Privacy Policy Spin Sini –
Malaysian Player Personal Data Protection

This Privacy Policy explains how Spin Sini ("we", "our platform") collect, use, store, and protect your personal information when you use our online gaming platform at spinsini.click.

Spin Sini fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We take data protection responsibilities seriously because we understand that your trust in this platform depends greatly on how we handle your sensitive information.

This policy applies to all Spin Sini users, including website visitors, registered members, promotion participants, and anyone who interacts with our platform or services. By continuing to use Spin Sini after reading this policy, you agree to the terms stated herein.

Spin Sini only collect data that is strictly necessary to provide our services. This "data minimisation" principle means we do not collect irrelevant or unnecessary information.

We never collect sensitive information such as biometric data, religious beliefs, health records, or political views.

Spin Sini collect your personal data through several different channels. It is important for you to understand each of these channels so you know exactly what data is collected and when.

• Registration Form: When you register a Spin Sini account, you provide basic information such as your name, phone number, and email address directly.
• KYC Verification: When you submit an identity document (MyKad, passport) for identity verification prior to your first withdrawal.
• Financial Transactions: Details related to deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks) are recorded automatically.
• Platform Usage: Game activity data, slots played, football or badminton bets placed, and navigation records are collected automatically.
• Communications: When you contact the Spin Sini support team via live chat, email, or WhatsApp, those conversations are recorded for training and service improvement purposes.
• Cookies & Similar Technologies: Your web browser automatically sends certain information to our servers whenever you visit spinsini.click.

Spin Sini only use your personal data for purposes that are lawful, relevant, and clearly stated. We do not use your data for any other purpose without first obtaining your renewed consent.

• Account Management: Create, verify, and manage your Spin Sini account, including the login and security processes.
• Payment Processing: Securely processing deposits and withdrawals via your preferred Malaysian e-wallet and banking methods.
• Legal Compliance: Meeting Anti-Money Laundering (AML), Know Your Customer (KYC) requirements, and reporting to relevant authorities when required by law.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support in Bahasa Melayu.
• Platform Improvement: Analyse usage patterns to improve the gaming experience on Spin Sini.
• Marketing (with consent): Sending promotional information, bonus offers, and the latest Spin Sini news — only if you have consented to receive them.
• Fraud Detection: Identify and prevent fraudulent activity, money laundering, or platform abuse.
• Responsible Gambling: Monitoring gameplay patterns to identify players who may benefit from responsible gambling support.

Spin Sini do not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is an absolute commitment that will not change.

However, there are limited situations where we need to share your data with certain parties — all for legitimate reasons:

• Payment Service Providers: E-wallet providers (Touch 'n Go, GrabPay) and banks (for FPX) receive the transaction information needed to process your deposits and withdrawals.
• Game Providers: Gaming companies partnering with Spin Sini (slots providers, Live Casino operators, etc.) receive only the minimum session data required to deliver those games.
• Authorities: We will disclose your data to the police, courts, or regulatory bodies when required by Malaysian law, a valid court warrant, or court order.
• Technical Services: Cloud hosting and security providers managing Spin Sini's technical infrastructure are bound by strict confidentiality agreements.

All third parties who receive your data are bound by data protection agreements that require them to handle such data to the same or higher standards that we uphold at Spin Sini.

Spin Sini continuously invest in the latest security technologies and procedures to ensure your personal data is always protected against unauthorised access, loss or misuse.

The technical security measures we employ include:

• Data in transit is encrypted using 256-bit TLS/SSL protocols — the same standard used by leading banking institutions.
• Data at rest encryption using AES-256.
• Role-based access control ensuring only authorised staff can access sensitive data.
• Automated intrusion detection and round-the-clock security monitoring.
• Regular security audits conducted by independent cybersecurity firms.
• Two-factor authentication (2FA) for staff access to personal data systems.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure against all cyber threats. In the event of a data breach affecting your information, Spin Sini will notify you and the relevant authorities within the timeframe stipulated by Malaysian law.

Website Spin Sini use cookies and similar tracking technologies to enhance your experience. The types of cookies we use are as follows:

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Spin Sini platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our policy Spin Sini, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our privacy team Spin Sini via email at privacy@spinsini.click. We will respond to your request within 14 business days. Some requests may require identity verification beforehand to ensure the security of your data.

Spin Sini retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law.

• Active Account Data: For as long as your Spin Sini account remains active.
• Financial Transaction Data: Minimum 7 years after a transaction takes place, as required by Malaysian financial law for audit and AML purposes.
• KYC Documents: Minimum 5 years after account closure, in line with compliance requirements.
• Game Logs: 2 years for dispute resolution and platform improvement purposes.
• Communication Logs: 1 year for quality control purposes and support team training.
• Cookie Data: Varies by cookie type — from the current session up to a maximum of 2 years.

Once the specified retention period has elapsed, your data will be securely deleted or anonymised in accordance with Spin Sini's procedures.

Platform Spin Sini is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we find that personal data has been collected from individuals under the age of 18 without proper age verification, we will take immediate steps to delete that data and close the account in question.

Spin Sini reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to the way we protect your data.

When significant amendments are made, we will notify you via:

• A prominent notice will be posted on the spinsini.click homepage at least 14 days before any amendment takes effect.
• Email sent to the address registered to your Spin Sini account.
• An in-platform notification the next time you log in.

We encourage you to review this Privacy Policy page periodically. The "Updated" date at the top of this page reflects the latest version of this policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Spin Sini manage your personal data, please contact our Data Protection Officer (DPO):

We are committed to responding to all privacy-related enquiries within 14 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner.