Privacy Policy

BangSpin (hereinafter referred to as "BangSpin", "we", "us", or "our") operates the online gaming platform accessible at bangspin.cam and is committed to protecting and respecting the privacy of every individual who interacts with our services.

This Privacy Policy (hereinafter the "Policy") describes how BangSpin collects, processes, stores, shares, and protects personal data obtained from users (hereinafter "you", "User", or "Player") in connection with your use of the BangSpin platform, including our website, gaming services, customer support channels, and all related features.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, each of which forms part of our overall user agreement. By registering an Account on BangSpin or by using any of our services, you acknowledge that you have read and understood this Policy and consent to the processing activities described herein.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that can identify a natural person, directly or indirectly, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, BangSpin.
• "Data Processor" means a third party that processes Personal Data on behalf of BangSpin, subject to BangSpin's instructions and applicable data processing agreements.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose.
• "Account" means the registered user account created by a Player on the BangSpin platform.
• "KYC" means Know Your Customer — identity and age verification procedures conducted in accordance with applicable regulatory requirements.
• "Cookie" means a small text file placed on a User's device by the BangSpin platform for the purposes described in Section 10 of this Policy.

BangSpin acts as the Data Controller in respect of all Personal Data collected and processed through the BangSpin platform. As Data Controller, BangSpin determines the purposes for which your Personal Data is collected and the manner in which it is processed.

Where BangSpin engages third-party service providers to process Personal Data on its behalf (for example, payment processors, KYC verification service providers, or customer support platform providers), those parties act as Data Processors under BangSpin's instruction. BangSpin ensures that all Data Processors are bound by written data processing agreements that require them to process data only as directed and to implement appropriate security measures.

BangSpin collects the minimum personal data necessary to provide its services, comply with applicable legal and regulatory obligations, and maintain the security and integrity of the platform. The categories of data we collect are set out below.

4.1 Registration and Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (for the purpose of age verification — players must be 21 or above)
• Residential address, including postcode and country (Malaysia or otherwise)
• Email address
• Mobile telephone number
• Username and encrypted password

4.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (e.g., Malaysian Identity Card — MyKad, passport)
• Proof of residential address (e.g., utility bill, bank statement)
• Selfie or liveness verification image where required
• Source of funds documentation where required by enhanced due diligence procedures

4.3 Financial and Transaction Data

• Payment method details (e.g., Touch 'n Go eWallet account reference, bank account details used with Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect, DuitNow ID, FPX transaction references, USDT wallet addresses)
• Deposit and withdrawal history, including amounts in MYR, timestamps, and payment method used
• Transaction reference numbers and processing statuses

4.4 Gaming Activity Data

• Game session logs, including games played, bet amounts, outcomes, and session duration
• Sports betting selections, stake amounts, odds accepted, and settlement results
• Bonus utilisation records and wagering requirement progress
• VIP tier status and loyalty programme participation data

4.5 Technical and Usage Data

• IP address and inferred geographic location
• Device type, operating system, browser type and version
• Pages visited, click paths, and session duration on the BangSpin platform
• Referral source and campaign attribution data
• Cookie identifiers and similar tracking technologies (see Section 10)

4.6 Communications Data

• Content of support chat conversations, emails, and WhatsApp communications with our customer service team
• Feedback, survey responses, and complaint records
• Marketing preference settings and opt-in / opt-out records

BangSpin processes your Personal Data for the following purposes:

BangSpin does not sell Personal Data to third parties for their own marketing purposes. We do not use Personal Data to make automated decisions that produce legal or similarly significant effects on Users without appropriate human oversight.

BangSpin processes Personal Data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil BangSpin's obligations under the Terms & Conditions, including account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and responsible gambling regulations.
• Legitimate Interests: Processing carried out for BangSpin's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Processing carried out on the basis of your freely given consent, such as sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

BangSpin may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Processors: Third-party payment service providers (including but not limited to operators of the Touch 'n Go eWallet infrastructure, FPX gateway, DuitNow network, and USDT payment rails) for the purpose of processing deposits and withdrawals.
• KYC and AML Service Providers: Identity verification and anti-money laundering screening providers who assist BangSpin in meeting its regulatory obligations.
• Customer Support Platform Providers: Technology providers who power BangSpin's live chat, email, and WhatsApp support infrastructure.
• Analytics Providers: Platform analytics services used to understand user behaviour and improve the BangSpin platform, using anonymised or aggregated data where possible.
• Regulatory and Law Enforcement Authorities: Government bodies, regulators, courts, or law enforcement agencies where BangSpin is required by law to disclose information, or where disclosure is necessary to protect BangSpin's legal rights or the safety of its users.
• Professional Advisors: Legal counsel, auditors, and other professional advisors bound by obligations of confidentiality.

