Spin and go Privacy Policy — Malaysia Player Data Protection

1 Introduction

Welcome to the spin and go Privacy Policy page. We understand that your trust is the most valuable asset entrusted to us. For this reason, we take the protection of your personal data extremely seriously — not merely as a legal obligation, but as our moral responsibility to every player who chooses spin and go as their gaming platform.

This Privacy Policy ("Policy") transparently and comprehensively describes how spin and go ("we", "Platform") collects, processes, stores, protects, and uses your personal data ("Player", "you") when you use our website and services at spinandgo.net.

This Policy applies to all spin and go platform users, including website visitors, registered players, and any individuals who interact with us through customer support channels. This Policy is to be read together with Terms and Conditions which covers all aspects of platform usage comprehensively.

2 Data We Collect

Spin and go only collects personal data that is strictly necessary to operate the platform safely and effectively. We do not collect excessive or irrelevant data beyond the scope of our services.

2.1 Data You Provide Directly

This is data you have directly provided while interacting with our platform:

• Registration Information: Full name, date of birth, email address, mobile number, and encrypted password.
• Identity Verification (KYC): National ID number (MyKad), copies of identity documents, proof of address (bank statement or utility bill), and a verification selfie if required.
• Payment Information: Bank account number, account holder name, and digital wallet details used for deposits and withdrawals.
• Communications: Any messages, complaints, or enquiries you send to our support team via Live Chat, email, or other channels.
• Account Preferences: Language settings, responsible gaming limits you have set yourself, and marketing communication preferences.

2.2 Data Collected Automatically

When you browse or use the spin and go platform, our systems automatically record the following technical information:

• Device Data: Device type, operating system, phone model, screen resolution and browser version.
• Network Data: IP address, internet service provider (ISP) name, and general location (country/city).
• Session Data: Login and logout times, session duration, in-account activity, and transaction records.
• Game Data: Game history, total wagering amounts, game results, and bonus records used.
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 5).

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. spin and go operates on a "data minimisation" principle — we do not use your data for any purpose other than those stated here without your explicit consent.

3.1 Platform Operations

• Create and manage your player account.
• Processing deposits, withdrawals and all financial transactions securely.
• Verifying your identity through the KYC process to meet anti-money laundering (AML) legal requirements.
• Providing access to all platform games and services.

3.2 Security & Compliance

• Detecting and preventing fraudulent activity, multiple account usage and bonus abuse.
• Fulfilling legal obligations including reporting to the relevant authorities when required.
• Protecting game integrity and ensuring a fair playing environment for all players.
• Complying with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).

3.3 Service Improvements

• Analysing platform usage patterns to improve the user experience.
• Developing new features better suited to the needs of Malaysian players.
• Identifying and resolving technical issues more quickly and effectively.

3.4 Communications

• Sending important account-related notifications such as deposit confirmations, withdrawal status updates and security alerts.
• Delivering information about promotions, bonuses and new offers (only if you have agreed to receive marketing communications).
• Responding to enquiries and complaints through customer support channels.

4 Data Sharing with Third Parties

Spin and go does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary for platform operations:

4.1 Trusted Service Providers

We share only the minimum necessary data with third parties who help operate our platform, including:

• Payment Provider: FPX, Touch 'n Go, GrabPay and local banks to process your financial transactions.
• KYC Service Provider: Registered and recognised third-party identity verification companies for conducting document checks.
• Cloud Infrastructure Provider: Cloud computing services that store and process data in certified data centres.
• Game Software Provider: Licensed game providers that require certain session data to ensure games run correctly.

All these third-party service providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

4.2 Legal Requirements

Spin and go may be required to disclose your data to the authorities in the event that:

• There is a valid court order or lawful legal directive.
• There is an investigation related to financial crime or money laundering activities.
• Required to protect public safety or prevent crime.

5 Cookies & Tracking Technologies

Spin and go uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and analyse website traffic. Below is a full explanation of the types of cookies we use:

5.1 Essential Cookies

These cookies are essential for the platform to function. Without them, core features such as login, session management and security cannot operate. Essential cookies cannot be disabled.

• Session Cookies: Maintaining your login status during your playing session.
• Security Cookies: Helping detect suspicious activity and protecting your account from unauthorised access.
• Preference Cookies: Saving your language settings and display preferences.

5.2 Analytics Cookies

These cookies help us understand how players use the platform so we can continuously improve it. Data collected is anonymised and cannot be used to personally identify you.

5.3 Marketing Cookies

These cookies are used to display more relevant ads and promotions to you based on your interests and usage patterns. You may choose to disable marketing cookies without affecting the platform's core functionality.

