OFFICIAL SPINS DOCUMENT

Spins Privacy Policy — Personal Data Protection for Malaysian Players

At Spins, your privacy is not simply a legal obligation — it is our genuine commitment to every member. Understand how we collect, use and protect your personal data in a transparent and responsible manner.

Privacy Policy
Spins Malaysia Platform
Updated: January 2026
SSL
256-bit
0
Data Sales
24/7
Monitoring

Spins' Six Data Protection Principles

Spins' commitment to Malaysian player data privacy — not just words, but real practices you can see for yourself

Bank-Grade 256-Bit SSL Encryption

All data transmitted between your device and Spins servers is protected by 256-bit SSL encryption — the same technology used by Malaysia's leading banks such as Maybank and CIMB to secure their customers' transactions. No third party can read or intercept your data in transit.

No Sale of Data to Third Parties

Spins has never, and will never, sell, rent or trade members' personal data to any third party for commercial purposes. Your data is used solely for the purposes of operating the Spins platform and nothing beyond that — this is an uncompromising commitment on our part.

Minimum Data Access — Only What Is Necessary

Spins only collects data that is strictly necessary for platform operations. We do not collect irrelevant information, we do not retain data longer than necessary, and internal staff only have access to the data they need to carry out their specific duties.

Member Access Rights & Full Control

Every Spins member has the full right to access their personal data, request corrections to inaccurate information, and in certain circumstances request data deletion. All such requests can be submitted through the Spins support team and will be processed within a reasonable timeframe.

Limited & Secure Data Retention

Spins retains member personal data only for as long as necessary to meet operational and relevant legal compliance requirements. When data is no longer needed, it is securely and irreversibly deleted using certified data deletion procedures.

Immediate Notification in the Event of an Incident

While Spins invests heavily in security infrastructure to prevent any data breach incidents, we are committed to promptly notifying affected members should any serious security incident occur — along with the steps they should take to protect their accounts.

How Your Data Is Processed at Spins

A transparent overview of your personal data lifecycle, from collection through to protection on the Spins platform

1
Collection

Data is collected during registration, platform use, and interactions with Spins customer support

2
Encryption

All data is immediately encrypted with 256-bit SSL before being stored or transmitted within Spins systems

3
Usage

Data is used solely for Spins operations — verification, transactions, and service improvement

4
Secure Storage & Deletion

Data is retained only for as long as necessary, then securely deleted in accordance with Spins' certified deletion procedures

1Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how Spins — the online casino platform operating at spins.lat — collects, uses, stores, protects, and discloses your personal data when you use our services. This Policy applies to all registered members, guest users, and anyone who interacts with the Spins platform through any channel — website, live chat, or support email.

By registering an account or continuing to use the Spins platform after reading this policy, you acknowledge that you have understood and agreed to how we handle your personal data as set out in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of the platform and contact us at [email protected] for further guidance.

Spins Privacy Commitment: We hold your data privacy to the same rigorous standards as Malaysia's trusted financial institutions. Your trust is the most valuable asset we safeguard.

2Personal Data We Collect

Spins collects several categories of personal data depending on how you interact with our platform. We only collect data that is genuinely necessary for the stated purposes.

Data You Provide Directly:

  • Full name as shown on your official Malaysian identification document (MyKad or passport)
  • An active Malaysian email address and phone number
  • Date of birth for age verification (21 and above)
  • Residential address in Malaysia
  • Payment method details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX account) — account numbers are not stored directly by Spins
  • Copy of identification document for the KYC process
  • Records of communications with the Spins support team

Automatically Collected Data:

  • IP address and general geolocation information
  • Device type, operating system and web browser version
  • Activity logs within the platform — pages visited, games played, session duration
  • Technical data for diagnosing and resolving platform issues
  • Cookie information as described in Section 7

3How We Use Your Data

Data collected by Spins is used solely for the following purposes:

  • Account Management: Creating, maintaining and securing your Spins account, including the login process and two-factor authentication
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX and other payment methods, as well as securely processing your winnings withdrawals
  • Identity Verification (KYC): Verifying your age and identity to ensure compliance with Spins membership eligibility requirements
  • Service Provision: Enabling you to access games, bonuses, promotions and all features on the Spins platform
  • Customer Support: Processing your enquiries, complaints and support requests across all Spins support channels
  • Security & Fraud Prevention: Detecting and preventing fraud, money laundering and platform abuse
  • Platform Improvements: Analysing aggregated (not individual) usage patterns to improve the Spins user experience
  • Service Communications: Sending important notifications regarding your account, transactions, and changes to Spins policies
  • Responsible Gaming: Monitoring gameplay patterns to identify members who may benefit from responsible gaming support

Spins does not use your data for third-party advertising, commercial profiling for sale to other companies, or any purpose not explicitly stated in this Privacy Policy.

