Privacy Policy

This Privacy Policy ("Policy") is published by spin999 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at spin999.cam ("the Platform"). This Policy governs the collection, processing, storage, and disclosure of personal data relating to all registered players ("you", "your", "the Player") and visitors to the Platform.

spin999 operates in alignment with the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We treat the protection of your personal data as a fundamental obligation — not merely a regulatory requirement.

By registering an Account on spin999, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must discontinue access to the Platform immediately.

The following terms have the meanings assigned to them throughout this Policy:

spin999 collects the following categories of Personal Data in connection with the operation of the Platform:

Personal Data is collected through the following channels and mechanisms:

• Direct Submission: When you complete the Account registration form, submit KYC documents, contact customer support, or update your Account profile settings.
• Automated Technical Collection: Server logs, session tracking technologies, and cookies collect Technical & Device Data automatically each time you access the Platform from any device, whether from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, or elsewhere in Malaysia.
• Payment Processors: When you initiate a deposit or withdrawal via FPX, DuitNow, or any supported e-wallet, our payment processing partners confirm the transaction status and return a reference identifier to spin999. We do not store your full bank account number or card details on our servers.
• Third-Party KYC Providers: Where identity verification is performed in whole or in part by an accredited third-party KYC technology provider, that provider processes your documents under a data processing agreement with spin999 and returns a verification result to us.
• Cookies and Tracking Technologies: As further described in Section 9 of this Policy.

spin999 processes Personal Data for the following specific, documented purposes:

• Account Management: To create, maintain, administer, and close Player Accounts, including the processing of deposits and withdrawals in Malaysian Ringgit (MYR).
• Identity Verification (KYC): To verify the age (21+), identity, and address of all Players in fulfilment of our anti-fraud, anti-money laundering, and responsible gambling obligations.
• Transaction Processing: To facilitate, record, and reconcile all financial transactions between Players and spin999, including deposits, withdrawals, bonus credits, and wagering adjustments.
• Responsible Gambling Compliance: To monitor gaming activity for indicators of problem gambling, apply deposit limits or self-exclusion periods where requested, and fulfil our duty of care to players.
• Legal and Regulatory Obligations: To comply with applicable anti-money laundering legislation, licensing conditions, court orders, and requests from competent regulatory or law enforcement authorities.
• Customer Support: To respond to enquiries, process complaints, and provide technical assistance to Players via live chat, email, or other supported communication channels.
• Personalisation and Analytics: To understand how Players interact with the Platform, optimise the user experience, and improve our service offering — including game selection, promotional relevance, and interface design.
• Marketing Communications (where opted-in): To send promotional offers, deposit bonuses, and Platform updates to Players who have expressly opted in to receive such communications. Players may withdraw marketing consent at any time through their Account settings.
• Fraud Detection and Security: To identify and investigate unusual Account activity, unauthorised access attempts, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.

Each processing activity carried out by spin999 is grounded in one of the following lawful bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Player Account agreement — including Account creation, transaction processing, and KYC verification.
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, responsible gambling regulations, licensing conditions, and enforceable orders from competent authorities.
• Legitimate Interests: Processing necessary for the prevention of fraud, maintenance of platform security, and improvement of our services, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, where you have given explicit, informed consent that may be withdrawn at any time without detriment to your Account.

spin999 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. Data is shared only in the following strictly controlled circumstances:

• Payment Processors: Transaction reference data is shared with our payment processing partners (including those facilitating FPX, DuitNow, and e-wallet transactions) solely to execute and reconcile financial transactions.
• KYC & Identity Verification Providers: KYC documents are transmitted to accredited third-party verification providers under binding data processing agreements. These providers are prohibited from using your data for any purpose other than performing the verification service.
• Cloud Infrastructure Providers: Personal Data is stored on servers hosted by reputable cloud infrastructure providers operating under appropriate data security standards and contractual obligations.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or legitimate regulatory request, spin999 will disclose Personal Data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of the Company's assets, Personal Data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy.

spin999 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations:

• Active Account Data: Retained for the duration of the Account relationship and for a minimum period of five (5) years following Account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• KYC Documents: Retained for the duration of the Account relationship and for a minimum of five (5) years after Account closure, consistent with our licensing and regulatory obligations.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, as required by applicable financial record-keeping standards.
• Communications Data: Live chat and email records retained for a period of two (2) years from the date of the interaction, unless retention for a longer period is required for complaint resolution or legal proceedings.
• Marketing Preference Data: Retained while the Player's Account is active and for twelve (12) months following Account closure or opt-out, to maintain an accurate suppression list.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

The spin999 Platform uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, and gather analytical data to improve the user experience.

