spin999 Privacy Policy

1 Who We Are

This Privacy Policy is issued by spin999 ("spin999", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at spin999.club. spin999 operates under an international gaming authority licence and is the data controller in respect of the personal data it processes in connection with the provision of its services to Malaysian and international players.

This Policy applies to all personal data collected from or about individuals who visit spin999.club, register an Account, or otherwise interact with the spin999 platform. It supplements — and should be read in conjunction with — our Terms & Conditions.

2 Data We Collect

spin999 collects personal data in the following categories. The specific data points collected depend on the nature of your interaction with the platform:

Identity Data

• Full legal name, date of birth, and gender as provided during registration.
• Government-issued identification documents (e.g., Malaysian MyKad, international passport) submitted as part of KYC verification.

Contact Data

• Email address and Malaysian mobile phone number used for account communication, two-factor authentication, and support correspondence.
• Residential address as provided during registration or KYC verification.

Financial Data

• Payment method identifiers (e.g., e-wallet account reference, bank account holder name for online banking) submitted in connection with deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates, and processing status.
• Note: spin999 does not store full card numbers or full bank account numbers. Payment processing is handled by PCI-DSS compliant third-party payment processors.

Gaming & Betting Data

• All Bets placed on the spin999 Sportsbook, Casino, Slots, and Lottery 4D products, including stake, outcome, settlement, and timestamp.
• Session duration, game preferences, and in-game behaviour data used for responsible gaming monitoring and platform improvement.

Technical Data

• IP address, device type, operating system, browser type and version, and geolocation data derived from your device at the time of login and during active sessions.
• Login timestamps, session identifiers, and authentication logs.

Communications Data

• Records of your interactions with spin999 customer support via live chat and email, including the content of such communications.
• Responses to voluntary surveys, feedback forms, or promotional participation.

3 How We Collect Data

spin999 collects personal data through the following means:

• Direct provision: Data you actively provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical data collected automatically when you access spin999.club, including cookies, server logs, and device fingerprinting used for security and fraud prevention purposes.
• Third-party providers: Identity and address verification data received from KYC service providers; transaction data received from payment processors; fraud risk signals from anti-fraud and AML screening services.

4 How We Use Your Data

spin999 processes personal data for the following purposes:

1. Account Management: To create, maintain, and manage your spin999 Account, including authentication and security functions such as two-factor authentication and suspicious login detection.
2. Service Delivery: To process your Bets, settle winnings, credit and debit your Wallet, and provide access to all spin999 products and features to which you are entitled.
3. KYC & AML Compliance: To verify your identity and age as required by our gaming licence; to conduct ongoing transaction monitoring and report suspicious activity to relevant authorities in accordance with applicable anti-money laundering legislation.
4. Customer Support: To respond to your enquiries, resolve disputes, process formal complaints, and improve the quality of support we provide to Malaysian and other players.
5. Responsible Gaming: To monitor betting and gaming patterns for signs of problem gambling behaviour; to apply deposit limits, loss limits, cooling-off periods, or self-exclusion measures where requested or required.
6. Fraud & Security: To detect and prevent fraudulent activity, unauthorised Account access, money laundering, and other prohibited conduct described in our Terms & Conditions.
7. Platform Improvement: To analyse aggregate usage patterns and platform performance data (in anonymised or pseudonymised form) to improve the spin999 user experience.
8. Marketing (with consent only): To send you promotional emails, SMS notifications, or in-platform messages about spin999 offers, bonuses, and new features — only where you have given explicit consent to receive such communications.

5 Legal Basis for Processing

spin999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and spin999, including Account management, Bet processing, and payment handling.
• Legal obligation: Processing required to comply with our gaming licence conditions, AML obligations, and other applicable legal requirements — including mandatory KYC verification and transaction reporting.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics, where spin999's legitimate interests in operating a secure and compliant platform are not overridden by your privacy rights.
• Consent: Processing for direct marketing purposes, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

spin999 does not sell or rent personal data. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: To facilitate deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong, and USDT TRC20 channels. These processors receive only the data required to execute and confirm transactions.
• KYC & Identity Verification Providers: To verify the identity, age, and address of Members as required by our licensing obligations. Verification providers operate under strict data processing agreements.
• AML & Fraud Screening Services: To screen transactions and user activity against sanctions lists and risk databases as required by applicable AML regulations.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or our gaming authority licence conditions to disclose personal data to relevant governmental, regulatory, or law enforcement bodies.
• IT Infrastructure Providers: Cloud hosting and data storage providers who process data on spin999's behalf under contractual data processing agreements that prohibit independent use of the data.