4Legal Basis for Data Processing

Spins processes your personal data on valid legal bases, including:

  • Contract Performance: Processing required to provide the Spins platform services to you as a registered member — including account management, transaction processing and game provision
  • Legitimate Interests: Processing required for the legitimate interests of Spins and its members — including platform security, fraud prevention, and service improvement
  • Legal Obligations: Processing necessary to fulfil applicable legal obligations — including KYC and anti-money laundering requirements
  • Consent: For optional marketing communications (if you have opted in) — you may withdraw your consent at any time

5Data Sharing with Third Parties

Spins does not sell personal data of members to any party. However, we may share necessary data with the following categories of third parties, solely for the purpose of operating the platform:

  • Payment Processing Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX operators receive only the minimum transaction information required to securely process your deposits and withdrawals
  • Game Service Providers: Third-party game providers in the Spins catalogue may receive session identifiers required for functionality — without any personally identifiable information
  • Technical Service Providers: Companies that provide the technical infrastructure, hosting and security for the Spins platform, under strict data protection agreements
  • Legal Authority: Spins will disclose personal data to the police, courts, or relevant Malaysian authorities when required by law or to prevent serious crime.

All third parties that receive data from Spins are bound by strict data processing agreements and are only permitted to use that data for purposes specified by Spins.

6Security & Data Protection

Spins implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or improper disclosure:

  • 256-Bit SSL Encryption: All communications between your device and Spins servers are protected by 256-bit SSL encryption, without exception
  • Encrypted Data Storage: Sensitive personal data is stored in encrypted format within databases protected by multiple layers of security
  • Strict Access Controls: Only Spins staff with a legitimate operational need are granted access to members' personal data, with a full audit log maintained
  • 24/7 Security Monitoring: The Spins security team monitors the platform around the clock to detect and respond to any security threats
  • Regular Security Testing: Penetration testing and security audits are conducted regularly by independent third parties.
  • Two-Factor Authentication (2FA): Available free of charge to all Spins accounts — we strongly encourage all members to enable 2FA

7Cookies & Tracking Technologies

The Spins platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The types of cookies used include:

  • Essential Cookies: Required for core platform functions such as login session management, security, and language preferences. These cookies cannot be disabled without affecting platform functionality
  • Performance Cookies: Collecting information on how you use the Spins platform — most visited pages, time spent and errors encountered — to help us improve the platform
  • Functional Cookies: Storing your preferences such as language settings, theme and platform configurations you have chosen for a more personalised experience

You can manage your cookie settings through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the Spins platform. Spins cookies are not used to track your activity on other websites outside our platform.

8International Data Transfers

In operating the Spins platform, your personal data may be processed on servers located outside Malaysia. When international data transfers occur, Spins ensures that protections equivalent to Malaysian standards are applied through:

  • Data transfer agreements incorporating strict data protection clauses with all international partners
  • Selection of service providers that comply with internationally recognised data protection standards
  • Data protection impact assessments conducted prior to any new data transfer being implemented

Spins does not transfer members' personal data to countries or jurisdictions that lack adequate privacy protections without appropriate additional safeguards in place.

9Data Retention Period

Spins retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or longer if required by applicable law:

  • Active Account Data: Retained for the duration of your active Spins account
  • Data After Account Closure: Transaction records and KYC information are retained for the minimum period required by Malaysian anti-money laundering legislation — typically 7 years
  • Support Communication Logs: Customer support interaction records are retained for 3 years for reference and dispute resolution purposes.
  • Security Logs: Access logs and security activity records are retained for the period required for audit and security investigation purposes
  • Marketing Data: If you withdraw consent for marketing communications, the relevant data will be deleted within 30 days

Once the retention period expires, data is securely deleted or anonymised using procedures that ensure it cannot be recovered or re-linked to your identity.

10Your Rights as a User

As a Spins member and data subject, you have the following rights regarding your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you at any time
  • Right to Rectification: You may request corrections to any personal data that is inaccurate or incomplete
  • Right to Erasure: In certain circumstances, you may request the deletion of your personal data (subject to legal retention obligations)
  • Right to Restriction of Processing: You may request that we restrict the processing of your data under certain circumstances
  • Right to Data Portability: You may request a copy of the data you have provided in a machine-readable format
  • Right to Object: You may object to the processing of your data for specific purposes, including direct marketing
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal

To exercise any of the rights above, please contact the Spins support team by email at [email protected] with the subject "Data Privacy Rights Request". We will process your request within 30 working days.

11Children's & Minors' Data

The Spins platform is strictly for individuals aged 21 years of age and above. We do not knowingly collect personal data from individuals under the age of 21. Spins carries out age verification as part of the registration and KYC process to prevent access by individuals who do not meet the minimum age requirement.

