Privacy Policy
How GoGoSpin Handles Your Data

This Privacy Policy ("Policy") is issued by GoGoSpin ("Platform", "We", "Us", "Our"), accessible at https://gogospin.cam. It describes how GoGoSpin collects, processes, stores, and protects personal data relating to registered players, prospective players, and visitors to the platform ("Data Subjects", "You").

GoGoSpin operates as a Malaysia-focused online casino and sports betting platform. We recognise that the privacy of your personal information is important — particularly given the sensitive nature of financial data involved in online gambling services. This Policy is designed to be transparent, specific, and readable.

By registering an account or using the GoGoSpin platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to any part of this Policy, you must cease use of the platform.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly — including name, identification number, email address, device identifiers, and financial data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, GoGoSpin.
• "Data Processor" means any third party that processes personal data on behalf of GoGoSpin under a written data processing agreement.
• "KYC Data" means identity and address verification documents collected as part of the Know Your Customer compliance process.
• "Sensitive Personal Data" means data revealing racial or ethnic origin, religious beliefs, financial account details, or other categories that attract heightened protection under applicable privacy law.
• "Cookies" means small text files placed on a User's device by the GoGoSpin platform to enable session management, analytics, and personalisation.

GoGoSpin acts as the Data Controller in respect of all personal data collected through the platform at gogospin.cam. GoGoSpin operates under international online gaming licensing and processes personal data in accordance with the requirements of its licensing jurisdiction's applicable data protection framework.

For data protection enquiries, complaints, or the exercise of data subject rights, please contact our designated privacy point of contact:

• Email: [email protected]
• Live Chat: Available 24/7 via the in-platform support widget

GoGoSpin collects the following categories of personal data depending on the nature of your interaction with the platform:

GoGoSpin collects personal data through the following mechanisms:

• Direct collection: Information you provide when registering an account, completing KYC, updating your profile, initiating deposits or withdrawals, or contacting support.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you access the platform. This includes IP addresses, device fingerprinting, and session metadata.
• Payment processors: Transaction confirmation data passed to GoGoSpin by supported Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong, strictly limited to what is necessary to verify and complete transactions.
• Identity verification services: Where GoGoSpin engages licensed third-party KYC verification providers, data may be cross-referenced against identity databases to confirm authenticity of submitted documents.
• Fraud prevention systems: Automated risk assessment tools that analyse behavioural patterns and device data to detect fraudulent activity or Terms of Service violations.

GoGoSpin processes your personal data for the following defined purposes:

• Account management: Creating, maintaining, and administering your registered player account, including authentication, password resets, and account settings.
• KYC and regulatory compliance: Verifying your identity and age (minimum 21 years) as required under GoGoSpin's international licensing obligations and anti-money laundering (AML) frameworks.
• Payment processing: Facilitating deposits and withdrawals through supported Malaysian payment channels, reconciling transactions, and maintaining financial records.
• Responsible gambling: Administering deposit limits, self-exclusion requests, session reminders, and other player protection tools you activate via your account settings.
• Customer support: Responding to your queries, complaints, and requests through live chat and email, and maintaining records for dispute resolution and quality assurance.
• Platform security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other Terms violations.
• Legal obligations: Complying with applicable laws, court orders, regulatory requirements, and licensing authority directives, including record-keeping and reporting obligations.
• Platform improvement: Analysing usage patterns and technical data to improve platform performance, game offerings, and user experience — using aggregated, de-identified data where possible.
• Marketing communications: Sending promotional emails, bonus notifications, and platform updates to players who have opted in to receive such communications. You may unsubscribe at any time.

GoGoSpin relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to perform the contract between GoGoSpin and you as a registered player — including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML reporting, licensing authority mandates, and data retention laws.
• Legitimate interests: Processing necessary for GoGoSpin's legitimate business interests, including fraud prevention, platform security, and platform improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies — where we rely on your freely given, specific, and informed consent, which you may withdraw at any time without detriment to your account.

