spin99 takes the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you use the spin99 platform, how we use it, who we may share it with, and what rights you have over your data.
This Privacy Policy applies to all personal data collected and processed by spin99 in connection with the operation of spin99.asia and all related services, including sports betting, online casino games, slot titles, live dealer tables, customer support communications, and promotional activities.
By registering an account on spin99 or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Policy, you should not use spin99 services.
For the purposes of this Privacy Policy, spin99 is the data controller responsible for your personal data. References to "spin99", "we", "us", and "our" refer to the spin99 platform operator. References to "you" and "your" refer to any registered player or visitor to spin99.asia.
This Privacy Policy should be read together with the spin99 Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete framework governing your use of the spin99 platform.
spin99 collects personal data through multiple channels — directly from you during registration and account use, automatically through your interactions with the platform, and in certain cases from third-party sources such as payment processors and identity verification providers.
spin99 uses the personal data we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, credentials |
| Processing deposits and withdrawals | Financial, identity |
| Identity and age verification (KYC) | Identity, contact |
| Fraud prevention and AML compliance | Identity, financial, technical, usage |
| Providing customer support | Identity, contact, communications |
| Personalising your platform experience | Usage, technical |
| Sending promotional communications (where consented) | Contact, usage |
| Responsible gaming monitoring and intervention | Usage, responsible gaming data |
| Platform security and abuse prevention | Technical, usage, geolocation |
| Legal and regulatory compliance | All categories as required |
spin99 processes your personal data on the following legal grounds depending on the nature of the processing activity:
spin99 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:
Transactions on spin99 — whether via Touch n Go eWallet, Boost, GrabPay, FPX bank transfer, or USDT TRC20 — are processed through certified payment gateways. spin99 does not store complete payment card numbers or full eWallet authentication credentials on its own servers.
Payment identifiers (such as masked account numbers or transaction reference IDs) are retained for the purposes of transaction record-keeping, withdrawal processing, and regulatory audit trail requirements. These records are retained for the period specified in Section 7 of this Policy.
All payment data transmitted between your device and spin99 is protected by TLS 1.2 or higher encryption.
spin99 retains your personal data for as long as your account remains active, and for a minimum of five (5) years following the closure or deactivation of your account, unless a longer retention period is required by applicable legal or regulatory obligations (including AML record-keeping requirements, which may require retention for up to seven (7) years).
Communications data (support chat logs, emails) is retained for three (3) years from the date of the communication. Technical and usage logs are retained for up to twelve (12) months. Cookie data is retained for periods specified in Section 9.
After the applicable retention period, your personal data is securely deleted or anonymised such that it can no longer be attributed to you as an individual.
spin99 implements technical and organisational security measures appropriate to the sensitivity of the data we process. These include:
While spin99 takes reasonable technical precautions, no internet transmission or electronic storage method is completely secure. We encourage players to use a strong, unique password for their spin99 account and to enable 2FA.
In the event of a data breach that is likely to result in risk to your rights and freedoms, spin99 will notify affected players within a reasonable timeframe in accordance with our notification obligations.
spin99 uses cookies and similar technologies on spin99.asia. Cookies are small text files placed on your device when you visit the platform. We use the following categories of cookies:
You may control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of some platform features. spin99 does not use cookies to serve third-party advertising on spin99.asia.
Registered spin99 players have the following rights in relation to their personal data, subject to applicable legal limitations:
To exercise any of these rights, contact spin99 at [email protected] with your full name, account username, and a clear description of your request. We will respond within 30 days. Identity verification may be required before processing certain requests.
spin99 does not knowingly collect personal data from any person under the age of 21. The platform is strictly restricted to players aged 21 and above. If spin99 becomes aware that personal data of a person under 21 has been collected, such data will be deleted immediately and the account closed.
If you believe that a person under 21 has registered an account on spin99, please contact us immediately at [email protected].
spin99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Material updates will be communicated to registered players via the email address on their account, with at least 7 days' notice before the revised policy takes effect.
The current version of this Privacy Policy is always available at spin99.asia/privacy-policy, with the effective date noted at the top of the document. Continued use of the spin99 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by spin99, please contact our data team:
spin99 Data & Privacy
Email: [email protected] (plain text — not a clickable link)
Response time: Within 30 business days for formal data subject requests.
If you are not satisfied with spin99's response to your data request, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
These are the concrete technical and operational measures in place every time you access spin99.
All data transmitted between your device and spin99 is encrypted via TLS 1.2+. Your login credentials, payment details, and personal information travel over encrypted connections at all times.
spin99 never stores your password in plaintext. Passwords are stored as one-way cryptographic hashes. Even spin99 staff cannot read your password — only you know it.
spin99 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your data is used solely for the purposes described in this Privacy Policy.
Full payment card numbers and eWallet credentials are never stored on spin99 servers. Transactions are processed through certified payment gateways with their own PCI-equivalent controls.
Internal access to personal data is restricted on a strict need-to-know basis. Staff authorisation levels are reviewed regularly. Data access is logged and auditable.
Access, rectification, erasure, portability, and objection rights are all supported. Submit a data request to [email protected] and receive a response within 30 business days.
spin99 is Malaysia's leading online betting platform — built for MYR, powered by local payment methods, and operated with the data protection practices described in this Policy. 21+ only.