BangSpin does not sell, rent, or trade your Personal Data to any third party for commercial purposes.

BangSpin retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account Data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in accordance with AML and KYC regulatory retention requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction, as required by applicable financial regulations.
• KYC Documents: Identity verification documents are retained for the legally required period following the end of the customer relationship.
• Support Communications: Customer support interactions are retained for up to three (3) years following resolution, unless required longer for dispute or regulatory purposes.
• Marketing Data: Marketing preference data is retained until you withdraw consent or request deletion, subject to any overriding legal obligation.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to an individual.

BangSpin implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the BangSpin platform is encrypted using industry-standard Transport Layer Security.
• Data Encryption at Rest: Sensitive Personal Data stored in BangSpin's systems is encrypted at rest using strong encryption standards.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis, and staff with access are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: BangSpin supports two-factor authentication (2FA) for user accounts to provide an additional layer of account security.
• Regular Security Audits: BangSpin conducts periodic third-party security assessments to identify and remediate vulnerabilities.
• Incident Response: BangSpin maintains a data breach response procedure and will notify affected users and relevant authorities in the event of a security incident as required by applicable law.

BangSpin uses cookies and similar tracking technologies to operate and improve the platform, provide a personalised experience, and analyse usage patterns. Cookies are small text files placed on your device by our website.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function correctly — including session management, authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and VIP display preferences) to enhance your experience on the platform.
• Analytics Cookies: Collect anonymised data about how users interact with BangSpin to help us improve platform performance. Used on an aggregated, non-identifiable basis.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests. Activated only with your consent.

10.2 Managing Cookies

You may control the placement of non-essential cookies through your browser settings or through the cookie preference centre on the BangSpin platform. Please note that disabling certain cookies may affect the functionality of the platform or result in a reduced user experience.

BangSpin may transfer your Personal Data to third-party service providers or affiliated entities located outside of Malaysia in the course of providing its services. Where such transfers occur, BangSpin ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Transfer only to countries or territories recognised as providing an adequate level of data protection
• Implementation of standard contractual clauses or equivalent contractual protections approved by the relevant supervisory authority
• Binding corporate rules or other recognised transfer mechanisms where applicable

BangSpin will not transfer your Personal Data to jurisdictions that do not provide an adequate level of protection without implementing appropriate safeguards as described above.

Subject to applicable law, you hold the following rights in relation to your Personal Data held by BangSpin. To exercise any of these rights, please contact us using the details set out in Section 15.

• Right of Access: You may request a copy of the Personal Data BangSpin holds about you, along with information about how it is processed.
• Right to Rectification: You may ask BangSpin to correct any Personal Data that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you may request that BangSpin delete your Personal Data — for example, where the data is no longer necessary for the purpose for which it was collected and no overriding legal retention obligation applies.
• Right to Restriction of Processing: You may request that BangSpin temporarily stop processing your data, for example while a rectification request is under review.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your data in a commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, or to the use of your data for direct marketing purposes. Marketing opt-out requests will be processed promptly.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

BangSpin will respond to all valid rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case BangSpin will notify you of the extension and the reason for it.

BangSpin's services are strictly intended for individuals who are 21 years of age or older. BangSpin does not knowingly collect or process Personal Data from individuals under the age of 21. The age of 21 applies as BangSpin's minimum age requirement for casino-style gambling services.

If BangSpin discovers that Personal Data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated Account will be closed. If you believe that BangSpin may have inadvertently collected Personal Data from a minor, please contact our support team immediately.

BangSpin reserves the right to update or amend this Privacy Policy at any time. The effective date of the most recent version will always be displayed at the top of this page. Where changes are material, BangSpin will take reasonable steps to notify affected users — for example, by displaying a notice on the platform or by sending a communication to the registered email address associated with your Account.

Your continued use of the BangSpin platform following the publication of any amendment to this Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request Account closure in accordance with our Terms & Conditions.

For all enquiries relating to this Privacy Policy, including rights requests, data-related complaints, or general privacy concerns, please contact BangSpin's support team through the following channels. All contact details are provided as plain text only and are not clickable links.

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the BangSpin platform
• WhatsApp Support: Available 8:00 AM – 2:00 AM Malaysian Time (MYT) daily
• Support Languages: English, Bahasa Melayu, and Mandarin

BangSpin will acknowledge all privacy-related enquiries within 5 business days and aims to resolve complaints fully within 30 days. Where a complaint cannot be resolved to your satisfaction through our internal process, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.