Privacy Policy spin999 — Player Data Protection

Spin999 takes your privacy seriously. Find out exactly how we collect, use, and protect the personal data of every Malaysian player who trusts our platform.

Why Your Data is Safe with spin999

Six pillars of data protection that keep every Malaysian player's privacy secure at all times

Full-Time 256-bit SSL Encryption
Every bit of data that travels between your device and spin999's servers is encrypted using 256-bit SSL — the same security standard used by Malaysia's major banks. No one can intercept or read your information in transit, whether you are logging in, making a deposit, or processing a withdrawal.
Fully Encrypted
Your Data is Never Sold to Anyone
spin999 has never sold, rented, or commercialised players' personal data to any third party for marketing or any other purpose, and never will. Your information is collected solely for the operation of the platform — nothing more. This is not merely a promise; it is a written commitment set out in spin999's Privacy Policy.
No Data Selling
Personal Data Protection Act (PDPA) Compliance
spin999 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means the collection, processing, and use of your personal data is governed by the legal framework established by the Malaysian government to protect the privacy of its citizens and residents.
Malaysia PDPA Compliance
Payment Information Is Not Stored on Our Servers
Your sensitive payment details — whether a Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX account number — are never stored directly on spin999's servers. All transactions are processed through a PCI DSS-certified payment gateway that handles financial data within an isolated and secure environment.
PCI DSS-Certified Gateway
Players' Full Rights Over Their Data
You have the full right to access, correct, and request deletion of your personal data held by spin999 at any time. Data access requests will be processed within 14 working days. Account and data deletion requests will be fully processed within 30 days of the request being received.
Full Control is Yours
Internal Access is Restricted & Audited
Only spin999 staff who genuinely require access to specific data to carry out their authorised duties are permitted to do so — and all access is logged and audited on a regular basis. No staff member may access player data arbitrarily without a legitimate, justifiable operational need.
Regularly Audited

Important Note: This Privacy Policy explains how spin999 collects, uses, stores, and protects your personal information. By using the spin999.best platform, you agree to the collection and use of data as described in this document. This Policy forms part of the Terms & Conditions spin999 and should be read together with it.

1

Introduction — spin999's Privacy Commitment

Spin999 understands that the trust of Malaysian players is the most important foundation of our platform's operations. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, play your favourite slots, or reach out to our support team, you share various types of personal information with spin999. We take our responsibility to protect that information very seriously.

This Privacy Policy was crafted to provide complete transparency about spin999's data handling practices. We want our players to understand precisely — not in general terms, but specifically — what data we collect, why we need it, how it is used, who can access it, and how long it is retained. This is not a one-size-fits-all boilerplate document; it is a Privacy Policy written specifically for spin999's Malaysian players.

Spin999 operates in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, the primary legislation governing the collection and processing of personal data in Malaysia. Every aspect of spin999's data handling is designed to meet or exceed the minimum requirements of the PDPA, providing our players with a higher standard of protection than the law alone mandates.

If you have any questions about this Privacy Policy after reading it, the spin999 support team is available via 24/7 live chat or by email at support@spin999.best. We will respond to privacy-related enquiries within 24 working hours.


2

Types of Personal Data We Collect

Spin999 only collects personal data that is necessary for the operation of the platform and the services we offer to Malaysian players. We do not collect excessive or irrelevant data. The following are the categories of data collected by spin999 and the purposes for which they are collected:

Registration and Identity Data

  • Full name as stated on your Malaysian identity card (MyKad)
  • An active Malaysian mobile number
  • A valid and active email address
  • Date of birth (to verify the minimum age requirement of 18 years)
  • Account password (stored in an unreadable hashed format)

Identity Verification (KYC) Data

When spin999 requires identity verification — whether to process withdrawals above a certain limit or as a proactive security measure — we may request:

  • Copy of Malaysian identity card (MyKad) — front and back
  • Proof of payment method ownership (e.g., a screenshot of your e-wallet account)
  • A recent utility bill or bank statement as proof of address
  • A selfie or recent photograph for facial verification (in cases requiring enhanced verification)

Financial Transaction Data

  • Deposit and withdrawal history, including amounts, timestamps, and payment methods
  • The recipient's or sender's name used in the transaction
  • Transaction ID from the payment gateway for reconciliation purposes
  • Current account balance and balance change history

Gaming Activity Data

  • Gaming history including game titles, bet amounts, outcomes, and winnings
  • Bonus rollover progress and bonus balance
  • Game session times and durations
  • Game preferences and activity patterns

Technical and Device Data

  • IP address used when accessing the spin999 platform
  • Device type, operating system, and browser version
  • Unique device ID (for multi-account security verification)
  • Cookie and session data (see Section 6 for more details)
  • Access logs including login times, logout times, and pages visited

Communication Data

  • Records of live chat conversations with the spin999 support team
  • Emails sent and received in connection with your account or our services
  • Feedback and reviews you submit to spin999

Note: We do not collect credit or debit card numbers directly. All card information is processed exclusively by PCI DSS-certified payment gateways, which do not share full card details with spin999. We receive only transaction tokens for reconciliation purposes.


