Privacy Policy spin123

Spin123 ("we", "Platform") is committed to protecting the privacy of all members and users of the platform. This Privacy Policy transparently explains the types of personal data we collect, the purposes for which it is used, how it is stored, and your rights as the data owner.

This document is drawn up in accordance with Malaysia Personal Data Protection Act 2010 (PDPA) and international data protection best practices. By using the spin123 platform — whether via the website or mobile app — you consent to the collection and processing of data as described in this policy.

If you have any questions after reading this document, our privacy team is available to assist via live chat or support email.

Spin123 only collects data that is strictly necessary to provide a safe and efficient service. Below are the categories of data we collect and the purposes they serve:

Data collected by spin123 is used solely for the purposes stated below and will not be used for any other purpose without your prior consent:

• Account management — registers, verifies, and manages your member account.
• Transaction processing — securely handles your deposits, withdrawals, and transaction history.
• KYC Verification — fulfills anti-money laundering (AML) compliance and know-your-customer requirements.
• Platform security — detects and prevents fraud, unauthorized access, and suspicious activity.
• Service communications — sends important notifications related to your account, transactions, and policy updates.
• Product improvement — analyzes usage patterns to improve the user experience and platform performance.
• Responsible gaming programme — monitors gameplay patterns to identify members who may need support.
• Marketing communications — sends promotional information and special offers (only with your consent and cancellable at any time).

spin123 does not sell your personal data to any third party. There are no exceptions to this fundamental principle. However, in the course of platform operations, there are certain situations where data may need to be shared on a limited basis:

• Payment service providers — only the necessary information is shared with payment processors to complete deposit and withdrawal transactions. All providers are bound by strict data protection agreements.
• Licensed game providers — usernames and account IDs are shared with licensed game providers to enable access to their games. No sensitive financial or personal information is shared.
• Government authorities — spin123 fully complies with lawful information requests from legal authorities such as Bank Negara Malaysia, the Royal Malaysia Police, or relevant tribunals, in accordance with court orders or legal requirements.
• Analytics & security services — non-personally identifiable technical data is shared with analytics platforms to understand usage and improve security.

All third parties receiving data from spin123 are required to maintain equivalent data security standards and may only use the data for the specified purposes.

Spin123 continuously invests in security infrastructure to protect members' personal data. The technical and organizational security measures we implement include:

• 256-bit SSL encryption (TLS 1.3) — all data transmitted between your device and spin123 servers is fully encrypted.
• Encrypted database — sensitive data such as passwords is stored as irreversible hashes.
• Two-factor authentication (2FA) — available to all members to protect account access.
• 24/7 Monitoring — an automated threat detection system monitors all account activity in real time.
• Internal access controls — only authorized personnel may access member data, and every access is logged for audit purposes.
• Regular penetration testing — security audits and penetration testing are conducted periodically by independent third-party security experts.
• Encrypted data backup — data is regularly backed up to secure locations and stored in encrypted form.

Spin123 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Types of cookies used:

• Essential cookies — required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance cookies — collects information on how users interact with the platform to help us improve performance.
• Functional cookies — saves your preferences such as language and display settings.
• Analytics cookies — helps us understand aggregated, anonymized usage patterns.

You can manage your cookie settings through your web browser. Disabling certain cookies may affect the functionality of some parts of the platform. For more information, refer to your web browser's documentation.

Spin123 retains personal data only for as long as necessary for the stated purposes or as required by law:

• Active account data — retained for as long as your account is active or as long as necessary to provide the service.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
• KYC Documents — retained for 5 years after account closure in accordance with PDPA and AML legal requirements.
• Support communication logs — retained for 3 years for quality control and complaints resolution purposes.
• Technical data and server logs — retained for 90 days for security and debugging purposes.

Once the retention period expires, data will be securely deleted or converted into anonymised form that cannot be linked back to you.

Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data held by spin123:

The spin123 platform is for individuals aged 18 and above only. We do not intentionally collect any personal data from minors.

If we find that personal data of a minor has been collected without our knowledge, the relevant data will be deleted immediately and the associated account will be closed. Parents or guardians who become aware that their child has accessed this platform are requested to contact us immediately so that appropriate action can be taken.

Spin123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons.

When amendments are made:

• The "Updated" date at the top of the document will be revised.
• For material amendments (significant changes that affect your rights), we will send a notification via registered email or in-app notification at least 14 days before the changes take effect.
• Continued use of the platform after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the spin123 app or website — the fastest way to get a response.
• Privacy Email: [email protected] (type manually — do not click)
• FAQ: Browse FAQ page for answers to the most frequently asked privacy questions.

We aim to respond to all privacy enquiries within 5 business days. For formal data rights requests, the processing period is up to 30 days.