Should Spins discover that personal data belonging to an individual under the age of 21 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe that a person under 21 has been using the Spins platform, please notify us immediately at [email protected].

12Privacy Policy Updates

Spins reserves the right to update this Privacy Policy from time to time to reflect changes in platform operations, legal requirements or industry best practices. Any significant changes will be communicated to members via email or in-platform notification at least 14 days before taking effect.

Your continued use of the Spins platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how Spins handles your data. The most recent update date of this Privacy Policy is January 2026.

For any questions, concerns or requests regarding this Privacy Policy, please contact the Spins Data Privacy Officer at [email protected].

Data Protection Summary
  • Encryption: 256-bit SSL
  • Data Sales: None at all
  • Monitoring: Continuous 24/7
  • 2FA: Available free of charge
  • KYC: Fully protected
  • Data Access Rights: Available to all members
  • Request Response: Within 30 days
  • Last Updated: January 2026
Register Securely
Contact the Privacy Team

For requests relating to your data privacy:
[email protected]
Subject: "Data Privacy Rights Request"
Response within 30 business days

Your Privacy Rights at Spins — Explained Clearly

Spins respects the privacy rights of every Malaysian member and provides straightforward mechanisms for exercising them

Right to Access Your Data

You may ask Spins at any time: "what data do you hold about me?" — and we are obligated to provide a complete, clear response within 30 days. This covers all personal data, transaction records, and activity logs associated with your account.

Right to Correct Inaccurate Information

If you find that any personal information in your Spins account is inaccurate or out of date, you have the right to request a correction — and Spins is obliged to update it promptly without unreasonable delay.

Right to Erasure ("Right to be Forgotten")

In certain circumstances, you may request that Spins delete your personal data. Each request will be assessed against any legal obligations that may require us to retain specific records (such as transaction records for audit purposes) — however, Spins will always clearly explain to you what can and cannot be deleted, and the reasons why.

Right to Data Portability

You may request a copy of the personal data you have provided to Spins in a machine-readable format (such as CSV or JSON). This allows you to take your data with you should you choose to move to another platform — without any obstacles from Spins.

Right to Object to Processing

You may object to Spins processing your data for specific purposes — in particular, direct marketing communications. Once you raise an objection, Spins must cease processing your data for that purpose unless there are legal grounds requiring it to continue.

Right to Withdraw Consent

If you have previously given Spins consent to process your data for specific purposes — such as promotional emails or marketing notifications — you may withdraw that consent at any time through your account settings or by contacting the Spins support team.

Privacy Is Not a Bonus Feature — It Is a Fundamental Right of Every Spins Player

When you register a Spins account, there is something you likely never thought about as you clicked the "Register" button — that you were, in fact, entrusting a portion of your personal information to us. Your name, phone number, payment method details such as your Touch 'n Go eWallet or GrabPay, your daily activity records on the platform — all of this is data that is deeply valuable and deeply personal. And when someone entrusts something valuable to you, the only appropriate response is to safeguard it as if it were your own.

That is the approach Spins takes toward every member's personal data. Not merely satisfying minimum legal requirements — though we clearly do — but going further to build a data protection framework that genuinely reflects our respect for the privacy of every individual who chooses to play at Spins.

The reality of the online casino industry is that user data commands an extremely high market value. Gaming habits, spending patterns, game preferences — these are all details that advertising and analytics companies are willing to pay a premium for. Spins is fully aware of this commercial value. And our answer to that commercial temptation is: no, not ever. Spins member data is not a commodity to be sold or rented. It is a trust we keep.

The 256-bit SSL encryption used by Spins is not merely a technical term to sound impressive — it is a genuine layer of protection, meaning that every time you enter your password, make a deposit via DuitNow or FPX Maybank2u, or submit your identification documents for the KYC process, that information is converted into code that cannot be read by anyone intercepting the communication between your device and Spins' servers. This is the same level of protection used by Maybank and CIMB to secure millions of banking transactions every day — and Spins believes our players' data deserves exactly the same standard.

The KYC (Know Your Customer) process we carry out is one of the most important aspects of the Spins Privacy Policy to understand. When you submit a photo of your MyKad or passport to us, Spins recognises that this is an act that requires a significant degree of trust. We commit that such documents will only be accessed by staff specifically responsible for identity verification, stored in a strictly encrypted environment, not shared with any party except as required by Malaysian law, and deleted in accordance with our established retention schedule. This is not merely words on a page — it is standard operating procedure enforced at every level of the Spins organisation.

One of the most relevant privacy considerations in the context of Malaysian online casino platforms is financial data protection. When you use Touch 'n Go eWallet, GrabPay or Boost to deposit into your Spins account, or use FPX via CIMB Clicks to withdraw your winnings, your financial account information passes through multiple system layers. Spins does not store your full account numbers or sensitive payment method details directly in our database — instead, we work with tokens issued by payment providers to process transactions without retaining sensitive financial information that could be misused in the event of a security incident.

