Privacy Policy Spin 99 – Personal Data Protection for Malaysian Users

01 Introduction

This Privacy Policy ("Policy") is published by Spin 99, the operator of the spin99.run digital entertainment platform. We understand that your trust depends entirely on how we handle the information you share with us, and we take that responsibility seriously.

This document details: what personal data we collect, the purposes for which it is used, how it is protected, who it may be shared with, and what rights you hold as the owner of that data. This Policy applies to all users of the Spin 99, whether you are a casual visitor or a registered member actively playing slots, live casino, blackjack, roulette, or placing bets in our Sports Betting section.

By using the Spin 99, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, we advise you not to use our services.

02 Types of Personal Data We Collect

Spin 99 only collects data that is necessary for legitimate and specific purposes. The categories of data we may collect are as follows:

Spin 99 does not directly collect credit/debit card numbers. All financial transactions are processed through approved payment providers including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u / CIMB Clicks).

03 How We Collect Data

Your personal data is collected by Spin 99 through the following channels:

• Account Registration: When you complete the registration form and create your Spin 99 account.
• KYC (Know Your Customer) Process: When you submit identity verification documents to meet compliance requirements.
• Financial Transactions: When you make a deposit via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX, your transaction details are recorded automatically.
• Platform Usage: Technical data and activity are collected automatically when you use the Spin 99 website or app.
• Cookies and Similar Technologies: Information is collected via cookies, web beacons, and other tracking technologies as you browse our platform.
• Support Communications: When you contact our support team via live chat or email.
• Affiliate Programme: If you registered via an affiliate link, your referral information will be recorded.

04 Purposes of Personal Data Use

Spin 99 uses collected personal data solely for the following legitimate purposes:

• Account Management: To create, verify, and maintain your member account on the Spin 99 platform.
• Transaction Processing: To accurately and securely process deposits, withdrawals, and winnings to your preferred Malaysian local payment method.
• Legal Compliance (AML/KYC): To fulfil anti-money laundering obligations and customer verification procedures as required by applicable regulations.
• Platform Security: To detect and prevent fraud, multi-account abuse, and other unlawful activity on the Spin 99 platform.
• Experience Personalisation: Personalises content, promotions, and game recommendations based on your preferences and activity history.
• Service Communications: Sends important notifications regarding your account, transactions, and policy updates.
• Platform Improvements: Analyses usage data to improve the overall performance, interface, and user experience of Spin 99.
• Marketing (with consent): Sends promotional offers and exclusive bonuses that you can unsubscribe from at any time.

05 Sharing Data with Third Parties

Spin 99 does not sell, rent, or trade our members' personal data to any third party for their own marketing purposes. However, data may be shared in the following limited circumstances:

• Payment Service Providers: Required transaction information is shared with approved payment processors (Touch 'n Go, GrabPay, DuitNow, FPX, etc.) to complete your financial transactions.
• Game Software Providers: Required game session data is shared with game software providers to ensure the integrity and fairness of every game.
• Relevant Authorities: Data may be disclosed to Malaysian government authorities where required by law, court order, or a legitimate request from enforcement agencies.
• Professional Consultant: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations may access certain data within the scope of their work.
• Merger or Acquisition: In the event of a business restructuring, data may be transferred to a successor entity, with appropriate notice provided to members.

All third parties with whom members' data is shared Spin 99 are bound by strict data confidentiality agreements and are only permitted to use such data for the specific authorised purposes.

06 Security & Data Protection

Spin 99 continuously invests in robust data security infrastructure to safeguard every member's personal information. The security measures we implement include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers.
• One-Way Hashing for all passwords — the Spin 99 team cannot read your password.
• Two-Factor Authentication (2FA) as an additional security option for all member accounts.
• 24/7 Monitoring against suspicious activity and unauthorised access attempts on our systems.
• Regular Security Audits by independent cybersecurity experts to identify and address any vulnerabilities.
• Internal Access Controls strict controls – only staff with a legitimate need are permitted to access member personal data, and every access is automatically logged.
• Encrypted Data Backup securely stored for recovery in the event of an emergency.

07 Cookies & Tracking Technologies

Spin 99 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Below are the categories of cookies we use:

You can manage your cookie settings through your web browser preferences at any time. However, disabling certain cookies may affect the functionality of some parts of the platform Spin 99.

08 Data Retention Period

Spin 99 retains members' personal data only for as long as necessary for the stated purposes or as required by applicable law:

• Active Account Data: Retained for as long as your account remains active on the Spin 99 platform.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in accordance with AML compliance requirements and Malaysian tax law.
• KYC Records (Identity Verification): Retained for 5 years after account closure or the end of the business relationship.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics Cookie Data: Retained between 30 days to 2 years depending on the type of cookie.
• Data Following Account Closure: Retained for the period required by law, after which it is permanently deleted or anonymised.

09 Your Rights as a Data Owner

Under Malaysia's PDPA 2010 and international best practices in data protection, you as a member Spin 99 have the following important rights:

To exercise any of the rights above, please contact our support team Spin 99 via email at support@spin99.run or through live chat. We will respond within 14 business days.

10 Children's Data Protection

Platform Spin 99 is RESTRICTED to individuals aged 18 years and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we become aware that personal data belonging to a minor has been collected without valid consent, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect that a child under their care has registered at Spin 99 requested to contact us immediately at support@spin99.run.

11 Amendments to This Privacy Policy

Spin 99 reserves the right to modify this Privacy Policy at any time in line with changes in law, technological developments, or updates to our business practices. The notification process for amendments is as follows:

• Material changes will be notified to all registered members via email and in-platform notifications at least 14 days before it takes effect.
• The "Last Updated" date at the top of this page will be updated each time an amendment is made.
• For minor amendments that do not affect members' fundamental rights, notification may be made via an on-site notice only.
• Continued use of the platform Spin 99 after the amendment's effective date will be considered acceptance of the updated policy.

We encourage you to review this Privacy Policy page from time to time to stay informed about how Spin 99 protect your information.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how Spin 99 managing your personal data, please contact us through the following channels:

We are committed to responding to all privacy-related enquiries within 14 working days from the date of receipt. For more complex cases, a response may require up to 30 working days, and we will notify you if this occurs.