3

Purposes for Using Personal Data

Spin999 uses your personal data only for legitimate, necessary purposes directly related to providing our online casino platform services to Malaysian players. We do not use your data for purposes unrelated to platform operations or that you would not reasonably expect when registering.

Purpose of Use Types of Data Used Legal Basis
Registration & Account Management Name, email, phone number, password Contractual Agreement
Deposit & Withdrawal Processing Transaction data, payment information Contractual Agreement
Identity Verification (KYC) MyKad, selfie, proof of address Legal Obligations
Fraud Prevention & AML Transaction data, IP address, device information Legal Obligations
Customer Support All account-related data Contractual Agreement
Platform Improvements Activity data, technical data Legitimate Interest
Service Communications Email address, phone number Contractual Agreement
Responsible Gaming Game activity data Legitimate Interest

Marketing and promotional communications — such as new bonus notifications, Hari Raya promotions, or special spin999 offers — will only be sent to players who have given explicit consent during registration or through their account settings. You may withdraw consent to receive marketing communications at any time via the unsubscribe link in any email or through your spin999 account settings.


4

Data Sharing with Third Parties

Spin999 does not sell, rent, or commercialise players' personal data to any third party. That said, there are limited situations in the course of platform operations where spin999 is required to share certain data with specific parties. All such sharing is necessary, restricted to the minimum required, and governed by strict confidentiality agreements.

Payment Service Providers

To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks, spin999 is required to share the necessary transaction information with the relevant payment gateways and service providers. Data shared is limited to what is required to process the transaction and meet anti-money laundering (AML) requirements.

Game Software Providers

Software providers such as Evolution Gaming, Pragmatic Play, PG Soft, and others may receive the minimum game data necessary to deliver their services — for example, anonymised player IDs, bet amounts, and game outcomes. Personal identity information such as full names or phone numbers is not shared with software providers.

Legal Authorities

Spin999 may be required by Malaysian law to disclose certain information to law enforcement agencies, courts, or regulatory bodies upon receiving a valid and legally binding request from the relevant authorities. In such situations, spin999 will comply with our legal obligations while endeavouring to protect players' privacy rights to the extent permitted by law.

Business Transfer

In the event that spin999 is involved in a merger, acquisition, or transfer of business assets, player data may form part of the transferred assets. In such circumstances, spin999 will notify affected players and ensure that the receiving party is bound by a Privacy Policy that meets at least the same data protection standards currently upheld by spin999.

Spin999 does not share player data with advertisers, data brokers, third-party analytics companies, or any other party for third-party marketing purposes. Any marketing communication you receive from spin999 comes directly from spin999 itself — not from third parties who have purchased your data.


5

Spin999's Data Security Measures

Spin999 invests seriously in security infrastructure to ensure the personal data of Malaysian players is protected against unauthorised access, theft, loss, and misuse. The following are the key security layers implemented by spin999:

A
256-bit SSL Encryption on All Communications

All data traffic between a player's browser and spin999's servers is protected by 256-bit SSL certification. This ensures that sensitive data such as passwords, payment information, and personal details cannot be intercepted or tampered with while in transit over the internet.

B
Password Storage with Secure Hashing

Player account passwords are never stored in plain text. We use modern cryptographic hashing algorithms with a unique salt per user. This means that even in the event of a spin999 server breach, attackers would be unable to read actual player passwords from the stolen data.

C
Two-Factor Authentication (2FA) Available

Spin999 offers two-factor authentication via OTP (One-Time Password) sent to a player's registered phone number for all sensitive actions, including logins from new devices, password changes, and withdrawal requests that exceed a specified limit.

D
Firewall and Intrusion Detection System

Spin999's server infrastructure is protected by multi-layered firewalls and an Intrusion Detection System (IDS) that monitors network traffic around the clock to identify and block unauthorised access attempts before they can reach player data.