The responsible gambling dimension of Spins data management is equally important to understand. Your gameplay pattern data — how frequently you play, how long your typical sessions are, which games you prefer — is used by Spins not to commercially profile you, but to identify patterns that may indicate signs of problem gambling. This is a use of data that Spins believes to be the most responsible and meaningful — using data to protect members, not to exploit them. If the Spins monitoring system identifies any concerning patterns, our team will reach out to the member personally to offer support and information on the available responsible gambling tools.

For Malaysian members who use the Spins platform on their smartphones while relaxing at home, waiting for an EPL football match to kick off, or during a midday break after a morning badminton session — location data, device activity and app usage patterns generated during those sessions are personal information that Spins handles with the utmost respect. We do not track you outside of the Spins platform, we do not sell your user profile to advertising companies, and we do not use your location information for any purpose other than ensuring our platform is properly accessible from Malaysia.

Ultimately, the Spins Privacy Policy is a document we wrote with the genuine intention that it be read and understood — not one designed to confuse or obscure what actually happens to your data. If any section is unclear, we encourage you to reach out to the Spins support team. Every data privacy enquiry is taken seriously and answered with complete transparency — because Spins believes that members who fully understand how their data is handled are the members who trust our platform the most, and that trust is the strongest foundation for a lasting relationship between Spins and the Malaysian player community we serve every day.

Spins Privacy Commitment
No data sales to third parties
256-bit SSL encryption for all data
Round-the-clock, 24/7 security monitoring
Data access rights are available to all members
Immediate notification in the event of a data incident
Secure data deletion when no longer required
Secure Payment Methods
Touch 'n Go GrabPay DuitNow FPX Boost ShopeePay

All transactions are protected by 256-bit SSL. Financial data is not stored directly.

Frequently Asked Questions About the Spins Privacy Policy

Answers to the most frequently asked questions by Malaysian players about data privacy at Spins

Absolutely not. Spins does not sell, rent, or share members' personal data with any advertising company, marketing platform, or commercial third party for advertising purposes. Data you provide to Spins — whether during registration, platform use, or the KYC process — is used solely for the operation of the Spins platform itself. This includes account management, transaction processing via Touch 'n Go eWallet, GrabPay, and other Malaysian payment methods, as well as customer support. The only situations in which data may be shared with external parties are with technical service providers who assist in operating the Spins platform (under strict confidentiality agreements) and Malaysian legal authorities where required by law. There are no commercial exceptions to this principle.

To request a copy of your personal data or to submit a deletion request, contact the Spins support team by email at [email protected] with the subject line "Data Privacy Rights Request". Please include your full name, the Malaysian phone number registered to your Spins account, and the type of request you wish to make — whether that is data access, correction, deletion, or portability. Spins will process your request within 30 working days of receipt. For deletion requests, please note that certain records may need to be retained for a specified period in accordance with Malaysian legal requirements — such as transaction records that must be kept for audit and anti-money laundering compliance purposes. Spins will, however, clearly inform you of which data can be deleted and which cannot, along with the relevant legal reasons.

After your Spins account is closed, your personal data is handled as follows: Basic account data such as passwords and profile information will be deactivated and will no longer be accessible. Financial transaction records and KYC documents may need to be retained for the minimum period required under Malaysia's anti-money laundering laws and financial reporting requirements — typically 7 years. This is a legal obligation that Spins must comply with and is not a matter of our choosing. Customer support communication records are retained for 3 years for reference and dispute resolution purposes. Once all mandatory retention periods have lapsed, your personal data will be securely deleted using data deletion procedures that ensure it cannot be recovered. If you have specific questions about particular data following account closure, please contact us at [email protected].

Yes, the KYC process at Spins is one aspect of our operations that we manage to the highest security standards. When you submit a photo of your MyKad or passport, the document is transmitted via a fully encrypted 256-bit SSL connection. Documents are stored in an encrypted storage environment with highly restricted access — only staff specifically responsible for the identity verification process may access them, with every access recorded in an audit log. Documents are never shared with any party except Malaysian legal authorities when required by law. Spins also conducts regular data security training for all staff who handle sensitive documents. We understand that submitting identification documents requires a high level of trust, and Spins takes this responsibility extremely seriously. If you have any concerns about the security of your KYC documents, the Spins support team is ready to walk you through our protection procedures in greater detail.

Your Data is Safe at Spins — Play with Confidence

Spins has built a Malaysian online casino platform you can trust completely — not only for fair wins, but also for uncompromising protection of your personal data. Register in under 2 minutes and start a gaming experience that is safe, enjoyable and responsible.

⚠️ Gambling is for entertainment purposes only. Play responsibly. For users aged 21 and above only.

Bahasa Melayu