At SpinCity, your privacy is more than a legal obligation — it is a core value we uphold. This document transparently explains how we collect, use, store, and protect your personal data as a player on our platform. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable international data protection standards.
Spincity takes data security infrastructure seriously. Here are six key ways we ensure your personal information remains protected at all times.
All data transmitted between your device and spincity's servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions. No sensitive information can be intercepted by unauthorized parties during transmission.
Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and continuous 24/7 monitoring. Only staff with specific authorisation may access player data, and every access is logged for security audit purposes.
Spincity enforces a least privilege principle — each staff member can only access the data required for their specific role. Two-factor authentication (2FA) is mandatory for all internal access to systems that store player data.
Spincity does not sell, rent, or share players' personal data with advertisers, data brokers, or any third party for commercial purposes. Your data belongs to you — we only use it for purposes you have consented to.
In the event of any security incident involving player data, spincity is committed to notifying affected players within 72 hours of the incident being identified, in line with international best practices and regulatory requirements.
Spincity operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal Data Protection Officer (DPO) responsible for ensuring all data processing practices comply with the law.
Spincity collects your personal data only when it is genuinely necessary to provide a quality, secure, and legally compliant service. We do not collect data excessively or without a clear purpose.
This is information you provided directly when registering or using the spincity platform:
When you browse the SpinCity website or use the app, our systems automatically record the following technical information:
Data Collection Principles: spincity adheres to a data minimization principle — we only collect information that is genuinely necessary for the stated purpose. Every category of data collected has a clear justification that is documented internally.
| Data Category | Example | Primary Purpose |
|---|---|---|
| Identity | Name, IC, date of birth | Identity Verification & KYC |
| Contact | Email, phone number | Communication & Account Security |
| Financial | Bank accounts, e-wallets | Transaction Processing |
| Technical | IP address, device type | Security & Fraud Prevention |
| Behavioral | Gaming activity, session logs | User Experience Improvement |
Every piece of data we collect is used for a specific and legitimate purpose. spincity does not use your data for purposes unrelated to the provision of platform services without obtaining your additional consent.
Marketing Preferences: You may opt out of marketing communications at any time via your account settings or by contacting our customer support team. This choice will not affect the core services you receive.
Spincity does not sell, rent, or disclose your personal data to external parties for commercial purposes. However, there are certain situations where data sharing is necessary and legally permitted.
Spincity works with carefully selected third-party service providers to support platform operations. These providers may only access the data they need for their specific tasks, and they are bound by strict confidentiality agreements:
Spincity may disclose your personal data to government authorities or law enforcement bodies when required by Malaysian law or a valid court order. In such situations, we will only disclose the data specifically requested and nothing more.
Our Commitment: We do not share your data with advertising networks, data brokers, or social media platforms for ad targeting purposes. All third-party agreements include data protection clauses binding them not to use your data beyond the agreed scope.
Spincity uses cookies and similar tracking technologies to enhance your experience on our platform. Below is a detailed explanation of the types of cookies we use and their purposes.
You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the SpinCity platform. Essential cookies cannot be disabled as they are required for session security and basic platform operations.
Spincity retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. In general:
Spincity implements multiple layers of technical and organizational security controls to protect your data from unauthorized access, loss, destruction, or accidental disclosure:
Two-Factor Authentication: spincity offers two-factor authentication (2FA) for all player accounts. We strongly recommend enabling this additional security feature through your account settings for an extra layer of protection.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that SpinCity is fully committed to respecting. Your key rights are as follows:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
If your data is inaccurate or out of date, you have the right to request a correction and we will update it promptly.
You may request deletion of your personal data, subject to SpinCity's legal obligations to retain certain records.
You may object to the processing of your data for direct marketing purposes at any time, with no penalty.
You may request your data in a machine-readable format for transfer to another service provider if desired.
You may request that processing of your data be restricted in certain situations while we review your request.
How to Submit a Request: To exercise any of the above rights, contact spincity's Data Protection Officer at [email protected] or via Live Chat on the platform. We will verify your identity before processing any data-related request.
Spincity takes child protection very seriously. Our platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.
If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete the data and close the account in question. Parents or guardians who are concerned that their child may have registered on spincity should contact us immediately.
Spincity performs age verification during registration and carries out KYC checks to confirm that all players meet the required minimum age.
As a globally operating online platform, spincity may transfer your personal data to servers located outside Malaysia for storage, processing, or backup purposes. Such transfers are carried out only when necessary and are always protected by adequate security measures.
Spincity reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. The "Updated" date at the top of this page will always reflect the latest version.
For significant changes that affect your rights or how we process your data, spincity will provide at least 14 days' advance notice before the changes take effect, via registered email or in-platform notification. Continued use of spincity's services after the effective date of the changes will be considered acceptance of the updated Privacy Policy.
Advisory: We encourage you to review this page periodically. If you disagree with any changes to our Privacy Policy, you have the right to close your account and request deletion of your personal data in accordance with the procedure outlined in Section 6.
If you have any questions, concerns, or wish to exercise your personal data rights, you may contact spincity's Data Protection Officer (DPO) through the following channels:
We aim to respond to all privacy-related enquiries within 5 business days. For more complex requests such as data access or deletion, the full process may take up to 21 business days in accordance with PDPA 2010.
If you are not satisfied with our response, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, the regulatory body responsible for enforcing the PDPA in Malaysia.
Your data privacy and security are spincity's top priority. Register an account today and enjoy a safe, fair, and transparent online casino experience — backed by internationally recognized data protection standards.