At 98spin, your privacy is fundamental to how we build and operate our platform. This policy explains clearly what data we collect, why we collect it, how it is used, and the rights you hold over your personal information.
Last Updated: 1 January 2026This Privacy Policy ("Policy") sets out the basis on which 98spin ("we", "us", "our", or the "Company") collects, processes, stores, and discloses personal data obtained from users ("you", "your", or "User") who access or use the 98spin platform at https://98spin.cam (the "Platform").
We are committed to handling personal information responsibly, transparently, and in accordance with internationally recognized data protection principles. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which govern your use of the Platform and contain additional provisions relevant to your personal data.
Key Point: We will never sell your personal data to third parties for their own marketing purposes. Data shared with service providers is strictly limited to what is necessary for delivering the 98spin service to you.
98spin acts as the data controller for all personal data collected through the Platform. As data controller, we determine the purposes and means by which your personal data is processed. Our primary point of contact for all privacy-related enquiries is:
Data Privacy Team — 98spin
Website: https://98spin.cam
Email: [email protected]
Operating Hours: 24 hours a day, 7 days a week (WIB, UTC+7)
Where 98spin engages third-party processors (for example, payment gateway providers or fraud detection services), those entities act as data processors under contractual obligation to process your data only on our instructions and to implement adequate security measures.
The categories of personal data we collect about you depend on how you interact with the Platform. The table below summarizes the primary data categories, specific data points within each category, and the typical source of collection.
| Data Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, national identity number (KTP), gender, photograph | Provided by you during registration or KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, residential address | Provided by you during registration or account updates |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay), transaction amounts in IDR, deposit and withdrawal history | Provided by you when adding a payment method or transacting |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, bonus usage | Automatically generated by Platform activity |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Automatically collected via cookies and server logs |
| Communications Data | Content of live chat conversations, support ticket submissions, email correspondence with our team | Generated when you contact 98spin customer support |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, cooling-off periods elected, problem gambling flags | Generated by your use of player protection tools or support team assessments |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information — except where health-related data is volunteered by a User in the context of a responsible gaming self-exclusion request, in which case it is processed solely for player protection purposes.
98spin collects personal data through the following channels:
We process your personal data only where we have a lawful basis for doing so. The table below sets out our primary processing purposes, the data categories used, and the corresponding legal basis:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & management | Identity, Contact | Performance of contract |
| Identity verification (KYC) | Identity, Financial | Legal obligation; legitimate interests |
| Processing deposits & withdrawals | Financial, Identity | Performance of contract |
| Fraud detection & AML compliance | Financial, Technical, Identity | Legal obligation; legitimate interests |
| Delivering gaming services | Gaming Activity, Technical | Performance of contract |
| Customer support | Communications, Identity | Performance of contract; legitimate interests |
| Responsible gaming monitoring | Gaming Activity, Responsible Gaming | Legal obligation; legitimate interests |
| Platform analytics & improvement | Technical, Gaming Activity | Legitimate interests |
| Promotional communications | Contact, Gaming Activity | Consent (you may withdraw at any time) |
Consent Withdrawal: Where our legal basis for processing is your consent, you may withdraw that consent at any time by contacting us at [email protected] or by updating your communication preferences within your Account Settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
98spin does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:
We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:
Once the applicable retention period expires, data is securely deleted or anonymized so that it can no longer be linked to any identifiable individual.
As an internationally operating platform serving users primarily in Indonesia, 98spin may transfer your personal data to servers and service providers located outside Indonesia. Where such transfers occur, we implement appropriate safeguards to ensure that your data receives a level of protection equivalent to that described in this Policy.
Safeguards we use for international transfers include: contractual data processing agreements incorporating standard data protection clauses; transfers only to jurisdictions that maintain adequate data protection frameworks recognized by international standards; and technical security controls (encryption in transit and at rest) applied consistently regardless of data location.
If you wish to obtain further information about the specific safeguards applied to any international transfer of your personal data, please contact our Data Privacy Team at [email protected].
