spin321 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by spin321 ("spin321", "we", "us" or "our") and applies to all personal data collected through the spin321 platform accessible at spin321.cam, including all associated account features, payment services, support channels and any promotional activities.

spin321 is committed to protecting the privacy of its users, particularly those based in Malaysia. This Policy has been drafted to be transparent, specific and readable, in accordance with our values of clarity and user respect. By registering for or using a spin321 account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

If you do not agree with any part of this Policy, you should discontinue use of the platform and may contact us to request closure of your account.

2. Definitions

The following terms carry the meanings assigned below throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" refers to spin321, which determines the purposes and means of Processing Personal Data.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in this context, you, the user.
• "KYC" means Know Your Customer, referring to identity and age verification procedures.
• "Third Party" means any natural or legal person other than spin321 and the Data Subject.
• "Cookies" means small data files stored on your device by the platform for purposes described in Section 7.

3. Data We Collect

spin321 may collect and process the following categories of Personal Data, depending on how you interact with the platform:

spin321 does not intentionally collect Sensitive Personal Data (such as racial or ethnic origin, health data or biometric data) unless specifically required for identity verification in exceptional circumstances and with your explicit consent.

4. How We Collect Data

spin321 collects Personal Data through the following means:

• Direct submission: When you register an account, complete identity verification, make a deposit, request a withdrawal, contact support or respond to a promotion.
• Automated technical collection: When you browse or interact with the platform, our servers and analytics tools may record technical and usage data automatically.
• Payment providers: When you transact using services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank or other supported payment methods, relevant transaction metadata may be shared with spin321 by those providers.
• Third-party verification services: KYC and anti-fraud providers may supply identity confirmation signals or risk scores associated with your submitted information.

5. Data Processing and Legal Basis

spin321 processes Personal Data on one or more of the following legal bases:

5.1 Contractual Necessity

Processing is necessary to perform the contract between spin321 and you — specifically, to operate your account, accept deposits, process withdrawals, deliver game access and provide customer support.

5.2 Legal Obligation

spin321 is subject to applicable legal and regulatory requirements including anti-money laundering obligations, age verification mandates and data retention laws. Processing in compliance with these obligations is mandatory and may not be refused by the Data Subject without affecting account functionality.

5.3 Legitimate Interests

spin321 may process Personal Data where necessary to pursue legitimate interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.

5.4 Consent

Where spin321 seeks to process Personal Data for purposes beyond those listed above — such as direct marketing communications — we will request your explicit, freely given and revocable consent. You may withdraw consent at any time by contacting support.

6. Payment Data

spin321 facilitates payment processing through trusted third-party payment providers. Full payment credentials, such as card numbers, bank account details or e-wallet login credentials, are not stored directly by spin321. Instead, spin321 retains only the transaction reference, amount in MYR, date, payment method label and outcome status.

Where you use a Malaysian payment service — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX or a supported bank — the relevant provider's own privacy policy governs data collected and processed on their side of the transaction. spin321 encourages you to review those policies independently.

7. Cookies and Tracking Technologies

spin321 uses cookies and similar technologies to support essential platform functionality, maintain session security and gather anonymised usage analytics. The main categories are:

• Strictly necessary cookies: Required to keep you logged in, manage session tokens and protect against cross-site request forgery. These cannot be disabled without disrupting core functionality.
• Analytics cookies: Used to understand aggregate usage patterns, identify navigation bottlenecks and improve platform performance. Data is collected in aggregated, non-personally identifiable form where possible.
• Preference cookies: Store non-sensitive user preferences such as language or display settings between sessions.

You may adjust your browser settings to block or delete cookies. Disabling non-essential cookies does not affect your ability to use core account features, though some platform optimisations may not function as intended.

8. Data Sharing and Disclosure

spin321 does not sell Personal Data to Third Parties. Disclosure occurs only in the following limited circumstances:

8.1 Service Providers

spin321 may share necessary data with contracted service providers who assist with payment processing, identity verification, IT infrastructure, fraud detection and customer support. All such providers are required to process data only on spin321's instructions and to maintain appropriate security standards.

