Privacy Policy

1.Introduction

This Privacy Policy ("Policy") is issued by 99spin ("Company", "We", "Us", "Our") and applies to all personal data collected through the website at https://99spin.cam and any associated services, mobile-optimised interfaces, live chat tools, and communication channels operated by the Company (collectively, the "Platform").

We are committed to handling your personal information responsibly and in compliance with applicable data protection principles. This Policy sets out in plain terms what data we collect from you as a User ("you", "your", "Member", "Player"), why we collect it, how we process and store it, who we may share it with, and what rights you have in relation to that data.

By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which are incorporated by reference.

2.Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means 99spin, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of 99spin, subject to contractual data protection obligations.
• "KYC Data" means identity verification documents and information submitted as part of the Know Your Customer process, including government-issued identification, proof of address, and selfie verification where required.
• "Cookies" means small text files placed on your device by the Platform to collect and store information about your browsing activity and preferences.
• "User" means any individual who accesses, registers on, or interacts with the 99spin Platform.

3.Data We Collect

We collect Personal Data from you in several ways: directly when you provide it to us during registration or account use, automatically through your interaction with the Platform, and occasionally from third-party sources such as payment processors and identity verification providers.

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless this is strictly required for regulatory compliance purposes, such as verifying a self-exclusion request for responsible gambling reasons.

4.Data Processing & Use

99spin processes your Personal Data only for legitimate, clearly defined purposes. We do not sell your Personal Data to third parties for their own marketing use. The primary purposes for which we process your data are as follows:

• Account Management: To create and administer your 99spin account, verify your identity and age (21+ requirement), and maintain accurate account records.
• Service Delivery: To facilitate your use of the Platform, including processing deposits and withdrawals via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank), crediting winnings, and resolving gaming disputes.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling regulations, including KYC verification and transaction monitoring.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other forms of platform misuse.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance through our live chat and email support channels.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling, apply self-exclusion or deposit limits where requested, and ensure compliance with our responsible gambling commitments.
• Platform Improvement: To analyse usage patterns, improve user experience, test new features, and optimise platform performance.
• Marketing Communications: Where you have given express consent, to send you information about promotions, bonuses, and events relevant to your preferences — including seasonal offers tied to Malaysian occasions.

5.Legal Basis for Processing

We process your Personal Data only where we have a lawful basis for doing so. The legal bases on which 99spin relies are:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — such as operating your account and processing transactions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations and responsible gambling mandates.
• Legitimate Interests: Processing carried out in furtherance of our legitimate business interests — including fraud prevention, platform security, and analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for purposes that require your express opt-in, such as receiving marketing communications. You may withdraw your consent at any time by updating your account communication preferences or contacting support.

6.Data Sharing & Disclosure

99spin does not sell, rent, or trade your Personal Data to third parties. We may, however, share your data with selected third parties in the following limited circumstances:

• Payment Processors: We share transaction data with payment service providers including Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow and FPX network participants, and cryptocurrency exchange processors, strictly for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: We engage third-party KYC providers to verify identity documents and cross-check sanctions and politically exposed person (PEP) databases as required by applicable AML regulations.
• Game Content Providers: Game providers whose software is integrated into the 99spin platform may receive certain technical and session data necessary to deliver game functionality and resolve disputes.
• Analytics and Security Vendors: We use analytics and fraud-detection service providers who may process Technical and Usage Data on our behalf to help improve the platform and detect misuse.
• Legal Authorities: We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of 99spin or its users.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving 99spin, your Personal Data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

All third-party Data Processors engaged by 99spin are bound by contractual data processing agreements that require them to handle your data only for specified purposes and in accordance with applicable data protection standards.