GoGoSpin does not sell your personal data to any third party. We share personal data only where strictly necessary, with the following categories of recipients:

• Payment service providers: Malaysian payment partners (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong) receive transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• KYC and identity verification providers: Licensed third-party providers engaged to verify identity documents and cross-check against relevant databases for AML compliance. Data shared is limited to what is strictly necessary for verification.
• Fraud prevention and security providers: Technology partners providing risk scoring, device fingerprinting, and fraud detection services.
• Game studio providers: Licensed international game studios that power games on the platform may receive minimal session and bet data necessary for game functionality and RNG audit purposes.
• Regulatory and licensing authorities: GoGoSpin's international licensing authority and, where legally compelled, law enforcement or government bodies may receive data in response to lawful orders or regulatory requirements.
• Professional advisers: Legal advisers, auditors, and compliance consultants under binding confidentiality obligations.

As an internationally licensed platform, GoGoSpin may transfer your personal data to countries outside Malaysia — including to our licensing jurisdiction and to the locations where our technology infrastructure and data processors are based. Such countries may not maintain data protection laws equivalent to those applicable in Malaysia.

Where personal data is transferred internationally, GoGoSpin implements appropriate safeguards to ensure that your data continues to receive adequate protection. These safeguards include:

• Contractual data protection clauses in agreements with all overseas data processors.
• Technical security measures including encryption in transit and at rest.
• Restricting overseas access to the minimum data necessary for the specific processing purpose.

GoGoSpin retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, including compliance with legal obligations. The following indicative retention periods apply:

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.

GoGoSpin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security controls include:

• Encryption in transit: All data transmitted between your device and the GoGoSpin platform is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar.
• Encryption at rest: Sensitive personal data stored on GoGoSpin's systems is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Regular security testing: GoGoSpin's systems are subject to regular vulnerability assessments and penetration testing by qualified security professionals.
• Incident response: GoGoSpin maintains a data breach incident response protocol. Where a breach is identified that poses a risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable requirements.

GoGoSpin uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small text files stored on your device when you visit the platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality. No consent required
• Functional cookies: Remember your preferences such as language settings, game display options, and last-visited categories. Consent-based
• Analytics cookies: Collect aggregated, anonymised data about how players use the platform — pages visited, session length, game preferences — to help us improve the platform experience. Consent-based
• Marketing cookies: Used where you have consented to receive personalised promotional offers and to track the effectiveness of marketing campaigns. Consent-based

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect your experience of the platform. For full details of the cookies we set and their lifespans, please contact support.

Subject to applicable law and certain limitations, you hold the following rights in relation to your personal data held by GoGoSpin:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is processed. We will respond within 30 days.
• Right to rectification: Where your personal data is inaccurate or incomplete, you have the right to request correction or completion. You can update most profile data directly from your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to legal retention obligations (e.g., AML record-keeping requirements).
• Right to restrict processing: You may request that GoGoSpin restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is contested.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another controller.
• Right to object: You may object to processing based on GoGoSpin's legitimate interests, or to direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected] or via 24/7 live chat. We will acknowledge receipt within 3 business days and respond in full within 30 days. We may ask you to verify your identity before actioning your request.

The GoGoSpin platform is strictly for adults aged 21 years and above. GoGoSpin does not knowingly collect personal data from persons under 21 years of age. Age verification is conducted as part of the mandatory KYC process for all registered accounts, and any account found to belong to a person under the age of 21 will be immediately closed and all associated data processed only to the extent necessary to manage the closure.

If you believe a person under the age of 21 has registered on GoGoSpin, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

GoGoSpin encourages parents and guardians to use parental control and internet filtering software to prevent underage individuals from accessing online gambling platforms.

GoGoSpin may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform services. Updated versions will be published on this page with a revised "Last Updated" date.

Where changes are material — for example, where we change the categories of data we collect or introduce a new processing purpose — GoGoSpin will notify registered players via email or in-platform notification prior to the changes taking effect, and where required will seek fresh consent.

Continued use of the GoGoSpin platform following publication of an updated Policy constitutes your acknowledgement of the revised document. We encourage you to review this page periodically.

For any questions, requests, or concerns relating to this Privacy Policy or GoGoSpin's handling of your personal data, please reach us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: 24/7 via the in-platform support widget — average response under 2 minutes

We aim to acknowledge all privacy-related requests within 3 business days and respond substantively within 30 days. For complex requests, we will inform you if additional time is required.