98spin uses cookies and similar tracking technologies to operate the Platform effectively, deliver a personalized experience, and gather analytics data that helps us improve our services. A cookie is a small text file stored on your device by your browser at the instruction of a website.
9.1 Types of Cookies We Use:
9.2 Managing Cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair or prevent your access to the Platform. Detailed cookie management instructions for major browsers are available on the respective browser vendor's support pages.
No Cross-Site Advertising: 98spin does not use cookies or tracking pixels that follow you across third-party websites to deliver targeted advertisements. Our cookies are limited to enhancing your on-platform experience and maintaining platform security.
As a User of the 98spin Platform, you hold a number of rights over your personal data. We are committed to facilitating the exercise of these rights promptly and without undue obstacle. Your rights are summarized below:
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving a verifiable request. We may need to verify your identity before actioning the request to ensure we do not disclose data to unauthorized parties.
The 98spin Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification, and all accounts are subject to KYC age verification procedures.
If we become aware that personal data has been collected from a person under 21 years of age without verifiable parental or guardian consent, we will immediately suspend the relevant account, delete all associated personal data, and take appropriate remedial action in accordance with our Responsible Gaming policy.
If you are a parent or guardian and believe your child has registered on the Platform without your knowledge, please contact us immediately at [email protected] so we can investigate and act without delay.
98spin implements a comprehensive, multi-layered data security framework designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our technical and organizational security measures include:
Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected Users and relevant authorities in accordance with applicable notification obligations.
The 98spin Platform may contain references to third-party game providers, payment processors, and other service partners. This Policy applies solely to data collected and processed by 98spin. We are not responsible for the privacy practices of third-party websites or services, even where a link or integration exists within the Platform.
We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform. Game studios such as Pragmatic Play, Evolution Gaming, and Spribe maintain their own privacy policies that govern how limited technical data shared with them is handled on their end.
98spin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable regulations, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered Users by email at least 7 days before the amended Policy takes effect.
Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should cease using the Platform and close your account before the updated Policy takes effect.
The most current version of this Privacy Policy is always accessible at https://98spin.cam/privacy-policy. We recommend bookmarking this page and checking it periodically.
If you have questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a concern about how we handle your personal data, please contact our Data Privacy Team using the details below:
Data Privacy Team — 98spin
Email: [email protected]
Subject line: "Privacy Rights Request" or "Privacy Complaint"
Response time: Within 30 calendar days of receipt of a verifiable request
Support hours: 24/7, every day of the year (WIB, UTC+7)
We take all privacy complaints seriously and will investigate and respond to every submission in good faith. If you are not satisfied with our response, you retain the right to escalate your complaint to a competent data protection supervisory authority in your jurisdiction.
Six core principles that guide every decision 98spin makes about your personal data
Every byte of data exchanged between your device and 98spin's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks. Your financial details and identity documents are never transmitted in plain text.
Your personal data is never sold, rented, or traded to third-party marketers. The only parties with access to your data are those directly involved in delivering and securing the 98spin service — all under binding contractual obligations.
You hold meaningful rights over your data at all times — access, correction, deletion, portability, and the ability to object to certain processing. Every request submitted to our Data Privacy Team is handled within 30 calendar days.
We do not retain your data indefinitely. Clear retention schedules govern every data category — once a retention period expires, data is securely deleted or anonymized. We hold only what is necessary for as long as it is necessary.
Independent cybersecurity specialists conduct scheduled penetration tests and security reviews of our Platform infrastructure. We act promptly on any findings to maintain the integrity of the systems that protect your data.
Your Indonesian banking details — whether BCA, BRI, BNI, Mandiri, or e-wallets like OVO and GoPay — are handled through encrypted payment channels. Account numbers and credentials are stored in tokenized form and never exposed to game systems.
Our Data Privacy Team is available around the clock to address any concerns. You can also explore our related policies and our FAQ for answers to the most common questions about how 98spin operates.