spin321 Privacy Policy

1. Data Controller

For the purposes of applicable data protection legislation, spin321 ("the Platform", "we", "us", "our") acts as the data controller in respect of personal information collected from Members and visitors. spin321 operates as an international online entertainment platform and processes personal data in accordance with its licensing obligations and applicable data protection standards.

If you have any questions regarding how spin321 handles your personal data, or if you wish to exercise any of the rights described in this Policy, you may contact our Data Protection team at [email protected]. We aim to respond to all data-related enquiries within 30 days of receipt.

2. Information We Collect

spin321 collects personal information from you in the following categories:

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, phone number, and preferred currency (MYR)
• Identity verification documents: Government-issued photo ID (e.g. Malaysian MyKad or passport), proof of address, and payment method ownership documents submitted during KYC verification
• Payment information: Payment method details including bank account references, e-wallet identifiers (Touch 'n Go, Boost), and cryptocurrency wallet addresses used for deposits and withdrawals. Full card or banking credentials are never stored directly on spin321 servers — they are tokenised via PCI-DSS compliant third-party payment processors.
• Support communications: The content of chat transcripts, emails, and any documentation you submit when contacting spin321 customer support

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone
• Usage data: Pages visited, games launched, betting history, session duration, navigation paths, and interaction logs within the spin321 platform
• Cookies and tracking data: As described in Section 6 below
• Geolocation data: Approximate geographic location derived from IP address, used for jurisdictional compliance and fraud prevention. spin321 does not collect precise GPS-level location data.

3. How We Use Your Personal Information

spin321 uses the personal information we collect for the following purposes:

• Account management: To create, maintain, and administer your spin321 Member account, including processing your registration, verifying your identity, and managing your MYR wallet
• Service delivery: To provide you access to spin321 games, live casino tables, sportsbook markets, and all other platform features
• Financial transactions: To process deposits, withdrawals, and any promotional credits in MYR, and to fulfil our obligations under payment processing agreements
• Regulatory compliance: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under our international gaming licence, including identity verification, source-of-funds checks, and transaction monitoring
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and violations of our Terms & Conditions
• Responsible gaming: To monitor gambling behaviour patterns and, where appropriate, proactively offer responsible gaming tools or apply account restrictions in accordance with our responsible gaming obligations
• Customer support: To respond to your enquiries, process dispute submissions, and maintain records of support interactions for quality assurance
• Platform improvement: To analyse aggregated usage data and improve the spin321 user interface, game lobby, and overall platform performance
• Marketing communications: To send you promotional offers, bonus notifications, and updates about spin321 services — only where you have opted in and subject to your right to unsubscribe at any time

4. Legal Basis for Processing

spin321 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil the Member agreement between you and spin321, including account administration and payment processing
• Legal obligation: Processing required to comply with our licensing obligations, KYC/AML requirements, and any applicable regulatory directions
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where such interests are not overridden by your fundamental rights
• Consent: Where we rely on consent as a legal basis (e.g. marketing emails), you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing communication

5. Data Sharing & Third-Party Disclosure

spin321 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of third parties strictly for the purposes described in this Policy:

• Payment processors: PCI-DSS certified payment service providers handling MYR transactions via Touch 'n Go, Boost, Maybank, CIMB, Public Bank, and cryptocurrency channels. These processors receive only the minimum data required to process your transaction.
• Game providers: Licensed game software providers whose titles are available in the spin321 lobby. Game providers receive session identifiers and stake/outcome data for game functionality purposes only.
• Identity verification services: Third-party KYC and AML compliance providers used to verify identity documents and conduct required background checks under our licensing obligations.
• Regulatory authorities: Our international gaming licence regulators and, where legally required, competent authorities including law enforcement agencies. spin321 will not disclose data to authorities without a valid legal basis.
• Technology infrastructure: Cloud hosting providers and security infrastructure partners who process data on our behalf under data processing agreements.

