: Analysing aggregated usage data to improve platform performance, user experience, and game content.
• Marketing: Sending promotional offers, new game alerts, and personalised recommendations to Members who have opted in to marketing communications.

4. Legal Basis for Processing

4.1 bangspin processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations under the Terms & Conditions you have accepted, including account operation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations and gaming authority requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

5.1 bangspin does not sell, rent, or trade your personal data. We may share personal data with the following categories of third party, strictly for the purposes described:

• Payment processors: Including Touch 'n Go eWallet operator, Boost, FPX payment gateway operators, and banking partners (Maybank, CIMB, Public Bank), solely to process your financial transactions;
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents during registration or withdrawal processing;
• Fraud and AML screening services: To screen transactions against sanctions lists and detect suspicious activity as required by law;
• Gaming regulators and law enforcement: Where required by applicable law, court order, or regulatory direction;
• IT infrastructure and cloud service providers: Hosting, data storage, and platform operations, under contractual obligations to maintain the same level of data protection as bangspin;
• Game content providers: Game studios whose titles are available on the Platform may receive anonymised gameplay data for game performance purposes. No personally identifiable information is shared with game providers.

5.2 All third-party service providers engaged by bangspin are contractually bound to process personal data only for the specified purpose, to maintain appropriate security measures, and not to retain data beyond what is necessary.

6. Cookies & Tracking Technologies

6.1 bangspin uses cookies and similar tracking technologies to operate the Platform and improve user experience. Cookies are small text files stored on your device by your browser. The categories of cookies bangspin uses are:

• Essential cookies: Required for core Platform functionality including session authentication, bangspin login state, and security tokens. These cannot be disabled without affecting Platform operation.
• Functional cookies: Store your preferences such as language settings and notification options to personalise your experience across sessions.
• Analytics cookies: Collect anonymised data about how Members navigate the Platform — page load times, game page visits, error rates — to help us improve performance. These are optional and subject to your consent.

6.2 You may manage or disable non-essential cookies through your browser settings at any time. Disabling essential cookies will prevent you from using bangspin login and accessing account features.

7. Data Retention

7.1 bangspin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements.

7.2 Specific retention periods applicable to bangspin include:

• Account registration and KYC documentation: retained for a minimum of 5 years following account closure, in compliance with AML regulations;
• Financial transaction records: retained for a minimum of 7 years;
• Support correspondence: retained for 3 years from date of last interaction;
• Marketing consent records: retained until consent is withdrawn and for 2 years thereafter.

7.3 Upon expiry of the applicable retention period, data will be securely deleted or anonymised such that it can no longer be associated with any individual.

8. Your Privacy Rights

8.1 Subject to applicable law and any overriding legal obligation, you have the following rights in respect of your personal data held by bangspin:

• Right of access: Request a copy of the personal data bangspin holds about you;
• Right of rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements;
• Right to restrict processing: Request that bangspin limit processing of your data in certain circumstances;
• Right to data portability: Receive your personal data in a structured, machine-readable format for transfer to another service provider;
• Right to withdraw consent: Withdraw consent for marketing communications or non-essential cookies at any time, without affecting prior processing.

8.2 To exercise any of these rights, contact bangspin via [email protected] with the subject line "Privacy Request". bangspin will respond within 30 days. Identity verification may be required before any request is processed.

9. Data Security

9.1 bangspin implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and bangspin servers;
• Encrypted storage of sensitive data at rest including passwords (hashed using bcrypt) and payment identifiers;
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular penetration testing and security audits by independent third parties;
• Multi-factor authentication for all internal system access.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bangspin will notify affected Members and relevant regulatory authorities within the timeframes required by applicable law.

10. Children's Privacy

10.1 The bangspin Platform is strictly restricted to individuals aged 21 and above. bangspin does not knowingly collect personal data from persons under 21. If bangspin becomes aware that personal data has been collected from an underage individual, such data will be deleted immediately and the account suspended.

10.2 If you believe a minor has registered on the bangspin Platform, please contact [email protected] immediately.

11. International Data Transfers

11.1 In the course of operating the Platform, your personal data may be transferred to and processed in countries outside Malaysia — for example, where bangspin's hosting infrastructure or third-party service providers are located.

11.2 Where such transfers occur, bangspin ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection law.

12. Changes to This Privacy Policy

12.1 bangspin may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this page will be updated accordingly.

12.2 Where a change is material, bangspin will notify registered Members via email or a prominent notice on the Platform at least 14 days before the change takes effect. Continued use of the Platform following notification constitutes acceptance of the revised Policy.

13. Contact & Data Enquiries

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy-related concern, please contact bangspin's data team: