Your privacy is not a footnote at SpinCity β it is a core platform principle. This Privacy Policy explains exactly what personal data we collect, why collect it, how we protect it, and what rights you hold over your information as a player on our Malaysia-focused platform.
This Privacy Policy applies to all personal data collected through your use of the SpinCity Platform, including data collected during account registration, deposit and withdrawal transactions, customer support interactions, participation in promotions, and general browsing activity on the Platform.
This Privacy Policy applies to all personal data collected through your use of the SpinCity Platform, including data collected during account registration, deposit and withdrawal transactions, customer support interactions, participation in promotions, and general browsing activity on the Platform.
This Privacy Policy should be read in conjunction with SpinCity's Terms & Conditions and Responsible Gambling Policy. By registering an account or using the Platform, you confirm your understanding of and consent to the data practices described herein.
If you have questions about any aspect of this Privacy Policy or wish to exercise your data rights, please contact SpinCity's Data Protection contact at [email protected] (plain text β not a clickable link). We aim to respond to all privacy queries within 14 business days.
Throughout this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a living individual, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion. |
| "Data Controller" | SpinCity, as the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | Third-party service providers who process personal data on SpinCity's behalf and under SpinCity's instructions. |
| "KYC Data" | Identity and verification documents collected to comply with Know Your Customer obligations (e.g., MyKad copy, passport proof of address). |
| "Sensitive Data" | Categories of personal data requiring heightened protection, such as financial account details, identification document numbers, and self-exclusion status. |
| "Cookies" | Small data files stored on your device by your browser that allow the Platform to remember preferences and analyse usage patterns. |
SpinCity collects personal data through the following channels and categories:
When you create a SpinCity account, we collect: your full legal name, date of birth, gender, Malaysian residential address (including postcode and state), mobile phone number, and email address. This data is necessary to establish and manage your Account.
To comply with applicable anti-money laundering and age verification obligations, SpinCity may collect copies of: your Malaysian MyKad, passport, or driver's licence; a recent proof of residential address (e.g., TNB or Syabas utility bill, Maybank or CIMB bank statement dated within 90 days); and, where applicable, proof of ownership of your registered payment method.
SpinCity records all deposit and withdrawal transactions on the Platform, including: transaction amounts in MYR (or cryptocurrency equivalent); payment method used (e.g., DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, BTC, USDT, ETH); timestamps; and reference numbers. SpinCity does not store full payment card numbers or banking passwords.
SpinCity logs your gameplay and betting activity, including: game sessions and durations, wagers placed, winnings and losses, bonus claims and rollover progress, sports betting selections (e.g., EPL fixtures, Liga Super Malaysia markets, UFC bouts), and VIP tier status.
When you access the Platform, we automatically collect: IP address, device type and operating system, browser type and version, screen resolution, session start and end times, pages visited, and referring URL. This data helps us maintain Platform performance and security.
When you contact SpinCity's support team via live chat or email, we retain a record of the communication, including your queries, the agent's responses, and any attachments or documentation submitted in connection with your request.
Data Minimisation Principle: SpinCity applies a data minimisation approach throughout. We collect only the personal data that is genuinely necessary for the stated purpose β no more. If we no longer need a category of data for its original purpose and no legal obligation requires us to retain it, we delete or anonymise it.
SpinCity uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC data |
| Age and identity verification (21+ compliance) | KYC data, date of birth |
| Processing deposits and withdrawals | Financial transaction data, KYC data |
| Platform security and fraud prevention | Technical data, transaction data, gaming activity data |
| Anti-money laundering compliance | KYC data, transaction data |
| Customer support and dispute resolution | Support data, account data |
| Responsible gambling monitoring | Gaming activity data, self-exclusion status |
| Platform performance and improvement | Technical and device data, usage analytics |
| Bonus and promotion administration | Account data, gaming activity data |
| Regulatory reporting (where required) | KYC data, transaction data |
SpinCity does not use your personal data for unsolicited marketing or advertising without your explicit consent. Where you have opted in to receive promotional communications (e.g., bonus alerts, Platform news), you may withdraw that consent at any time by contacting support.
SpinCity processes your personal data one or more of the following legal bases:
SpinCity does not sell, rent, or trade your personal data to third parties for their commercial purposes. We share personal data only in the following limited and necessary circumstances:
SpinCity engages a limited number of third-party service providers who process personal data on our behalf, under binding contractual obligations that require them to maintain appropriate data protection standards. These include: payment processing infrastructure providers (supporting DuitNow, FPX, e-wallet integrations, and cryptocurrency settlement); KYC and identity verification service providers; cloud hosting and data storage providers; customer support platform providers; and cybersecurity and fraud detection services.
SpinCity will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. SpinCity will, where legally permitted, provide reasonable notice to affected individuals of such disclosures.
In the event of a merger, acquisition, or sale of SpinCity's business or substantially all of its assets, personal data may be transferred to the successor entity as part of the transaction. SpinCity will provide notice of any such transfer and ensure the recipient commits to privacy standards at least equivalent to those in this Policy.
No Unauthorised Disclosure: SpinCity will never disclose your personal data to unauthorised third parties, including advertisers, data brokers, or unrelated commercial entities. All third-party processors are bound by contractual data protection obligations consistent with this Policy.
SpinCity facilitates MYR-denominated transactions via a range of Malaysian payment systems, including DuitNow (Bank Negara's instant transfer infrastructure), FPX (Financial Process Exchange), Touch 'n Go eWallet, Boost, GrabPay, and the online banking portals of Maybank, CIMB, Public Bank, and Hong Leong Bank. SpinCity also processes cryptocurrency deposits in BTC, ETH, USDT (TRC-20), and LTC.
Payment data transmitted through these channels is processed under the security protocols of the respective payment service providers. SpinCity retains transaction records (amounts, timestamps, payment method references) for accounting, AML compliance, and dispute resolution purposes. SpinCity does not store full online banking credentials, e-wallet passwords, or private cryptocurrency keys.
All payment data transmissions between your device and SpinCity's servers are protected by TLS 1.3 encryption. SpinCity's payment infrastructure undergoes regular third-party security assessments to verify the integrity of data handling at all transaction processing stages.
SpinCity uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are as follows:
You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the SpinCity Platform. SpinCity does not use third-party advertising cookies or behavioural tracking cookies for external advertising purposes.
SpinCity retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & registration data | Duration of account + 5 years post-closure | Regulatory / AML obligation |
| KYC documents | 5 years from account closure or last transaction | Legal / AML compliance |
| Financial transaction records | 7 years from transaction date | Accounting & AML legal requirement |
| Gaming & betting activity logs | 3 years from session date | Responsible gambling monitoring, dispute resolution |
| Customer support records | 3 years from resolution date | Dispute resolution, quality assurance |
| Technical / device logs | 90 days (rolling) | Security monitoring, fraud detection |
| Marketing consent records | Until consent withdrawn + 1 year | Consent management compliance |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with SpinCity's internal data disposal procedures.
SpinCity implements a multi-layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
While SpinCity takes all reasonable technical and organisational measures to secure your data, no system is entirely immune to risk. You can strengthen your own Account security by using a unique, strong password, enabling 2FA, and notifying SpinCity immediately if you suspect any unauthorised access to your Account.
Subject to applicable data protection law and certain legal exceptions, you hold the following rights in respect of your personal data processed by SpinCity:
Request a copy of the personal data SpinCity holds about you, along with information on how it is being used.
Request correction of inaccurate or incomplete personal data held your Account or KYC records.
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
Request that SpinCity limits the use of your data in certain circumstances while a dispute or query is resolved.
Receive a copy of your data in a structured, commonly used, machine-readable format where technically feasible.
Object to processing based on legitimate interests, including any direct marketing communications you have opted into.
