Privacy Policy — spin996
At spin996, protecting the personal data of our players is a fundamental responsibility. This Privacy Policy explains in clear terms what information we collect, how we use it, who we may share it with, and the rights you hold over your own data. We encourage all users — especially those playing from Kuala Lumpur, Penang, Johor Bahru, and across Malaysia — to read this document carefully.
No Data Selling
spin996 does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes — ever.
256-Bit SSL Encryption
All data in transit between your device and spin996's servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
You Control Your Data
You have the right to access, correct, delete, and restrict processing of your personal data at any time by contacting our support team.
Purpose-Limited Use
Personal data is collected only for specific, legitimate purposes — account management, payment processing, fraud prevention, and regulatory compliance.
Minimal Data Collection
We collect only what is necessary to provide our services. No excessive data gathering — only what is operationally or legally required.
Transparent Processing
This Privacy Policy is written in plain, accessible English. If any section is unclear, our support team is available 24/7 to clarify.
Introduction
This Privacy Policy ("Policy") is published by spin996 ("we", "us", "our", or "the Platform") and applies to all personal data processed in connection with your use of the spin996 website, mobile application, and all related services (collectively, the "Services"). spin996 operates as an online casino and sports betting platform serving users primarily in Malaysia and other permitted jurisdictions.
spin996 is committed to processing personal data responsibly, transparently, and in accordance with applicable international data protection standards. This Policy explains our practices in clear terms so that you can make informed decisions about your privacy when using our Services.
By registering an account on spin996, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of the spin996 platform.
If you have questions about this Policy or wish to exercise any of your data rights, please contact our Data Protection team via live chat or email at [email protected] (plain text — not a clickable link).
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion. |
| "Data Controller" | The entity that determines the purposes and means of Processing Personal Data — in this context, spin996. |
| "Data Processor" | A third party that processes Personal Data on behalf of spin996, under contract and in accordance with this Policy. |
| "User" / "You" | Any individual who accesses or uses the spin996 platform, whether or not they have a registered Account. |
| "Cookies" | Small text files stored on your device by a website to facilitate session management, preference storage, and analytics. |
| "KYC" | Know Your Customer — the identity and age verification process required under anti-money laundering and responsible gambling obligations. |
Data Controller
spin996 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, spin996 determines the purposes for which your data is processed and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.
Where spin996 engages third-party service providers to process data on its behalf (for example, payment processors such as DuitNow infrastructure providers, e-wallet operators, or KYC verification services), those parties act as Data Processors under written contractual agreements that impose data protection obligations equivalent to those applied by spin996.
spin996 does not act as a Data Processor for any third party in relation to User Personal Data. All processing decisions are made by spin996 for the purposes described in this Policy.
Data We Collect
spin996 collects Personal Data across the following categories, depending on how you interact with the Platform:
4.1 Identity & Registration Data
- Full legal name
- Date of birth (for age verification — minimum 21 years required)
- Gender (optional)
- Nationality and country of residence
- Government-issued ID number (for KYC purposes — Malaysian IC/MyKad, passport)
4.2 Contact Data
- Email address (primary communication channel)
- Mobile phone number
- Residential and/or mailing address
4.3 Financial & Payment Data
- Bank account details (for Maybank, CIMB, Public Bank, Hong Leong FPX transactions)
- E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay)
- DuitNow registered account reference
- Cryptocurrency wallet addresses (for BTC/USDT transactions, where applicable)
- Transaction history (deposits, withdrawals, wager amounts in MYR)
4.4 Technical & Usage Data
- IP address and approximate geolocation
- Device type, operating system, and browser information
- Session duration, login timestamps, and access logs
- Game activity logs (games played, bet history, session frequency)
- Pages visited and features used within the Platform
4.5 Communications Data
- Records of live chat conversations with support agents
- Email correspondence with the spin996 team
- Complaints, feedback, and dispute records
Sensitive Data: spin996 does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health information) unless specifically required for responsible gambling compliance (e.g., where a User discloses a gambling addiction during a self-exclusion request). Such information is treated with the highest level of confidentiality.
How We Collect Data
spin996 collects Personal Data through the following channels:
- Direct Submission: Information you provide when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or completing any form on the Platform.
