Privacy Policy Spins – Our Commitment to Protecting Malaysian Players' Data

Spins (operating under the domain spins.express) is fully committed to protecting the privacy of all users on our platform. This Privacy Policy ("Policy") sets out in detail how Spins collects, uses, stores, processes, and protects your personal data when you use any part of our platform — whether for Sports Betting, Live Casino, online poker, or simply browsing our website.

This Policy is guided by the principles of responsible data protection and complies with applicable legal requirements in Malaysia. We wrote this Policy in plain language so every Malaysian player can understand it clearly — not in dense, confusing legal jargon.

By registering an account with Spins, making deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, or using any of our services, you agree to the data collection and usage practices described in this Policy. If you do not agree with this Policy, you should not use the Spins platform.

Spins collects various categories of personal data depending on how you interact with the platform. Below is a summary of the data categories we may collect:

Spins does not collect sensitive personal data such as medical information, political views, or religious beliefs unless specifically required to fulfil responsible gambling obligations (such as in cases of self-exclusion related to health concerns).

Spins collects your personal data through several key channels:

• Directly from You: When you register an account, complete your profile, reach out to customer support via live chat or email, engage with promotions, or fill in any forms within the platform.
• During Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX Maybank2u/CIMB Clicks, or when you submit a withdrawal request for your winnings.
• Automatically During Platform Use: Technical data such as IP addresses, device types, and browser information is collected automatically when you browse or use the Spins platform. This includes betting history, activity logs, and usage patterns for security and service improvement purposes.
• Via Cookies and Tracking Technologies: Spins uses cookies and similar technologies to remember your preferences, maintain your login session, analyse traffic, and improve the overall user experience.
• Through the KYC Verification Process: When you submit identity verification documents such as a copy of your MyKad or passport during the KYC process, which is required for withdrawals exceeding certain limits.

Spins uses collected personal data only for legitimate purposes that are directly related to delivering platform services to you:

• Account Setup and Management: Creating and managing your Spins account, verifying your identity at login, and keeping your account secure at all times.
• Financial Transaction Processing: Processing deposits you make in Malaysian Ringgit (RM) through various e-wallet and FPX methods, as well as handling your withdrawal of winnings promptly and securely.
• Provision of Betting Services: Allows you to place bets on Malaysia Super League and EPL football matches, BWF badminton, live casino, poker, and a wide range of other sports available on Spins.
• Legal and Regulatory Compliance: Complying with applicable Malaysian legal requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements and reporting to authorities where mandated.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multiple account usage, bonus abuse, and other suspicious behaviour that could compromise the security of the platform and other players.
• Customer Support: Provides 24/7 support in Bahasa Malaysia and resolves any enquiries, complaints, or disputes you raise with the Spins team.
• Service Improvement: Analysing aggregated usage patterns to improve platform functionality, enhance the user experience and develop new features relevant to Malaysian players.
• Marketing Communications (with Consent): Sending information about promotions, bonuses, VIP offers, and Spins news — only to players who have consented to receive marketing communications. You may withdraw this consent at any time.

Spins does not sell your personal data to third parties. However, under certain limited circumstances, Spins may share your data with the following parties:

• Payment Service Providers: Payment processing companies that facilitate deposit and withdrawal transactions in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX. These providers receive only the data necessary to process the relevant transaction and are bound by strict confidentiality agreements.
• Platform Technology Providers: Technology companies that provide the infrastructure, software and services enabling the Spins platform to operate. All such providers are subject to data processing agreements obligating them to protect your data in accordance with the standards set by Spins.
• Relevant Authorities: Spins will disclose personal data to Malaysian authorities or law enforcement bodies when required by law, court order, or a directive from a competent authority. This includes investigations relating to fraud, money laundering, or other financial crimes.
• Auditors and Professional Advisors: Lawyers, accountants, auditors, or consultants providing professional services to Spins may need to access certain data in the course of their work. All such parties are bound by strict confidentiality obligations.

In all instances of data sharing, Spins discloses only the minimum data necessary for the relevant purpose and ensures that the receiving party has adequate security measures in place to protect that data.

Spins implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and Spins servers is encrypted using 256-bit TLS/SSL technology — the same security standard used by leading banking institutions in Malaysia.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of security when logging into their Spins account, reducing the risk of unauthorised access even in the event of a compromised password.
• Internal Access Controls: Only Spins staff who require access to specific data to carry out their duties are granted that access, and all access is logged and continuously monitored.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity, unauthorised access attempts or any other security threats to the platform and player data.
• Regular Security Audits: Spins conducts regular independent security audits and penetration testing to identify and remediate vulnerabilities in our systems before they can be exploited.
• Secure Data Backups: Player data is regularly backed up to a secure, encrypted storage location to ensure service continuity and data recovery in the event of an emergency.

