Privacy Policy spin99 — Your Personal Data Protection

Spin99 takes user privacy seriously. We understand that entrusting personal information to any online platform requires a high level of confidence — and we do not take that trust lightly.

This Privacy Policy applies to all services provided by spin99 through our official website at spin99.fun, including account registration, gaming activity, financial transactions, and customer support interactions. This document is written in clear, plain language so you know exactly what happens with your data.

We encourage you to read this policy in full. If any section is unclear, our support team is ready to help you understand it.

Spin99 collects various types of information from you when you use our platform. This collection is carried out transparently and only for legitimate purposes.

Information you provide directly:

• Identity information: Full name, national ID number, date of birth, gender, and nationality.
• Contact information: Email address, phone number, and residential address.
• Account credentials: Username and password (passwords are stored in encrypted form).
• Financial information: Bank account number, e-wallet number (e.g. Touch 'n Go), and transaction details for deposits and withdrawals.
• KYC documents: Copies of your identity card, bank statements, or other identity verification documents you have submitted.

Automatically collected information:

• Technical data: IP address, browser type, operating system, and screen resolution.
• Usage data: Pages visited, session duration, games played, and betting patterns.
• Device data: Unique device identifiers, phone model (for mobile app users), and network information.
• Cookies and tracking technologies: Session data, user preferences, and usage analytics via first-party cookies.

Every piece of data we collect has a clear and legitimate purpose. spin99 does not use your data beyond the scope stated here.

• Account management: To create, verify, and maintain your account and ensure the security of your login.
• Transaction processing: To process deposits, withdrawals, and any other financial transactions you carry out through the platform.
• Legal compliance: To fulfil KYC requirements, anti-money laundering (AML) obligations, and reporting to relevant authorities when required by law.
• Platform security: To identify and prevent fraudulent activity, money laundering, bonus abuse, and any other suspicious activity.
• Service improvement: To analyse usage patterns and develop better new features for our users.
• Communications: To send important notices regarding your account, policy updates, and promotional information (if you have agreed to receive marketing communications).
• Customer support: To resolve complaints, answer enquiries, and provide the technical assistance you need.
• Responsible gaming: To monitor gaming patterns and identify signs of problem gambling so we can offer appropriate support.

Spin99 does not sell your personal data. However, there are limited situations where we need to share certain information with carefully selected third parties.

Third parties that may receive your data:

• Payment providers: Required transaction information is shared with payment processors such as FPX, DuitNow, and e-wallet providers to process your deposits and withdrawals. These providers are subject to their own privacy policies.
• Game software providers: Third-party game software providers may receive minimal session identifiers to enable their gaming platforms to function. No full personal information is shared.
• Analytics companies: De-identified usage data (with names and addresses removed) may be shared with analytics providers for platform improvement purposes.
• Legal authorities: spin99 is legally required to comply with court orders, law enforcement agency requests, or regulatory reporting requirements. We will notify you of such disclosures where permitted by law.
• Professional advisors: External lawyers, accountants, or auditors bound by professional confidentiality obligations may access certain data within the scope of their duties.

Your data security is not merely an added feature for spin99 — it is the foundation of our entire platform operation. We continuously invest in the latest security infrastructure to ensure your data is protected at all times.

Security layers we implement:

• Encryption of data in transit: All communications between your browser and spin99 servers are encrypted using TLS 1.3 with 256-bit encryption. This applies to all pages, not just the login or transaction pages.
• Encryption of data at rest: Sensitive data such as bank account information and KYC documents are stored in encrypted form using AES-256 algorithms. Even spin99 staff cannot view the original data without special authorisation.
• Two-factor authentication (2FA): spin99 supports two-factor authentication for an added layer of security. We encourage you to enable this feature in your account settings.
• 24/7 Monitoring: Our security systems are monitored around the clock by an experienced cybersecurity team to detect and respond to any threats promptly.
• Regular penetration testing: spin99 conducts regular security testing by independent experts to identify and address any vulnerabilities before they can be exploited.
• Strict access controls: Access to user personal data within spin99's internal systems is restricted on a "need-to-know" basis — only staff who require access to perform their duties will be granted permission.

Spin99 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is a clear explanation of the types of cookies we use and their purposes.

• Essential cookies: These cookies are required for core platform functions such as login session management and security. They cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information on how you use the platform — which pages you visit most, load times, and any errors — to help us improve website performance.
• Functionality cookies: Saves your preferences such as language, display settings, and game choices so you don't need to reconfigure them every time you log in.
• Analytics cookies: We use analytics tools to understand aggregate, anonymised usage patterns for the purpose of continuous platform improvement.

You can control or delete cookies through your browser settings. Please note that disabling or blocking essential cookies may affect certain features of the spin99 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

Spin99 does not retain your data longer than necessary. Retention periods are determined based on the purpose of data collection and applicable legal requirements.

In general, your personal data will be retained for as long as your account remains active. After account closure, we will keep the necessary data for the following periods:

• Financial transaction records are retained for 7 years in accordance with tax and anti-money laundering legal requirements in Malaysia.
• KYC documents and identity verification records are retained for 5 years after account closure.
• Customer support communication records are retained for 2 years.
• Technical logs and security data are retained for 90 days unless required for an active investigation.

Once the retention period expires, your data will be securely deleted or anonymised using methods that meet industry standards.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by spin99:

• Right to access: You may request a copy of all personal data we hold about you at any time.
• Right to rectification: If any of your data is inaccurate or outdated, you have the right to request a correction. You may also update certain information directly through your account settings.
• Right to deletion: Under certain circumstances, you may request the deletion of your personal data. Please note that this right is subject to the legal retention requirements outlined in section 7.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.

To exercise any of the above rights, please contact our support team via live chat within your account or our official support email. We will process your request within 14 business days.

Spin99 is a gaming platform exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data from individuals who are under age.

All registration applicants are required to confirm that they are at least 18 years of age. Our KYC process also helps identify and reject registrations from those who do not meet the age requirement.

If you believe a child has successfully registered on our platform or that a child's information has been collected without valid consent, please contact us immediately. We will investigate and delete any related data without delay.

Spin99 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. All changes will be posted on this page with a clear effective date.

For significant changes, we will notify you via a notice in your account or your registered email at least 7 days before before the changes take effect. This gives you sufficient time to review the changes and make a decision about your continued use of our platform.

Continued use of the spin99 platform after changes take effect will be considered your acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 8.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we are here to help.

Ways to reach the spin99 privacy team:

• Live Chat: The fastest method — access live chat directly from within your spin99 account, available 24 hours a day, 7 days a week.
• Email: Send your written enquiry to [email protected]. We will respond within 3 business days.

When contacting us regarding privacy matters, please include your account number and a clear description of your request so we can handle your enquiry more quickly and accurately.