7.Cookies & Tracking

The 99spin Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. By continuing to use the Platform, you consent to our use of cookies as described in this section.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential to the operation of the Platform and cannot be disabled. They enable core functions such as user authentication, session management, and security features.
• Functional Cookies: These cookies allow the Platform to remember your preferences — such as language settings, preferred payment methods, and responsible gambling tool configurations — to provide a personalised experience.
• Analytics Cookies: These cookies collect aggregated information about how Users interact with the Platform, including pages visited, time on site, and navigation paths. This data is used to improve platform performance and user experience.
• Security and Fraud Prevention Cookies: These cookies help us identify unusual access patterns, detect bot activity, and protect accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair platform functionality and prevent you from accessing certain features of the Service.

8.Data Retention

We retain your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying applicable legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your account's active status on the Platform, plus a minimum post-closure period as required by applicable regulations.
• Financial and Transaction Records: Retained for a minimum of seven (7) years following the relevant transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC Documentation: Retained for the period required under applicable AML and identity verification regulations following account closure.
• Support and Communication Records: Retained for up to three (3) years from the date of last interaction, for the purpose of resolving future disputes and improving service quality.
• Marketing Preference Data: Retained until you withdraw consent or request erasure, subject to overriding legal retention obligations.

9.Data Security

99spin implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 99spin Platform is encrypted using industry-standard SSL/TLS protocols.
• Secure Data Storage: Personal Data and financial records are stored on encrypted, access-controlled servers with restricted personnel access on a strictly need-to-know basis.
• Multi-Factor Authentication: Account access controls include optional multi-factor authentication to protect against credential compromise.
• Fraud Detection Systems: Automated monitoring systems flag unusual login patterns, transaction anomalies, and access attempts from unrecognised devices or locations.
• Regular Security Audits: Our platform undergoes periodic internal and third-party security reviews to identify and remediate vulnerabilities.

While we take every reasonable precaution to protect your data, no method of internet transmission or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10.Your Rights

Subject to applicable law, you have the following rights with respect to your Personal Data held by 99spin. To exercise any of these rights, please contact us at [email protected].

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and to receive information about how it is being processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data held in your account profile.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your Personal Data. Note that this right may be limited where we are required by law to retain specific records (e.g., AML/KYC data).
• Right to Restriction of Processing: You have the right to request that we limit processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing on legitimate interest grounds.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data where we rely on legitimate interests as our legal basis, and to opt out of marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time through your account settings or by contacting support.

11.Minors & Age Verification

The 99spin Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory part of our account registration and KYC process.

If we become aware that Personal Data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered on the Platform, please contact us at [email protected] immediately.

We encourage parents and guardians in Malaysia to make use of parental control software and to monitor the online activities of minors in their care. Please refer to our Responsible Gambling page for further information on protection tools available on the Platform.

12.Third-Party Services

The 99spin Platform may contain references to or integrations with third-party services, including payment processors, game content providers, identity verification services, and security vendors. This Privacy Policy applies solely to data collected and processed by 99spin directly.

Third-party services integrated into the Platform — such as payment networks, live dealer software providers, and KYC verification tools — operate under their own independent privacy policies and data handling practices. We recommend reviewing the relevant privacy policies of any third-party services you interact with in connection with your use of 99spin.

99spin is not responsible for the privacy practices or content of third-party services and expressly disclaims liability for any data processing carried out by third parties beyond the scope of our contractual data processing agreements with them.

13.Policy Amendments

99spin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we handle your Personal Data, we will endeavour to provide advance notice through the Platform's notification system or by email to your registered address, where practicable.

Your continued use of the Platform following the posting of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the amended Policy, you must cease using the Platform and may request account closure through our support team.

14.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your Personal Data, please reach out to the 99spin Data Protection team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform. Suitable for account-specific queries and general privacy questions. Average response time under 2 minutes.
• Email: [email protected] — for formal data rights requests, erasure requests, or detailed privacy enquiries. We target a response within 24 hours for privacy-related emails.

When submitting a data rights request, please include sufficient identifying information to allow us to locate your account and verify your identity. We will handle your request confidentially and in accordance with this Policy.

For concerns about self-exclusion, deposit limit management, or other responsible gambling-related data matters, please refer directly to our Responsible Gambling page.