Spins retains your personal data only for as long as necessary for the purposes it was collected, or as required under applicable Malaysian law:

• Active Account Data: For as long as your account remains active or as long as necessary to provide services to you.
• Financial Transaction Data: Transaction records in MYR are retained for a minimum of 7 years from the transaction date, in line with applicable accounting and anti-money laundering legal requirements.
• KYC Verification Data: Identity verification documents are retained for the period required by law, typically 5 years after account closure.
• Activity Logs: Technical and platform activity logs are retained for 12 to 24 months for security and dispute-resolution purposes.
• Communication Records: Customer support conversation records are retained for 2 years for quality control purposes and in the event of any disputes that may arise.

Once the relevant retention period has lapsed and there is no legal basis to retain the data further, your data will be securely deleted or anonymised so it can no longer be linked back to you personally.

The Spins platform uses cookies and similar tracking technologies to enhance the user experience and enable certain features. The types of cookies used are as follows:

• Required Session Cookies: These cookies are required for core platform functions such as maintaining your login status during an active session, saving your bet stake in the betting slip, and enabling smooth navigation between sections of the platform. Without them, the platform cannot function properly.
• Preference Cookies: These cookies remember your preferences and settings — such as your interface language, favourite sports display, and odds preferences — to provide a more personalised experience on your next visit to the Spins platform.
• Analytics Cookies: Spins uses analytics tools to understand how players interact with the platform — which sections are visited most frequently, how much time is spent in each area, and general navigation flows. This data is used in aggregated, non-identifiable form to improve the platform's design and functionality.
• Security Cookies: These cookies help Spins detect unusual access patterns, suspicious login attempts, and potential fraud, protecting both your account and the overall security of the platform.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the Spins platform. For more detailed cookie management options, please refer to your browser settings.

As a Spins player, you have the following rights regarding the personal data we hold about you:

To exercise any of the rights above, please send us a written request by email at support@spins.express with the subject line "Privacy Rights Request" along with your account details. We will process your request within 30 days of receipt, subject to the necessary identity verification.

Please note that some of these rights may be limited in certain circumstances — for example, we cannot delete financial transaction records that must be retained for legal compliance purposes, or data required to resolve an ongoing dispute.

The Spins platform is intended solely for individuals aged 18 and above. Spins does not knowingly collect or process personal data from anyone under the age of 18.

• The Spins account registration process is designed to ensure that only individuals aged 18 and above can successfully register, including date-of-birth verification at sign-up and a KYC process requiring identity document verification.
• Should Spins discover that personal data belonging to an individual under the age of 18 has been collected, the account in question will be closed immediately, all collected data will be securely deleted, and any balance or winnings will be deemed void.
• Parents or guardians who suspect their child may have accessed the Spins platform are urged to contact us immediately at support@spins.express so that appropriate action can be taken without delay.

The Spins platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the Spins platform itself and does not cover the privacy practices of any third-party websites or services you may access via links from our platform.

Spins is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit, especially before submitting any personal information to them. Accessing and using third-party websites is entirely at your own discretion and risk.

Spins reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, updates to our services, or changes in applicable laws and regulations.

• Any material changes to this Policy will be communicated to players via prominent notifications within the Spins platform and/or by email to the address registered on your account.
• At least 14 days' notice will be given before changes take effect under normal circumstances, unless a change is required urgently for security or pressing legal compliance reasons.
• The "Updated" date at the top of this Policy will always reflect the date of the most recent revision that introduced substantive changes.
• Continued use of the Spins platform after an amendment's effective date constitutes acceptance of the updated Policy.
• If you do not agree with any changes, you have the right to close your account and stop using the platform before those changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Spins handles your personal data, please reach us through the following channels:

• Email: support@spins.express — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your email is routed to the right team promptly.
• Live Chat: Click the chat icon within the Spins platform to connect directly with our support agents in Bahasa Melayu, available 24 hours a day, 7 days a week.
• FAQ Page: Many frequently asked questions about privacy and data security are answered on the Frequently Asked Questions us.

We are committed to responding to all privacy-related enquiries within 48 business hours. For formal data rights requests, we will process and respond within 30 days of receiving a complete request.