- Automated Technologies: Data generated automatically when you access the Platform, including cookies, server logs, pixel tags, and browser fingerprinting (where applicable). See Section 11 for Cookie details.
- Third-Party KYC Providers: Identity verification data returned from our KYC service partners when processing your identity documents.
- Payment Processors: Transaction confirmation data returned from payment infrastructure providers (FPX, DuitNow operators, e-wallet platforms) confirming deposit and withdrawal status.
- Fraud Detection Systems: Behavioural and device signals processed by our anti-fraud systems to detect suspicious account activity.
Purposes of Processing
spin996 processes your Personal Data only for the specific purposes described below. We do not use your data for any purpose that is incompatible with those listed here without obtaining your separate consent:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your spin996 Account, including login authentication and profile management. |
| Payment Processing | Processing deposits and withdrawals in MYR via your chosen payment method (DuitNow, FPX, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, etc.). |
| KYC & Age Verification | Verifying your identity and confirming that you meet the minimum age requirement of 21 years in compliance with responsible gambling obligations. |
| Regulatory Compliance | Fulfilling anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling regulatory requirements under our international licensing framework. |
| Fraud & Security | Detecting, preventing, and investigating fraudulent activity, account abuse, money laundering, and unauthorised access. |
| Customer Support | Responding to support queries, live chat conversations, complaints, and disputes. |
| Service Improvement | Analysing aggregated usage data to improve Platform performance, game offerings, and user experience. |
| Marketing (Opt-in Only) | Sending promotional offers, bonus notifications, and platform updates to Users who have explicitly opted in to marketing communications. |
| Responsible Gambling | Monitoring player behaviour for signs of problem gambling and enforcing deposit limits, self-exclusion, or account cooling-off periods. |
Legal Basis for Processing
spin996 processes your Personal Data on one or more of the following legal bases, depending on the purpose of processing:
- Contractual Necessity: Processing required to fulfil our obligations under the User Agreement — including account management, payment processing, and support services.
- Legal Obligation: Processing required to comply with applicable anti-money laundering regulations, KYC obligations, and responsible gambling requirements under our international gaming licence.
- Legitimate Interests: Processing necessary for fraud prevention, platform security, and service improvement — provided that such interests do not override your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to marketing communications and optional analytics features. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Data Sharing & Disclosure
spin996 does not sell, rent, or disclose your Personal Data to any third party for that party's own commercial purposes. We may share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:
- Payment Service Providers: Personal and financial data is shared with licensed payment infrastructure providers (FPX operators, DuitNow processors, e-wallet platforms, cryptocurrency networks) solely to facilitate deposit and withdrawal transactions.
- KYC & Identity Verification Partners: Identity documents and verification data may be shared with contracted third-party KYC service providers for age and identity verification purposes.
- Fraud Prevention & AML Screening: Transaction and behavioural data may be processed by contracted fraud detection and anti-money laundering screening partners.
- Regulatory Authorities: spin996 may disclose Personal Data to relevant international regulatory bodies, law enforcement agencies, or financial intelligence units where required by law or where there is a reasonable suspicion of criminal activity.
- Legal Proceedings: Data may be disclosed to legal advisors, courts, or dispute resolution bodies where necessary to establish, exercise, or defend legal claims.
- Business Transfers: In the event of a merger, acquisition, or asset sale involving spin996, User data may be transferred to the successor entity, subject to equivalent privacy protections.
Our Commitment: All third parties who receive your Personal Data are bound by contractual data processing agreements. spin996 conducts due diligence on all data processors to ensure appropriate security standards are maintained.
International Data Transfers
As an international online gaming platform, spin996 may transfer your Personal Data to data processors and infrastructure providers located outside Malaysia. Such transfers may occur in the context of cloud hosting, KYC verification services, fraud detection systems, or customer support infrastructure.
Where Personal Data is transferred internationally, spin996 ensures that appropriate safeguards are in place to protect the data, including contractual clauses imposing obligations equivalent to those set out in applicable international data protection frameworks. Data transfers are conducted strictly on a need-to-know basis and are limited to what is necessary for the specific operational purpose.
Data Retention
spin996 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active Account Data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure — to meet AML and regulatory record-keeping requirements.