E
Role-Based Access Control (RBAC)

Only spin999 staff who require access to specific data to perform their authorised duties are permitted to do so, in accordance with the principle of least privilege. All access to player data is logged and fully auditable. Any unusual access automatically triggers an alert to our security team.

F
Regular Security Audits by Independent Parties

Spin999 conducts regular security audits and penetration testing through independent cybersecurity firms to identify and address any vulnerabilities in our infrastructure before they can be exploited by malicious parties.


6

Cookies and Tracking Technologies

Spin999 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how players interact with our platform. Cookies are small text files stored on your device when you visit spin999.best.

Types of Cookies Used by spin999

  • Essential Cookies (Required): Required for core platform functionality — login, session authentication, CSRF protection, and transaction integrity. These cookies cannot be disabled without affecting platform functionality.
  • Preference Cookies: Saves your interface preferences — such as language and display settings — to ensure a consistent experience each time you visit spin999.
  • Analytics Cookies: Collecting aggregated data on how players use the platform for product improvement purposes. This data is anonymised and not linked to any individual player's identity.
  • Security Cookies: Detecting suspicious access patterns, identifying unauthorised login attempts, and protecting player accounts from misuse.

Cookie Controls

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect your ability to log in and use the spin999 platform fully. For information on how to manage cookies on popular browsers (Chrome, Firefox, Safari, Edge), refer to the respective browser's help documentation.


7

Data Retention and Deletion

Spin999 retains players' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. We do not keep data longer than necessary.

Data Retention Guidelines

  • Active Account Data: Retained for the duration of the active account plus 5 years after account closure to meet AML and accounting legal requirements.
  • Financial Transaction Records: Retained for 7 years from the transaction date, in line with Malaysian tax and accounting legal requirements.
  • Support Communication Logs: Retained for 2 years from the date of last communication.
  • Identity Verification (KYC) Data: Retained for the duration of the active account plus 5 years to fulfil AML obligations.
  • Technical Data and Logs: Access logs and technical data are typically retained for 12 months before being deleted or anonymised.
  • Marketing Data: Deleted within 30 days of you withdrawing your marketing consent.

Deletion Process Upon Request

If you request data deletion and the closure of your spin999 account, we will process that request within 30 business days. However, certain data may need to be retained for periods prescribed by Malaysian law even after a deletion request is received — in particular, financial transaction records and KYC data subject to mandatory retention obligations. spin999 will clearly inform you which data can be deleted immediately and which must be retained for a legally specified period.


8

Players' Rights Over Their Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and spin999's commitment to our players, you have the following rights regarding your personal data held by spin999. All rights can be exercised by contacting the spin999 team via email at support@spin999.best or through live chat on the platform.

Right to Data Access

You have the right to request a copy of all personal data that spin999 holds about you. Data access requests will be processed within 14 working days and provided in a readable, easy-to-understand format.

Right to Data Rectification

If any personal data held by spin999 is inaccurate or out of date, you have the right to request a correction. Corrections will be processed within 7 working days from the date the request is received.

Right to Data Deletion

You have the right to request deletion of your personal data when it is no longer needed for its original purpose, or when you withdraw your consent. Deletion is subject to mandatory retention obligations under Malaysian law.

Right to Object to Processing

You have the right to object to the processing of your personal data for specific purposes — in particular, for marketing communications. Objections to processing for marketing purposes will be actioned within 5 business days of the request.

Right to Data Portability

You have the right to request a copy of your personal data in a structured, machine-readable format (such as JSON or CSV) for transfer to another platform. Such requests will be processed within 21 business days.

Right to Restrict Processing

In certain circumstances — such as when the accuracy of data is disputed or while a deletion request is being processed — you have the right to request a temporary restriction on spin999's processing of your data.


9

Protection of Children's Data

Spin999 strictly prohibits individuals under the age of 18 from participating in any activities on our platform. We do not knowingly collect any personal data from individuals under 18. If spin999 discovers or is made aware that personal data of an underage individual has been collected, we will immediately take the following steps:

  • Immediately suspending the associated account while an investigation is carried out
  • Delete all personal data belonging to the individual from our systems
  • Forfeiting all balances and winnings in the account in accordance with spin999's Terms and Conditions
  • Permanently closing the account if the account holder is proven to be underage

Parents or guardians who believe a child under their care has registered an account on spin999 without their knowledge should contact the spin999 support team immediately at support@spin999.best. We will treat such cases with high priority and full confidentiality.


