gogospin Privacy Policy

1. Introduction

Welcome to gogospin. This Privacy Policy explains how gogospin ("we", "us", "our") collects, processes, stores, and protects personal data belonging to users ("you", "your") who access or use the gogospin platform, including our website at gogospin.lat and any associated services, features, or games offered therein.

gogospin is committed to maintaining the highest standard of data privacy for all players — particularly those based in Malaysia, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and across the country. By accessing gogospin and registering an account, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

2. Data We Collect

To operate your account, process deposits and withdrawals in Malaysian Ringgit (MYR), and provide a safe gaming environment, gogospin collects the following categories of personal data:

• Identity Data: Full name, date of birth, national identification number (NRIC or passport), and nationality — required for Know Your Customer (KYC) verification.
• Contact Data: Email address, Malaysian mobile number, and residential address (including postcode and state).
• Account Data: Username, encrypted password, account preferences, deposit and withdrawal history, bonus usage, and gaming activity logs.
• Financial Data: Payment method details used for transactions — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank. gogospin does not store full card numbers; payment data is tokenised by our PCI-DSS compliant processors.
• Technical Data: IP address, device type, browser type, operating system, session timestamps, cookies, and referral source data.
• Usage Data: Games played, betting activity, session durations, feature interactions, and responsible gaming tool usage.
• Communications Data: Records of any messages you send to our support team, including live chat transcripts and email correspondence.

3. How We Use Your Data

gogospin processes your personal data for the following legitimate purposes:

• To create, maintain, and manage your player account on the gogospin platform.
• To verify your identity and age (21+) in compliance with our responsible gaming obligations.
• To process deposits and withdrawals in MYR through your chosen payment method.
• To deliver the games, sportsbook markets, arcade titles, and casino experiences you request.
• To detect, prevent, and investigate fraudulent activity, money laundering, or any other unlawful behaviour on the platform.
• To provide 24/7 customer support via live chat and email.
• To send you transactional communications such as deposit confirmations, withdrawal updates, and security alerts — these are not optional as they are essential to account operation.
• To send you marketing communications about promotions, bonuses, or new features — only if you have given your explicit consent. You may withdraw this consent at any time.
• To conduct platform analytics, monitor system performance, and improve our services over time.
• To comply with applicable laws, regulatory guidance, and audit requirements.

4. Legal Basis for Processing

gogospin processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver our services to you under the Terms & Conditions you accepted at registration.
• Legal Obligation: Processing required to meet AML (Anti-Money Laundering), KYC (Know Your Customer), and age verification requirements.
• Legitimate Interests: Processing carried out to detect fraud, maintain platform security, and improve our product — provided our interests do not override your fundamental rights.
• Consent: Marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained.

5. Cookies and Tracking Technologies

gogospin uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and gather analytical data that helps us improve the platform. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function. These enable you to log in, navigate between pages, and use core features. You cannot opt out of these without affecting your ability to use gogospin.
• Functional Cookies: Remember your preferences such as language settings, last visited game category, and display options so you don't have to reconfigure them on each visit.
• Analytical Cookies: Help us understand how players interact with the platform — which pages are visited most, where users drop off, and how long sessions typically last. This data is aggregated and anonymised.
• Marketing Cookies: Used only with your consent to serve relevant promotional content. You may disable these via your account settings or browser controls at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the gogospin platform.

6. Sharing Your Data

gogospin does not sell or rent your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment Processors: To facilitate MYR deposits and withdrawals through local providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks. These processors are contractually bound to handle your data securely and only for the purpose of completing your transactions.
• Identity Verification Providers: Third-party KYC and age verification services that assist gogospin in confirming your identity and ensuring you meet the 21+ age requirement.
• Technology and Hosting Partners: Cloud infrastructure and software providers that power gogospin's platform. All such partners operate under strict data processing agreements and are prohibited from using your data for their own purposes.
• Fraud Prevention and Security Services: Specialist providers that help us detect suspicious activity, prevent account takeover, and maintain platform integrity.
• Legal and Regulatory Authorities: Where we are legally required to disclose your data — for example, in response to a court order, regulatory investigation, or law enforcement request from Malaysian authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of any such change via email or a prominent notice on the platform.

7. International Data Transfers

gogospin's primary operations are focused on Malaysian players. However, some of our technology infrastructure and service partners may process data in jurisdictions outside Malaysia. Where such transfers occur, gogospin ensures that appropriate safeguards are in place — including standard contractual clauses, adequacy decisions, or equivalent mechanisms — to provide a level of data protection consistent with this Privacy Policy.

8. Data Retention

gogospin retains your personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. Our general retention schedule is as follows:

• Active Account Data: Retained for the duration of your account's active status, plus a minimum of five (5) years after account closure to meet AML and financial record-keeping obligations.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with financial regulations applicable to online gaming platforms.
• KYC and Identity Documents: Retained for the period required by applicable identity verification regulations, typically five (5) years post account closure.
• Support Communications: Chat logs and email records retained for up to three (3) years to facilitate dispute resolution and service quality review.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

Once a retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual player.

9. Your Rights

As a gogospin player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] — we aim to respond to all valid requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any data we hold is inaccurate or incomplete, you have the right to ask us to correct it.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Note that we may be unable to fulfil this request where retention is required by law (for example, to satisfy AML obligations).
• Right to Restriction: You may ask us to pause the processing of your data while a dispute or correction request is being resolved.
• Right to Data Portability: Where technically feasible, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

10. Security Measures

gogospin employs a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security practices include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) options for player account access.
• Role-based access controls ensuring that only authorised gogospin personnel can access specific categories of player data.
• Regular third-party security audits and penetration testing of our platform infrastructure.
• Automated fraud detection systems that flag unusual account activity in real time.
• Incident response procedures with defined escalation paths and notification timelines in the event of a data breach.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your gogospin account and to enable MFA wherever possible.

11. Responsible Gaming and Data

gogospin is committed to responsible gaming. As part of this commitment, we process certain data specifically to support player wellbeing — including monitoring betting patterns, tracking session durations, and logging self-exclusion requests. This data is used solely for responsible gaming purposes and is never shared with third-party marketers.

If you use our self-exclusion, deposit limit, or reality check tools, your preferences are stored securely and enforced automatically by the platform. You can review our full approach on our Responsible Gaming page.

12. Children and Minors

gogospin is strictly an adults-only platform (21+). We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step during the registration process, and accounts found to belong to underage users will be suspended immediately and all associated data deleted.

If you are a parent or guardian and have reason to believe that a person under 21 has registered on gogospin, please contact us immediately at [email protected] so we can take prompt action.

13. Links to Third-Party Services

gogospin's platform may reference payment gateways and identity verification services operated by third parties. Once you navigate away from gogospin's domain, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party service you interact with, including your chosen eWallet provider or banking app.

14. Changes to This Privacy Policy

gogospin reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered players via email or a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of gogospin after the effective date of any update constitutes your acceptance of the revised policy.

The version date at the top of this page always reflects the most recent revision. We recommend reviewing this page periodically to stay informed of how we are protecting your information.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to our dedicated privacy support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the gogospin platform
• Response Time: Under 3 minutes via live chat during peak MYT hours; up to 48 hours for email enquiries