Privacy Policy — Spaceman88

This Privacy Policy ("Policy") is issued by Spaceman88 ("the Company", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://spaceman88.lat ("the Platform"). It governs the collection, use, storage, and disclosure of personal data relating to individuals ("Users", "Players", or "you") who access or use the Platform or interact with our services in any way.

We are committed to processing personal data responsibly, transparently, and in compliance with applicable data protection legislation. This Policy is designed to give you a clear and honest account of our data practices — written in plain English, without unnecessary legalese — while still meeting the formal requirements of a binding privacy document.

By registering an account on the Platform, making a deposit, or otherwise accessing our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not create an account or use the Platform.

For the purposes of this Policy, the following terms shall have the meanings set out below:

Depending on how you interact with the Platform, Spaceman88 may collect the following categories of personal data:

Spaceman88 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile.
• Automatically — through cookies, server logs, and similar technologies when you access and interact with the Platform. This includes IP addresses, device identifiers, and browsing behaviour within the Platform.
• From third-party service providers — including KYC verification partners who perform identity checks on our behalf, payment processors who confirm the status of financial transactions, and fraud detection services that cross-reference account activity against known risk indicators.
• From publicly available sources — where applicable and lawful, such as sanctions screening databases or politically exposed persons (PEP) lists, as required under anti-money laundering obligations.

We process your personal data for the following specific purposes:

1. Account Management: To create, maintain, and administer your registered account on the Platform, including authentication and password management.
2. Transaction Processing: To process deposits via supported Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrencies) and to facilitate withdrawal requests in a timely and secure manner.
3. Identity and Age Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with anti-money laundering and responsible gambling regulations.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, and other prohibited activities on the Platform.
5. Customer Support: To respond to your enquiries, process complaints, and resolve disputes raised through our support channels.
6. Platform Improvement: To analyse usage patterns and performance data for the purpose of improving the functionality, design, and content of the Platform.
7. Regulatory Compliance: To meet our obligations under applicable gaming licence conditions, anti-money laundering legislation, and any lawful requests from regulatory or law enforcement authorities.
8. Responsible Gambling: To monitor account activity for indicators of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with responsible gambling regulations.
9. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or in-app messaging, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.

Spaceman88 processes personal data on one or more of the following legal bases, depending on the purpose:

• Contractual necessity: Processing required to perform the contract between you and Spaceman88 — namely, the provision of the gaming and betting service described in our Terms and Conditions.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering obligations, KYC requirements, and responsible gambling regulations.
• Legitimate interests: Processing carried out for purposes that serve our legitimate business interests (such as fraud prevention, platform security, and service improvement), provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Spaceman88 does not sell or rent personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors: Including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and the banking infrastructure supporting Maybank, CIMB, Public Bank, and Hong Leong transactions — to process your financial transactions securely.
• KYC and Identity Verification Partners: Third-party providers that assist in verifying your identity, age, and source of funds as required under our regulatory obligations.
• Fraud Prevention Services: Providers of fraud detection, chargeback management, and anti-money laundering screening tools.
• Cloud Infrastructure and Hosting Providers: Companies that provide the technical infrastructure on which the Platform operates, subject to strict data processing agreements.
• Game Content Providers: Where required for the operation of specific games or betting markets, limited technical data may be shared with certified game studio partners.
• Regulatory and Law Enforcement Authorities: Where we are required by law, court order, or lawful regulatory instruction to disclose personal data to a government body, regulator, or law enforcement agency.

Spaceman88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active account relationship with Spaceman88, plus a minimum of five (5) years following account closure, as required by standard anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial regulation requirements.
• KYC Documents: Retained for the minimum period required under the applicable anti-money laundering framework, typically five (5) years from the date of the most recent transaction or account closure, whichever is later.
• Support Communications: Retained for up to three (3) years from the date of last interaction, except where the content relates to an unresolved dispute, in which case records are retained until resolution plus one (1) year.
• Marketing Preferences: Retained until you withdraw consent or update your preferences, plus a reasonable suppression period to prevent accidental re-contact.
• Technical and Usage Data: Aggregated or anonymised after twelve (12) months of inactivity; raw technical logs retained for up to six (6) months for security and fraud investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Spaceman88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields at rest, including financial account details and identity document information;
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate need to process it;
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure;
• Two-factor authentication options for player accounts to reduce the risk of unauthorised account access;
• Staff training on data protection obligations and secure data handling practices;
• Incident response procedures for detecting, investigating, and notifying affected parties in the event of a confirmed data breach.

Spaceman88 uses cookies and similar technologies to operate the Platform effectively and, where you have consented, to collect analytical data that helps us improve our services. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your authenticated login state, CSRF protection tokens, and cookies used to enforce responsible gambling tools such as session limits. These cannot be disabled without affecting core Platform functionality.
• Analytical Cookies: Used, with your consent, to collect aggregated information about how Users interact with the Platform — such as pages visited, time spent, and error messages encountered. This data is used solely to improve Platform performance and user experience.
• Preference Cookies: Used to remember your settings and preferences — such as language selection and display preferences — so that you do not need to re-configure them on each visit.
• Security Cookies: Used to detect and prevent fraudulent account access, including cookies that record unusual login patterns or suspicious session behaviour.

Spaceman88 does not use cookies for third-party advertising or retargeting. You can manage cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.

As an internationally operating gaming platform, Spaceman88 may transfer personal data to service providers located outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data, which may include:

• Data processing agreements incorporating standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection frameworks;
• Transfers only to jurisdictions determined to provide an adequate level of data protection, or to service providers who have implemented comparable data security measures;
• Contractual obligations on recipients to process personal data only in accordance with Spaceman88's instructions and this Privacy Policy.

By using the Platform, you acknowledge and consent to the transfer of your personal data to service providers and infrastructure hosted outside your country of residence, subject always to the safeguards described above.

Subject to applicable law and certain limitations that may arise from our regulatory obligations (including mandatory data retention requirements), you have the following rights in relation to your personal data:

To exercise any of the rights listed above, please contact our data team via the live chat support function or by email at [email protected]. We will respond within a reasonable timeframe and, in any event, within 30 days of receiving a valid request.

Spaceman88 is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to us without your consent, please contact us immediately via live chat or at [email protected].

Upon receiving a credible notification that a minor has provided us with personal data, we will take prompt steps to verify the claim, close the relevant account, delete the associated personal data, and return any deposited funds in accordance with applicable law. Age verification is a mandatory step in our KYC process precisely to prevent access by underage individuals.

Spaceman88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date of any revision will be updated at the top of this page.

Where changes are material — that is, where they significantly alter how we collect or use your personal data in a way that may affect your rights — we will make reasonable efforts to notify you directly, such as by in-Platform notification or email to your registered address.

Continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and contact us to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Spaceman88 processes your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the Platform. This is the fastest channel for urgent data concerns.
• Email: [email protected] — we aim to respond to all written privacy enquiries within 5 business days.

For account-related queries, please also review our FAQ page. For information about responsible gambling tools and self-exclusion, visit our Responsible Gambling page. For the full Terms governing your use of the Platform, please refer to our Terms & Conditions.