Quick Navigation
1Data Collected 2Data Usage 3Third-Party Sharing 4Data Security 5Cookies & Tracking 6Your Rights 7Data Storage 8Marketing Communications 9Policy Changes 10Privacy OfficerUpdated:
1 January 2026
Introduction to Spin Slot's Privacy Policy
This Privacy Policy explains how Spin Slot ("we", "platform", "company") collect, process, store, and protect your personal data when you register for and use our services in Malaysia. This policy applies to all users of the spin slot platform, including access via the website and mobile app.
We understand that your trust depends on how we handle the personal information you entrust to us. We take our data protection commitment seriously and have invested in robust security infrastructure to ensure your data remains safe at all times.
Personal Data We Collect
spin slot collects your personal data in two ways: directly when you provide information to us, and automatically through your use of our platform. The following are the categories of data we collect:
| Data Category | Example Information | How It's Collected |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad/passport number, identity document image | Account registration & KYC process |
| Contact Data | Email address, phone number, residential address | Account registration |
| Financial Data | Deposit and withdrawal records, payment methods used (Touch 'n Go, GrabPay, DuitNow, FPX, etc.), transaction history | Financial transactions |
| Gaming Data | Game history, bets, winnings, losses, play sessions | Gaming activity |
| Technical Data | IP address, device type, web browser, operating system, access log data | Automatically during use |
| Communication Data | Customer support conversation records, emails and messages sent to us | Customer support interactions |
Important Note: Spin slot does not store your credit or debit card numbers. All payment information is processed directly through licensed payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX. We only receive a success or failure confirmation for each transaction.
How We Use Your Personal Data
Personal data collected by spin slot used exclusively for the following legitimate purposes. We do not use your data for any other purpose without your explicit consent:
- Account Management: To create, verify, and manage your spin slot account, including the KYC (Know Your Customer) process required under our licensing regulations.
- Transaction Processing: To process your deposits and withdrawals via your preferred Malaysian local payment method, including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX/internet banking.
- Service Delivery: To provide access to all games and features on the spin slot platform, including slots, Live Casino, virtual sports, poker, and the VIP programme.
- Customer Support: To respond to enquiries, resolve complaints, and provide technical assistance in Bahasa Melayu.
- Security & Fraud Prevention: To identify and prevent fraudulent activity, money laundering, multi-account usage and other security threats to the platform and other spin slot players.
- Legal Compliance: To meet the reporting and record-keeping obligations required under Malaysian law, including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
- Platform Enhancements: To analyze aggregated (not individual) usage patterns in order to improve user experience, platform performance, and spin slot game offerings.
- Service Communications: To send you important account-related notices, including transaction confirmations, security alerts and policy updates.
Sharing Data with Third Parties
spin slot does not sell, rent or trade your personal data. However, in the course of our operations, we may share your personal data with the following categories of third parties under specific circumstances:
- Licensed Payment Providers: Data required to process transactions is shared with our licensed payment providers, including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX gateway providers. This sharing is necessary to process your deposits and withdrawals.
- Technical Service Providers: Cloud, hosting and cybersecurity service providers that support spin slot's technical infrastructure. All such providers are bound by strict data processing agreements.
- Game Providers: Required game data is shared with game providers (such as Pragmatic Play, Evolution, PG Soft, and others) to ensure proper game functionality and the resolution of any disputes related to game outcomes.
- Legal Authorities: spin slot will disclose personal data to Malaysian authorities such as the Royal Malaysia Police (PDRM) or Bank Negara Malaysia when required by law or a valid court order.
- Identity Verification Service: Licensed third-party KYC service providers that assist us in verifying player identities and preventing fraud.
In all data-sharing arrangements described above, spin slot ensures that recipients are bound by appropriate data protection agreements and may only use the data for the specified purpose. We do not share more data than is necessary for that purpose.
Security Measures & Data Protection
spin slot has implemented multiple layers of security to protect your personal data against unauthorised access, loss, alteration, or disclosure:
- Data Encryption in Transit: All communications between your device and spin slot's servers are protected by TLS 1.3 with 256-bit SSL encryption — ensuring no third party can read the data being transmitted.
- Stored Data Encryption: Sensitive personal data stored in spin slot's databases is encrypted using AES-256 encryption standards. Even in the event of an unexpected database breach, any stolen data would remain unreadable.
- Strict Access Controls: Access to player personal data at spin slot is restricted to staff who genuinely require it to perform their duties. All access is logged and continuously monitored.
- Two-Factor Authentication (2FA): Spin slot offers two-factor authentication for all member accounts. We strongly encourage all players to enable this feature for an added layer of security.