5.4 Cookie Management

You can manage or block cookies through your web browser settings. However, blocking essential cookies may affect your ability to log in or use certain platform features. For guidance on managing cookies in popular browsers (Chrome, Firefox, Safari, Edge), refer to your browser's help documentation.

6 Data Security

Protecting your personal data from unauthorised access, disclosure, alteration or destruction is spin and go's highest priority. We continuously invest in the latest security infrastructure to ensure your data remains safe at all times.

6.1 Technical Security Measures

• Transit Encryption: All data is transmitted using TLS 1.3 protocol with AES-256 encryption — making it impossible for third parties to intercept.
• Storage Encryption: Sensitive data such as passwords is stored using one-way hashing that cannot be decrypted.
• Two-Factor Authentication (2FA): An additional layer of protection requiring verification via OTP code when logging in from a new device.
• Continuous Monitoring: An intrusion detection system (IDS) operates 24/7 to detect and block suspicious activity in real time.
• Penetration Testing: Our platform undergoes regular security testing by independent cybersecurity experts to identify and patch vulnerabilities.

6.2 Organisational Security Measures

• Access to players' personal data is restricted to staff who genuinely need it on a need-to-know basis (principle of least privilege).
• All staff who handle personal data undergo regular data protection training.
• Internal audit records are maintained for all access to sensitive player data.

6.3 Security Incident Response

While we do everything possible to protect your data, no system can be guaranteed 100% secure. In the event of a data breach involving your personal information, spin and go is committed to:

• Notifying you within 72 hours of detecting an incident if it poses a high risk to your rights and freedoms.
• Clearly explaining what data was involved, the potential impact and the steps we have taken.
• Reporting incidents to the relevant authorities as required by law.

7 Data Retention Period

Spin and go does not retain your personal data longer than necessary. Retention periods are determined based on the purpose of data collection, operational requirements, and applicable legal obligations.

As a general guideline, your personal data will be retained for as long as your account is active and for any additional period required by law after account closure. Specifically:

• Financial and transaction records retained for seven (7) years in accordance with the Companies Act and Malaysian tax law requirements.
• KYC documents and identity verification retained for seven (7) years after the account closure date in accordance with AMLA requirements.
• Game logs and betting history retained for three (3) years after the last session for dispute resolution purposes.
• Customer support communication logs retained for three (3) years for quality control and dispute reference purposes.
• Anonymous analytics data may be retained indefinitely as it cannot be linked to any specific individual.

Once the retention period expires, your data will be securely deleted or anonymised in a form that cannot be used to identify you.

8 Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by spin and go. We fully respect and facilitate the exercise of these rights.

8.1 How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer via email at [email protected] by including:

• Your full name and spin and go account ID.
• The right you wish to exercise and the reason for your request (if applicable).
• Copies of identity documents for verification purposes (to ensure we only provide data to the rightful owner).

We will process your request within 14 working days and provide a written response. If your request involves a large volume of data or significant complexity, we may require up to 30 days and will notify you in advance.

9 Children's Data

Spin and go is a gaming platform exclusively for individuals of age 18 years and above only. We take this responsibility very seriously and have implemented robust measures to prevent minors from registering or using our platform.

9.1 Preventive Measures

• The registration process requires age verification through date of birth and identity documents.
• The KYC process mandates verification that players are aged 18 and above before any financial transactions are permitted.
• An automated detection system identifies and investigates accounts showing signs of use by minors.

9.2 Actions Upon Discovery of Children's Data

If we discover that personal data of someone under the age of 18 has been unknowingly collected, we will take immediate action to:

• Suspending the relevant account immediately.
• Deleting all related personal data.
• Refunding any deposited funds where applicable.
• Reporting the incident to the relevant authorities.

If you become aware that a minor has registered an account on our platform, please notify our support team immediately via 24/7 Live Chat or email at [email protected].

10 Changes to the Privacy Policy

Spin and go reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. We are committed to notifying you of any material changes.

10.1 Notice of Changes

When significant changes are made to this Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the spin and go home page at least 7 days before the changes take effect.
• Sending an email notice to all active registered players summarising the key changes.

10.2 Acceptance of Changes

Continued use of the spin and go platform after the effective date of an updated Policy is considered your acceptance of those changes. If you do not agree with the changes made, you may close your account before the effective date by contacting our support team.

We encourage you to review this page periodically to stay informed on how we protect your personal data.

11 Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, do not hesitate to contact us. Our team is ready to assist you.