- Transaction Records: Financial transaction records (deposits, withdrawals, wager history in MYR) are retained for a minimum of seven (7) years to comply with international AML obligations.
- KYC Documents: Identity verification documents are retained for the duration of the Account plus five (5) years following closure, in accordance with regulatory requirements.
- Support Communications: Live chat logs and email correspondence are retained for three (3) years from the date of the communication.
- Marketing Preferences: Opt-in/opt-out records are retained for the duration of the Account plus two (2) years as evidence of consent status.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
Cookies & Tracking Technologies
spin996 uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and gather analytics data that helps us improve our services. By using the spin996 Platform, you consent to the use of cookies in accordance with this section.
The following categories of cookies are used on spin996:
- Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load balancing identifiers. These cannot be disabled.
- Functional Cookies: Enable enhanced functionality such as remembering your language preference, display settings, and login status between sessions.
- Analytics Cookies: Collect aggregated and anonymised data about how users interact with the Platform — including pages visited, session duration, and feature usage — to help us improve performance and user experience.
- Fraud Detection Cookies: Used by our security systems to identify unusual patterns of behaviour associated with account abuse, bot activity, or unauthorised access.
You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the spin996 Platform. Clearing your browser cookies will log you out of your active session.
Your Data Rights
As a User of the spin996 Platform, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact our support team via live chat or email:
You have the right to request a copy of the Personal Data spin996 holds about you, including the categories of data processed, the purposes of processing, and any third parties to whom data has been disclosed.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. You may also update basic Account information directly via your Account settings.
You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis exists. Note: erasure requests may be limited where retention is required by law (e.g., AML record-keeping obligations).
You may request that spin996 restricts the processing of your Personal Data in certain circumstances — for example, where accuracy is contested or where processing is unlawful but you prefer restriction over erasure.
Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
You may object to the processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds related to your particular situation.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, contact support or use the unsubscribe mechanism in any marketing email.
spin996 will respond to all data rights requests within thirty (30) calendar days of receipt. Responses are provided free of charge for reasonable requests.
Children's Privacy
The spin996 Platform is strictly for individuals aged 21 years and above. spin996 does not knowingly collect Personal Data from persons under 21. Age verification is enforced through our KYC process during Account registration.
If spin996 becomes aware that Personal Data has been collected from a User who does not meet the minimum age requirement, we will immediately suspend that Account, delete the associated data, and, where applicable, report the incident to the relevant regulatory authority. Parents or guardians who believe a minor has registered an Account on spin996 should contact our support team immediately at [email protected] (plain text — not a clickable link).
Security Measures
spin996 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and spin996's servers is encrypted in transit.
- Encryption at Rest: Sensitive data stored in our databases (including payment details and identity documents) is encrypted using AES-256.
- Access Controls: Personal Data is accessible only to authorised personnel with a demonstrable business need. Role-based access control (RBAC) is enforced.
- Two-Factor Authentication (2FA): Available to all Users to protect Account access, and enforced for spin996 staff with access to production systems.
- Regular Security Audits: Our platform infrastructure undergoes periodic independent security assessments and penetration testing.
- Incident Response: spin996 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your Personal Data, you will be notified without undue delay where required by applicable law.
No internet transmission can be guaranteed to be 100% secure. While spin996 takes all reasonable technical precautions, you are also responsible for maintaining the security of your Account credentials and device. Do not share your spin996 password with anyone.
Changes to This Privacy Policy
spin996 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected or a new purpose of processing — spin996 will provide advance notice via email or a prominent on-platform notification prior to the changes taking effect.
The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how spin996 handles your Personal Data. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact spin996 through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via the spin996 platform. Average response time is under 90 seconds.
- Email (plain text — not a link): [email protected]
For formal data rights requests (access, erasure, portability, etc.), please include your registered Account username and a clear description of your request in your communication. spin996 will respond within 30 calendar days.
If you are not satisfied with spin996's response to a data rights request or complaint, you may escalate the matter to the relevant data protection supervisory authority associated with our licensing jurisdiction.
Your Data Is Safe with spin996
We take data protection seriously — not just as a legal requirement, but as a fundamental part of the trust our Malaysian players place in spin996 every day. Ready to experience a platform that puts your privacy first?
For players aged 21 and above only. Please gamble responsibly.