7 International Data Transfers

spin999 operates globally and may transfer personal data to, or store it in, countries outside Malaysia. Where such transfers occur, spin999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law and our international gaming authority licensing obligations.

Safeguards for international transfers include contractual data protection clauses in agreements with all data recipients and, where applicable, reliance on adequacy determinations by relevant data protection authorities. If you would like further information about the specific safeguards applicable to a particular transfer, please contact us using the details in Section 14.

8 Data Retention

spin999 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law or our gaming licence conditions. The following general retention periods apply:

• Account and Identity Data: For the lifetime of your spin999 Account and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements.
• Transaction and Betting Records: Minimum five (5) years from the date of the transaction or Bet settlement, as required by our gaming authority licence.
• Customer Support Records: Three (3) years from the date of the most recent support interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Marketing Consent Records: For as long as you remain opted in, plus a reasonable period following opt-out to demonstrate compliance with consent management obligations.

When personal data is no longer required, spin999 securely deletes or anonymises it in accordance with our internal data retention and disposal procedures.

9 Cookies & Tracking Technologies

spin999.club uses cookies and similar tracking technologies to operate the platform, ensure security, and improve your experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for platform functionality, including session management, authentication tokens, and security validation. These cannot be disabled without impairing platform operation.
• Functional Cookies: Remember your preferences (e.g., odds display format, language settings, "Remember Me" login status) to personalise your spin999 experience across sessions.
• Analytics Cookies: Collect anonymised data about how Members use the platform — pages visited, time spent, navigation paths — to help us identify and fix usability issues and improve the overall experience. No personally identifiable information is included in analytics data.
• Security Cookies: Used for fraud detection and bot prevention, including session integrity validation and login anomaly detection.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use spin999, including logging in and placing Bets.

10 Your Data Rights

Subject to applicable law and the provisions of our gaming licence, you have the following rights in relation to the personal data spin999 holds about you:

• Right of Access: Request a copy of the personal data spin999 holds about you, along with information about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. Note that some data (e.g., verified identity documents) can only be updated through the KYC re-verification process.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention. Note that AML and gaming licence obligations may require spin999 to retain certain data notwithstanding a deletion request.
• Right to Restrict Processing: Request that spin999 temporarily suspend active processing of your data (other than storage) in certain circumstances.
• Right to Data Portability: Receive certain personal data in a structured, commonly used, machine-readable format for onward transfer to another data controller where technically feasible.
• Right to Object: Object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. spin999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Withdraw consent to marketing communications at any time, without affecting the validity of processing carried out prior to withdrawal.

To exercise any of these rights, contact spin999 via live chat or by email at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

11 Children & Minors

spin999 services are strictly restricted to individuals aged 21 years and above. spin999 does not knowingly collect or process personal data relating to individuals under the age of 21. Where spin999 has reasonable grounds to believe that an Account has been opened or operated by an individual under 21, the Account will be immediately closed and all associated personal data will be deleted, except to the extent that retention is required by applicable law or our gaming licence conditions.

12 Security Measures

spin999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• TLS 1.3 encryption for all data in transit between your device and spin999 servers.
• AES-256 encryption for personal data stored on spin999 systems.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Regular internal and third-party security audits and penetration testing.
• Role-based access controls ensuring that personnel access personal data only to the extent required by their specific job function.
• Incident response procedures including mandatory breach notification processes in accordance with applicable regulatory requirements.

Notwithstanding these measures, no system connected to the internet is entirely immune to security risks. We encourage you to use a strong, unique password for your spin999 Account and to enable two-factor authentication from Account Settings to further protect your personal data.

13 Changes to This Policy

spin999 reserves the right to amend this Privacy Policy at any time. When material changes are made, we will notify registered Members via email or in-platform notification prior to the changes taking effect. The date at the top of this Policy reflects when it was most recently updated. We encourage you to review this page periodically to stay informed about how spin999 protects your personal data.

Continued use of the spin999 platform following notification of a material change to this Policy constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using spin999 and may request Account closure by contacting our support team.

14 Contact Us

For all privacy-related enquiries, including data subject rights requests, concerns about how your data is being handled, or to report a potential data protection issue, please contact spin999 through the following channels:

• Live Chat: Available 24/7 at spin999.club — the fastest way to reach our support team for standard enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights requests. Response within 5 business days.