10

Privacy Policy Amendments

Spin999 reserves the right to amend this Privacy Policy from time to time to reflect changes in our service operations, new legal requirements, or developments in data protection industry best practices. When material amendments are made to this Privacy Policy, spin999 will notify all registered players via their registered email and in-platform notifications at least 14 days before the changes take effect.

Continued use of the spin999 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to request account closure and data deletion before the amendments take effect.

We encourage you to review this Privacy Policy page periodically to stay informed about how spin999 handles your personal data. The date of the most recent amendment is always displayed at the top of this page and in the contents panel on the left.

Effective Date: 1 January 2026. This version of the Privacy Policy supersedes all previous versions.


11

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your rights under this Privacy Policy, please contact the spin999 team through the following channels. All privacy-related enquiries will be handled in strict confidence and responded to within the specified timeframes.

  • Privacy Email: support@spin999.best (please include "Privacy Inquiry" in the email subject line)
  • Live Chat: Available 24/7 via the spin999.best platform in both Malay and English
  • Response Time: General privacy enquiries within 24 hours; data access/deletion requests within 14–30 working days

For inquiries or complaints that cannot be resolved through spin999's support channels, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia under the authority granted by the Personal Data Protection Act 2010.

For frequently asked questions about privacy and the use of the spin999 platform, visit FAQ page where many common questions about privacy, account security, and data protection have been answered in detail.

FAQ — spin999 Privacy Policy

Direct answers to the most frequently asked questions about player privacy and data protection

No. spin999 does not store sensitive payment details such as your full bank account number, credit or debit card number, or banking account password on our servers. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or FPX, you are directed to a PCI DSS-certified payment gateway to complete the transaction. These payment gateways handle sensitive financial data in an environment that is entirely separate from spin999's servers. spin999 only receives a transaction token and verification status, which contain none of your actual financial details.

To request a copy of your personal data, contact the spin999 team by email at support@spin999.best with the subject line "Data Access Request", or via live chat on the platform. Include your full name and registered account email for identity verification. spin999 will process your request within 14 working days and provide the data in a readable format — typically as a PDF report or a CSV data export. The data provided will include your account profile information, transaction history, communication records, and any other data we hold in relation to your account.

Your game activity data — such as the types of games you play, bet amounts, and frequency of play — is used internally by spin999 for legitimate purposes, including detecting signs of problem gambling as part of our responsible gaming programme, improving in-platform game recommendations, and analysing aggregated usage patterns for product development. Individual game activity data is not shared with third parties for marketing purposes. Any promotional communications we send you — such as new bonus notifications or special spin999 promotions — are based on the general preferences you set in your account, not a detailed analysis of your gaming patterns.

When you close your spin999 account, we will begin the data deletion process in accordance with the guidelines set out in this Privacy Policy. Data not subject to mandatory retention obligations — such as account profile data, personal preferences, and non-material communication records — will be deleted within 30 days of the account closure date. However, financial transaction records must be retained for 7 years in accordance with Malaysian law on accounting and AML, and KYC data must be retained for 5 years after account closure. Data that is retained is stored in a restricted format and is not used for any active purpose other than legal compliance. You will receive written confirmation of which data has been deleted and which data is still being held, along with the applicable retention period.

Privacy in the Context of Responsible Gaming

Your gameplay activity data is also used to safeguard your wellbeing as a player

Game Pattern Monitoring for Player Protection

Spin999 uses your gameplay activity data internally to detect patterns that may indicate problem gambling — such as a sudden increase in playing frequency or bet sizes. This is not about exploitation; it is part of our commitment to responsible gaming and the wellbeing of our Malaysian players.

Self-Exclusion Data is Strictly Protected

If you activate self-exclusion through spin999, this information is handled with the strictest confidentiality. Self-exclusion data is not shared with any party without your consent and is only accessible to staff responsible for enforcing responsible gaming limits on the spin999 platform.

Gaming Limit Tools — Control at Your Fingertips

The deposit limits, loss limits, and session time limits you activate on your spin999 account are personal preference data that remain entirely under your control. spin999 will not encourage you to loosen these limits, nor will we contact you with the intention of getting you to remove limits you have set yourself.

Professional Help Available

If you are concerned about your own gambling habits or those of a loved one, please contact Talian Kasih 15999 or visit Responsible Gaming page spin999 for information and support resources in Bahasa Malaysia.

Your Data is Safe — Join spin999 with Confidence

Register a free account today with full confidence that your personal data is protected by 256-bit SSL encryption, PDPA compliance, and a transparent privacy policy with no hidden surprises.

Bahasa Melayu