To exercise any of the above rights, please submit a written request to SpinCity's support team at [email protected] (plain text β not a clickable link). SpinCity will acknowledge all data rights requests within 5 business days and respond substantively within 30 calendar days. In complex cases, the response period may be extended to 60 days with notice. SpinCity may request identity verification before processing a data rights request.
The SpinCity Platform is strictly intended for individuals aged21 years and above. SpinCity does not knowingly collect or process personal data belonging to individuals under 21 years of age. Age verification is a mandatory component of the SpinCity KYC process.
If SpinCity discovers or has reasonable grounds to believe that an Account belongs to a person under the age of 21, that Account will be immediately suspended. Any funds held in such an Account will be frozen pending investigation and will not be released until the age verification outcome is determined in accordance with applicable law and SpinCity's internal procedures.
Parents or guardians who believe that a minor may have registered on the SpinCity Platform should contact SpinCity's support team immediately via live chat or at [email protected] (plain text β not a clickable link).
SpinCity's primary data processing infrastructure is located in secure data centres serving the Southeast Asian region. Where personal data is transferred to service providers or systems located outside Malaysia, SpinCity ensures that such transfers are made subject to appropriate contractual safeguards, including standard contractual clauses or equivalent data protection agreements, that provide a level of protection for your personal data consistent with the standards described in this Policy.
SpinCity does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate compensating safeguards. If you have questions about the specific transfer mechanisms applicable to your data, you may request this information by contacting SpinCity's support team.
SpinCity reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Where changes are material β meaning they significantly affect how we process your personal data or the rights available to you β SpinCity will provide advance notice via email to registered Account holders and/or a prominent notice on the Platform at least 14 days before the changes take effect.
The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. SpinCity recommends that you review this Privacy Policy periodically to remain informed of your rights and our current data practices. Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes.
For all privacy-related enquiries, data rights requests, or complaints relating to SpinCity's handling of your personal data, please contact our support team through the following channels:
SpinCity commits to acknowledging all privacy queries within 5 business days and to providing a substantive response within 30 calendar days of receipt. For responsible gambling-related data requests, including self-exclusion records, please also refer to our Responsible Gambling page.
Our Commitment: SpinCity treats every privacy query with the same seriousness as a financial transaction. Your personal data belongs to you β we are simply its custodian. We are committed to being transparent, responsive, and accountable in everything related to how we handle your information.
Six specific ways SpinCity protects your personal data and respects your privacy as a Malaysian player on our Platform.
SpinCity has a strict zero-tolerance policy on selling, renting, or trading your personal data to advertisers, data brokers, or any unrelated third parties. Your data is used solely to operate your Account and comply with our legal obligations.
All personal data in transit is protected by TLS 1.3 encryption, and data at rest is secured with AES-256 encryption. This is the same standard used by leading Malaysian banks like Maybank and CIMB for their online banking platforms.
SpinCity makes it straightforward to access, correct, port, or delete your personal data. Submit a written request to our support team and receive a substantive response within 30 calendar days β in English, Bahasa Malaysia, or Mandarin.
SpinCity does not hold personal data indefinitely. Each data category has a defined maximum retention period β after which it is securely deleted or anonymised. We do not accumulate data beyond what is necessary for our stated purposes.
All third-party service providers with access to your data are bound by contractual data protection obligations. SpinCity maintains a controlled, limited list of authorised processors β not an open sharing arrangement with marketing networks.
In the event of a confirmed data breach affecting your personal data, SpinCity commits to notifying affected individuals and relevant authorities within applicable regulatory timeframes β and to providing clear guidance on any steps you may need to take.
Privacy protection, fast MYR payouts, multilingual support, and 2,800+ games β SpinCity is built on trust at every layer. Join over 500,000 Malaysian players who chose a platform that takes their data and experience seriously. For players aged 21 and above only.
For players aged 21 and above only. Please gamble responsibly. | Responsible Gambling | Terms & Conditions