You may manage or disable cookies through your browser settings at any time. Please note that disabling Strictly Necessary cookies will impair the functionality of the Platform and may prevent you from accessing your Account.

spin999 implements technical and organisational security measures appropriate to the nature and sensitivity of the Personal Data we process. These measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and spin999 servers is encrypted using industry-standard TLS 1.2 / 1.3 (256-bit SSL) protocols. The padlock icon visible in your browser address bar confirms that your connection is secure.
• Access Controls: Personal Data is accessible only to authorised spin999 personnel and contracted Data Processors who require access for legitimate operational purposes. All internal access is logged and audited.
• Password Security: Player Account passwords are stored using one-way cryptographic hashing. spin999 staff cannot view your password in plain text at any time.
• Secure KYC Upload: Identity documents must only be submitted through the encrypted in-Account upload interface. spin999 will never request KYC documents via email, live chat, or any external channel.
• Incident Response: In the event of a confirmed Personal Data breach that creates a material risk to affected individuals, spin999 will notify affected Players and relevant authorities within the timeframes required under applicable law.

As a Player whose Personal Data is processed by spin999, you hold the following rights, subject to applicable legal limitations:

• Right of Access: You may request a copy of the Personal Data that spin999 holds about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many details — such as email address and contact number — can be updated directly through your Account settings.
• Right to Erasure: You may request the deletion of your Personal Data, subject to our obligations to retain certain records for legal, regulatory, and anti-money laundering purposes. Where full deletion is not possible, we will anonymise the data to the maximum extent permitted.
• Right to Object to Processing: You may object to any processing of your Personal Data that is based on our legitimate interests, including certain analytical processing activities. We will review and respond to each objection on its individual merits.
• Right to Withdraw Marketing Consent: Where we are processing your Personal Data for marketing purposes based on your consent, you may withdraw that consent at any time through your Account notification settings. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.
• Right to Data Portability: You may request a structured, machine-readable copy of the Personal Data you have provided to spin999, where technically feasible.

To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected] (plain text — not a clickable link). We will require identity verification before actioning any data subject request.

The spin999 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from any person under the age of 21.

Age verification is a mandatory step in the KYC process for all Players. Where we have reasonable grounds to believe that Personal Data has been submitted by or on behalf of a person under 21, we will immediately suspend the relevant Account, delete or securely archive the associated Personal Data, and take appropriate steps to prevent recurrence.

If you are a parent or guardian and believe that your child (under 21) has registered an Account on spin999, please contact us immediately via live chat or email so that we can investigate and take corrective action.

The Platform integrates with third-party services to deliver core functionality, including payment processing, identity verification, game content delivery, and analytics. spin999 exercises due diligence in selecting service providers and requires all Data Processors to operate under binding data processing agreements that impose standards equivalent to those described in this Policy.

spin999 is not responsible for the privacy practices of independent third-party websites, applications, or services that may be referenced within the Platform or that Players independently choose to access. This Policy applies exclusively to data processed by spin999 through the Platform.

spin999 reserves the right to update or revise this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where amendments are material — for example, where we introduce new processing activities or significantly change how we share Personal Data — we will make reasonable efforts to notify affected Players by publishing a notice on the Platform or by email to the address registered on your Account.

Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you must discontinue using the Platform and may request Account closure in accordance with your rights under Section 11.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the spin999 Privacy team through the following channels:

• Live Chat: Available on-site 24 hours a day, 7 days a week. This is the fastest channel for time-sensitive data subject requests.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line.

We will acknowledge all privacy-related enquiries within two (2) business days and provide a substantive response within thirty (30) calendar days, subject to the complexity of the request. Identity verification will be required before any data access, rectification, or deletion request is actioned.