- 24/7 Security Monitoring: spin slot's infrastructure is continuously monitored by automated threat detection systems and our cybersecurity team to identify and respond to any threats in real time.
- Regular Penetration Testing: Spin slot conducts regular security assessments (penetration testing) by independent security firms to identify and address vulnerabilities before they can be exploited.
Cookies & Tracking Technologies
Platform spin slot uses cookies and similar tracking technologies to enhance your user experience. Below are the types of cookies we use:
- Essential Cookies: Required for core spin slot platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential for the platform to operate.
- Analytics Cookies: Helps us understand how players use the spin slot platform in aggregate – which pages are visited most, where players encounter difficulties, and how to improve the user experience. This data is not used to identify individual players.
- Preference Cookies: Saving your preferences — such as display language, interface theme and game settings — so you don't have to reconfigure them every time you access spin slot.
- Security Cookies: Helps detect suspicious activity such as unusual login attempts or abnormal transaction patterns that may indicate a fraudulent attempt on your spin slot account.
You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect the functionality of some spin slot platform features.
Your Rights as a Data Subject Under PDPA
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by spin slot:
Right of Access
You have the right to request a copy of all personal data that spin slot holds about you. We will provide this information within 14 business days of receiving your request.
Right to Rectification
If the personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Corrections will be made within 10 business days.
Right to Erasure
Under certain circumstances, you may request the deletion of your personal data. However, some data may need to be retained to fulfil legal or licensing regulatory requirements.
Right to Withdraw Consent
Where data processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting your spin slot account.
Right to Object
You may object to the processing of your personal data for specific purposes, including direct marketing. Spin slot will honour your objection promptly.
Right to Data Portability
You may request a copy of your data in a machine-readable format (JSON or CSV) for transfer to another platform, to the extent permitted by law.
To exercise any of the above rights, submit a written request to spin slot's Data Protection Officer at privacy@spinslot.asia or via our platform's live chat. Please include your account number and a copy of your identification document for identity verification purposes.
Data Retention & Deletion Period
spin slot retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under Malaysian law. The following are our data retention guidelines:
| Data Type | Retention Period | Basis |
|---|---|---|
| Identity Data (KYC) | 7 years after account closure | Malaysia AML/CTF legal requirements |
| Financial Transaction Records | 7 years | Financial reporting & tax requirements |
| Game History | 3 years after session ends | Dispute resolution & audit |
| Support Communication Logs | 2 years | Service quality & complaint resolution |
| Technical Data (Access Logs) | 90 days | Security & fraud prevention |
| Marketing Data | Until consent is withdrawn | Consent-based |
Once the applicable retention period has expired, your personal data will be securely deleted or converted into an anonymised format that cannot be linked back to your identity.
Marketing Communications & Your Choices
By registering an account at spin slot, you agree to receive essential service communications such as transaction confirmations, security alerts, and policy updates. These are necessary communications and cannot be disabled.
For optional marketing communications – such as new bonus promotions, the latest game updates, VIP rewards, and spin slot news – you can choose whether or not to receive the following types of communications:
- Promotional Emails: spin slot bonus offers, special promotions, and events. Unsubscribe via the link in any email or through your account settings.
- Push Notifications: New game alerts, limited-time bonuses and virtual sports results. Managed through your spin slot mobile app or web browser settings.
- Marketing SMS: Text messages regarding special promotions. Reply "STOP" to any marketing SMS to unsubscribe at any time.
To manage your communication preferences in full, log in to your spin slot account and go to "Account Settings" then "Communication Preferences". All changes will take effect within 24 hours.
Changes to This Privacy Policy
spin slot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, new legal requirements, or other operational reasons.
When we make material changes to this Privacy Policy, we will:
- Notifying all active members via their registered email at least 14 days before changes take effect
- Publishing a prominent change notice on the spin slot platform's home page and login page
- Updating the "Updated" date at the top of this policy
- For significant changes, may request your fresh consent before you continue using the spin slot platform
The current version of the Privacy Policy is always accessible on this page. If you do not agree with any changes, you have the right to close your spin slot account before those changes take effect.
Contact Our Data Protection Officer
spin slot has appointed a Data Protection Officer (DPO) responsible for ensuring ongoing compliance with Malaysia's PDPA and for addressing all privacy-related enquiries from our members.
For any matters relating to this privacy policy, including:
- Requests to access, correct, or delete your personal data
- Complaints regarding how spin slot handles your personal data
- General enquiries about our privacy practices
- Reporting a suspected security breach or unauthorised access to your account
Please reach out to us through the following channels:
If you are dissatisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the statutory body that regulates PDPA compliance in this country.