All third parties with whom spin321 shares personal data are contractually bound to process that data only for the specified purpose, to maintain appropriate security standards, and to not further share or sell the data.

6. Cookies & Tracking Technologies

spin321 uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for platform functionality including session management, login persistence, and security. These cannot be disabled without breaking core platform features.
• Performance and analytics cookies: Used to collect anonymised or pseudonymised data about how Members use spin321, which pages are visited most, and where errors occur. This data helps us improve the platform.
• Functional cookies: Store your preferences such as language settings, game lobby filters, and display preferences to provide a consistent experience across sessions.
• Marketing cookies: Where you have consented, these cookies allow spin321 to personalise promotional offers and track the effectiveness of marketing campaigns. You may withdraw this consent at any time.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use core spin321 features including login and the MYR wallet.

7. Data Retention

spin321 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying our legal and regulatory obligations. Specific retention periods include:

• Account data and KYC documents: Retained for a minimum of 5 years following account closure to meet AML and licensing regulatory requirements
• Transaction records: Retained for a minimum of 5 years for financial regulatory compliance purposes
• Support communications: Retained for 3 years from the date of the interaction
• Marketing consent records: Retained until consent is withdrawn and for 3 years thereafter to evidence compliance
• Cookies and analytics data: Typically retained for 13 months from collection

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. spin321 does not retain personal data in an identifiable form beyond what is required.

8. Data Security

spin321 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 256-bit SSL/TLS encryption for all data in transit between your device and spin321 servers
• Encryption of sensitive data at rest, including identity documents and payment reference data
• Access controls restricting personal data to authorised personnel on a need-to-know basis, with audit logging of all access events
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Two-factor authentication available for all Member accounts and mandatory for all spin321 administrative accounts
• Incident response procedures with defined escalation paths and regulatory notification obligations in the event of a data breach

While spin321 takes all reasonable measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your spin321 account credentials and for notifying us immediately if you suspect unauthorised access.

9. Your Data Rights

Subject to applicable law and our legitimate regulatory obligations, you have the following rights in relation to your personal data held by spin321:

• Right of access: You may request a copy of the personal data spin321 holds about you
• Right to rectification: You may request correction of inaccurate or incomplete personal data
• Right to erasure: You may request deletion of your personal data where spin321 no longer has a legitimate or legal basis for retaining it. Note that regulatory retention obligations (Section 7) may prevent full erasure in some cases.
• Right to restriction: You may request that spin321 restrict processing of your data while a dispute regarding accuracy or legal basis is resolved
• Right to data portability: You may request a machine-readable copy of personal data you provided to spin321 directly
• Right to object: You may object to processing based on legitimate interests. You have an absolute right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, contact spin321 at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may require identity verification before actioning any request.

10. Children's Privacy

spin321 Services are strictly restricted to individuals aged 21 and above. spin321 does not knowingly collect personal data from persons under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately close the account, forfeit any associated balances, and delete the personal data in accordance with applicable law.

If you are a parent or guardian and believe your child has accessed spin321, please contact us immediately at [email protected].

11. International Data Transfers

As an international online platform, spin321 may process and store personal data in jurisdictions outside Malaysia. Where such transfers occur, spin321 ensures that appropriate safeguards are in place, including standard contractual clauses, data processing agreements with third-party providers, and transfer to jurisdictions with recognised adequate data protection standards.

By registering and using spin321, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia. spin321 will at all times ensure such transfers comply with applicable data protection standards.

12. Changes to This Privacy Policy

spin321 may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. When we make material changes, we will notify registered members via email and display a prominent notice on the spin321 platform for at least 14 days before the changes take effect.

The "Last updated" date at the top of this page reflects when the current version was published. We encourage you to review this Policy periodically. Continued use of spin321 after the stated effective date of any revision constitutes acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how spin321 handles your personal data, please contact us through the following channels:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 through the spin321 platform

spin321 is committed to resolving privacy concerns fairly and promptly. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant supervisory authority in your jurisdiction.