This Privacy Policy explains what personal data bangspin collects from members, how it is used and stored, and the rights available to you as a registered user of the platform.
Last updated: 1 January 2026
Six core principles that govern how bangspin handles your personal data.
bangspin collects only the personal data strictly necessary to operate your account, process transactions, and comply with legal obligations. We do not collect data speculatively.
All data transmitted between your device and bangspin's servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks like Maybank and CIMB.
bangspin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data sharing is limited to service providers necessary to operate the platform.
Access to Member personal data within bangspin is restricted to authorised personnel on a strict need-to-know basis. All staff with data access are bound by confidentiality obligations.
If you believe bangspin holds inaccurate personal data about you, you have the right to request correction at any time by contacting our support team with supporting documentation.
Subject to legal retention obligations, you may request deletion of your personal data from bangspin's systems upon account closure. Requests are reviewed and actioned within 30 days.
1.1 bangspin ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the bangspin platform at bangspin.org ("Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with the Platform and all services provided therein.
1.2 This Policy applies to all Members, prospective Members, and visitors to the bangspin Platform, regardless of the device or browser used to access it. It should be read in conjunction with our Terms & Conditions, which are incorporated herein by reference.
1.3 bangspin operates primarily in the Malaysian market, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other Malaysian states. Our data handling practices are designed with Malaysian members in mind, and we take our obligations under applicable data protection frameworks seriously.
2.1 For the purposes of applicable data protection law, bangspin acts as the data controller in respect of personal data collected through the Platform. As data controller, bangspin determines the purposes and means of processing personal data as described in this Policy.
2.2 Where bangspin engages third-party service providers to process personal data on its behalf (for example, payment processors or fraud detection services), those providers act as data processors and are contractually required to process data only in accordance with bangspin's instructions and this Policy.
3.1 Registration Data. When you create a bangspin account, we collect your full legal name, date of birth, residential address, email address, and Malaysian mobile phone number. This information is required to create and manage your account.
3.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) requirements and to verify your age and identity, we may collect copies of government-issued identification documents (such as your MyKad or passport), proof of address, and in certain cases, selfie photographs for biometric comparison.
3.3 Financial Data. We collect transaction data including deposit amounts, withdrawal requests, payment method details (e.g., Touch n Go eWallet account reference, bank account or card details), and transaction history. We do not store full card numbers on our servers; payment card data is handled by PCI DSS-compliant payment processors.
3.4 Gaming Activity Data. We collect records of your gaming activity on the Platform, including game sessions, wager amounts, wins and losses, bonus utilisation, and session duration. This data is used for account management, responsible gaming monitoring, and regulatory compliance.
3.5 Technical & Device Data. We automatically collect certain technical information when you access the Platform, including your IP address, device type and operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.
3.6 Communication Data. If you contact bangspin support via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory purposes.
3.7 Preference Data. We may collect data about your Platform preferences, game favourites, notification settings, and responsible gaming tool configurations to personalise your experience.
4.1 bangspin uses the personal data collected for the following purposes:
5.1 bangspin processes your personal data on one or more of the following legal bases:
6.1 bangspin uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device by your browser.
6.2 Essential cookies are necessary for the Platform to function — they maintain your login session, remember your language preference, and ensure platform security. These cannot be disabled without impairing Platform functionality.
6.3 Analytics cookies collect anonymised information about how visitors use the Platform — which pages are visited most frequently, where visitors come from, and how they navigate between pages. This helps bangspin improve the platform experience.
6.4 Preference cookies remember your choices and settings on the Platform, such as game display preferences and notification settings.
6.5 You may configure your browser to refuse or delete cookies; however, disabling essential cookies may prevent you from logging in or using certain Platform features. bangspin's cookie settings panel (accessible via the Platform) allows you to manage non-essential cookie preferences.
7.1 bangspin does not sell your personal data to third parties. We may share personal data with the following categories of recipients, strictly as necessary:
7.2 All third-party recipients are contractually required to maintain appropriate security standards and to use personal data only for the specified purposes. bangspin does not permit third-party service providers to use Member data for their own independent marketing or commercial purposes.
8.1 bangspin retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations.
8.2 Account data is retained for the duration of the Member relationship and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
8.3 Transaction records and gaming activity logs are retained for a minimum of five (5) years from the date of the relevant transaction or activity.
8.4 Communication records (support correspondence) are retained for a minimum of three (3) years.
8.5 Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with any individual.
9.1 bangspin implements a range of technical and organisational security measures to protect Member personal data against unauthorised access, disclosure, alteration, or destruction. These include 256-bit SSL/TLS encryption for data in transit, encryption at rest for sensitive data fields, role-based access controls, multi-factor authentication for administrative access, and regular security audits and penetration testing.
9.2 Despite these measures, no method of data transmission over the internet or method of electronic storage is completely secure. bangspin cannot guarantee absolute security but commits to promptly notifying affected Members and relevant authorities in the event of a data breach that poses a significant risk to individual rights and freedoms.
10.1 bangspin may transfer personal data to countries outside Malaysia where our service providers, infrastructure partners, or group entities are located. Where such transfers occur, bangspin ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to ensure your data receives an equivalent level of protection.
10.2 By using the bangspin Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this Policy.
11.1 Subject to applicable law, you have the following rights in relation to your personal data held by bangspin:
11.2 To exercise any of these rights, please contact bangspin support with your request. Requests will be acknowledged within five (5) business days and actioned within thirty (30) days of receipt, subject to identity verification. Contact email (plain text): [email protected]
12.1 The bangspin Platform is strictly intended for individuals who are 21 years of age or older. bangspin does not knowingly collect personal data from anyone under 21. If bangspin becomes aware that it has inadvertently collected personal data from an individual under 21, that data will be deleted immediately and the associated account closed.
12.2 If you believe a minor has registered with bangspin, please contact support immediately at the email address listed in Section 15.
13.1 With your consent, bangspin may send you promotional communications about platform offers, new game launches, bonus promotions, and sportsbook events relevant to your interests — such as Malaysia Super League betting markets, EPL accumulator promotions, or Live Casino bonus offers.
13.2 You may opt out of marketing communications at any time by updating your notification preferences in your bangspin account settings, or by contacting support. Opting out of marketing communications does not affect the delivery of transactional and account-related messages, which are sent regardless of marketing preferences.
14.1 bangspin reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. Material changes will be communicated to Members via email or on-platform notification prior to the effective date.
14.2 The "Last Updated" date at the top of this page reflects when the most recent substantive changes were made. Continued use of the bangspin Platform following the effective date of any update constitutes acceptance of the revised Policy.
15.1 If you have questions, concerns, or requests relating to this Privacy Policy or bangspin's handling of your personal data, please contact our Data Protection team.
15.2 Contact email (plain text — not a clickable link): [email protected]
15.3 bangspin aims to acknowledge all privacy-related enquiries within five (5) business days and to resolve them within thirty (30) days. For complex requests, we will keep you informed of progress throughout the handling period.
Our bangspin team is here 24/7. Check our FAQ for quick answers or log in to manage your privacy preferences directly in your account settings.
Visit FAQ Login to bangspin