8.2 Legal Compliance

spin321 may disclose Personal Data where required by law, court order, regulatory direction or governmental authority. spin321 will notify affected users of such disclosure requests where legally permitted to do so.

8.3 Business Transfers

In the event of a merger, acquisition or transfer of spin321's business operations, Personal Data held at that time may form part of the transferred assets, subject to equivalent privacy protections continuing to apply.

8.4 Protection of Rights

Where spin321 reasonably believes disclosure is necessary to prevent fraud, enforce these Terms, protect the safety of users or defend legal claims, limited Personal Data disclosure may occur to the extent proportionate to the identified risk.

9. Data Retention

spin321 retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. General retention guidelines are as follows:

• Account and identity data: Retained for the duration of the active account and for a further period following closure as required by applicable anti-money laundering regulations.
• Transaction records: Retained in accordance with applicable financial record-keeping requirements.
• Support communications: Retained for a reasonable period to support dispute resolution and service quality review.
• Technical and usage data: Retained in aggregated or anonymised form for analytics purposes after the individual identification period expires.

When Personal Data is no longer required, spin321 will delete or anonymise it using procedures appropriate to the sensitivity of the data involved.

10. User Rights

Subject to applicable law and verification of your identity, you may exercise the following rights with respect to your Personal Data held by spin321:

10.1 Right of Access

You may request confirmation of whether spin321 holds Personal Data about you and, if so, a copy of that data along with information about its processing purposes, categories and any recipients.

10.2 Right to Rectification

You may request correction of inaccurate or incomplete Personal Data. Where technically feasible, you may also update certain account information directly through your account settings.

10.3 Right to Erasure

You may request deletion of Personal Data where it is no longer necessary for its original purpose, where consent has been withdrawn, or where processing was unlawful. This right is subject to override where retention is required by applicable law or for the establishment, exercise or defence of legal claims.

10.4 Right to Restrict Processing

You may request that spin321 restrict processing of your Personal Data in certain circumstances, such as where you contest accuracy or object to processing on grounds of legitimate interest.

10.5 Right to Data Portability

Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your Personal Data be provided in a structured, commonly used and machine-readable format.

10.6 Right to Object

You may object at any time to processing of your Personal Data for direct marketing purposes, and spin321 will cease such processing on receipt of a valid objection. You may also object to processing based on legitimate interests, subject to spin321's assessment of overriding grounds.

11. Data Security

spin321 implements technical and organisational measures proportionate to the risk associated with the Personal Data it holds. These measures include but are not limited to HTTPS encryption for all data in transit, access controls limiting data visibility to authorised personnel, regular security reviews and procedures for detecting and responding to potential data breaches.

You also play an important role in protecting your own data. Keep your account password secure and unique. Never disclose your password, one-time verification codes or wallet recovery phrases to any person, including spin321 support staff. If you suspect unauthorised access to your account, contact spin321 support immediately.

12. Minors

spin321 is strictly intended for users aged 21 and above. spin321 does not knowingly collect Personal Data from individuals below this age. If spin321 becomes aware that Personal Data belonging to an underage individual has been collected, the account will be closed and associated data deleted in accordance with applicable requirements.

If you believe that a minor has registered a spin321 account, please notify us at the contact address provided in Section 14.

13. Changes to This Privacy Policy

spin321 reserves the right to update or revise this Privacy Policy at any time. Where material changes are made, spin321 will provide reasonable notice through the platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this Policy.

Continued use of spin321 following the publication of a revised Policy constitutes acceptance of the updated terms. If you disagree with the changes, you should stop using the platform and contact spin321 to discuss your account closure options.

14. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or spin321's data processing practices, please contact us using the details below:

Please do not include sensitive information such as full payment credentials or identity document images in email correspondence unless you have been specifically directed to do so by a verified spin321 support representative through a secure channel.