We know your trust is what matters most. This Privacy Policy clearly and transparently explains how Spin Casino collects, uses, stores, and protects your personal information as a Malaysian player — without confusing legal jargon.
Before reading the full policy, here is a summary of the most important things you need to know as a Malaysia player.
All your personal and financial transaction data at Spin Casino is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading banks, including Maybank and CIMB. Data transmitted between your device and our servers cannot be read by any third party.
SECURESpin Casino does not sell, rent, or commercialise players' personal information to any third party for marketing or any other purposes. Your data belongs to you — we use it solely for platform operations and legal compliance as outlined in this Privacy Policy.
TRUSTEDSpin Casino operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are legally obligated to protect your data, obtain your consent before processing, and grant you the right to access and correct your information at any time.
VALIDYou have the right to request a copy of all personal data we hold about you at any time. If any information is inaccurate, you may request a correction and we will update it within 5 business days. Data access requests can be submitted by email to support@spincasino.express.
YOUR RIGHTSSpin Casino uses cookies to enhance the user experience, store your preferences, and analyse platform traffic in aggregate. You can manage or disable cookies through your browser settings at any time, though some platform features may be affected if cookies are fully disabled.
CONTROLWhen you close your Spin Casino account, you may request the deletion of your personal data from our systems. Deletion will be carried out within 30 days, except for records we are legally required to retain (for example, financial transaction records for 7 years under Malaysia's AML requirements).
FULL CONTROLFour stages of data governance that keep your information safe and under control at all times.
Data is collected only when you interact with the platform — during registration, deposits, wagering, or when contacting support. We do not collect data outside of these contexts.
Data is stored on servers protected by multi-layered firewalls, at-rest encryption, and strict access controls — only authorised personnel are permitted to access player data.
Data is only processed for agreed purposes — account operations, payment processing, KYC/AML compliance, and service improvements. No processing is carried out for undisclosed purposes.
Data that is no longer required is deleted according to the established retention schedule. Deletion is carried out in an irrecoverable manner to ensure your privacy remains protected after account closure.
This Privacy Policy explains how Spin Casino (spincasino.express) collects, uses, stores, protects, and in certain circumstances, shares your personal information when you use our platform. This Policy applies to all Spin Casino platform users, including visitors, registered members, and former members.
Spin Casino takes the privacy of every Malaysian player seriously. We understand that when you share personal information with us — your name, phone number, Touch 'n Go or FPX payment details, and activity history — you are placing a great deal of trust in us. That trust is something we honour with full responsibility.
By using the Spin Casino platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to request deletion of your data.
Spin Casino operates under Malaysia's Personal Data Protection Act 2010 (PDPA). As a registered data controller, we are legally obligated to process your personal data lawfully, fairly, and transparently.
Spin Casino only collects data that is strictly necessary to provide our services to you. We do not collect excessive or irrelevant data beyond what is required to operate the platform. The following are the categories of data we collect:
| Data Categories | Legal Basis for Processing | Mandatory / Optional |
|---|---|---|
| Registration Information | Contractual obligation | Mandatory |
| KYC Documents | Legal obligations (AMLA) | Mandatory > RM 5,000 |
| Payment Details | Contractual obligation | Mandatory |
| Technical Data | Legitimate interest (security) | Automatic |
| Usage Data | Legitimate interest (improvement) | Automatic |
| Marketing Preferences | Consent | Optional |
Spin Casino uses collected data solely for the purposes stated below. We do not process data for any other purpose without obtaining fresh consent from you.
You may opt out of marketing communications from Spin Casino at any time by clicking the "Unsubscribe" link in any marketing email or by updating your communication preferences in your account settings. Withdrawing your marketing consent does not affect your account functionality.
Spin Casino does not sell, rent, or share your personal data for third-party marketing purposes. However, there are specific circumstances where we need to share your data with other parties for legitimate operational reasons:
Spin Casino works with carefully selected third-party service providers to support platform operations. These include payment processing providers (gateways for Touch 'n Go, GrabPay, DuitNow, FPX), cloud service providers, KYC verification companies, and customer support platforms. All providers are bound by strict data protection agreements and are only permitted to access the data necessary for their specific functions.
Spin Casino may be required to disclose player data to the relevant authorities if mandated by Malaysian law — including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or the courts — pursuant to a lawful order. We will notify you of any such disclosure where permitted by law.
In the event of a merger, acquisition, or sale of Spin Casino's assets, player data may form part of the transferred assets. Should this occur, we will notify you in advance and ensure the receiving party is bound by data protection standards equal to or higher than our own.
One thing Spin Casino will never do: share your data with advertising companies, data brokers, or any third party for commercial purposes unrelated to our services to you.
Player data security is a core investment for Spin Casino — not merely a legal obligation. We implement multiple layers of technical and operational protection to ensure your data remains safe at all times.
Even with the best security measures in place, no system can guarantee absolute security. You also play an important role — use a strong, unique password for your Spin Casino account and never share it with anyone.
Spin Casino uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored by your browser when you visit our platform. They help us recognise you on subsequent visits and provide a more personalised experience.
You can manage cookies through your browser settings — all major browsers (Chrome, Firefox, Safari, Edge) offer options to view, manage, and delete stored cookies. Please note that disabling certain cookies may affect the functionality of the Spin Casino platform, including your ability to log in or save your preferences.
Spin Casino only retains your personal data for as long as necessary for the stated purposes, or as required by Malaysian law. Our retention schedule is as follows:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | For the duration of the active account | Contractual obligation |
| Financial transaction records | 7 years after account closure | Malaysia AML & tax requirements |
| KYC Documents | 5 years after account closure | Malaysia AMLA Requirements |
| Support communication logs | 2 years | Dispute resolution |
| Security log data | 1 year | Fraud detection |
| Marketing data (with consent) | Until consent is withdrawn | Consent |
Once the retention period expires, data will be permanently deleted or anonymised. The deletion process is carried out in a way that ensures data cannot be recovered. If you would like to know what specific data we hold about you and for how long, you may submit a data access request by emailing support@spincasino.express.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Spin Casino. We are committed to respecting and facilitating the exercise of these rights.
To exercise any of these rights, send a written request to support@spincasino.express stating the right you wish to exercise, your account number, and identification details for verification. Spin Casino will not charge any fee for reasonable rights requests.
In operating the Spin Casino platform, your data may be stored or processed on servers located outside Malaysia, such as in regional Asian data centres that comply with international security standards. This occurs when we use cloud services or technology providers from overseas to support platform operations.
When your personal data is transferred outside Malaysia, Spin Casino ensures that:
If you have concerns about international data transfers relating to your account, please contact us at support@spincasino.express for more information on the safeguards we have in place.
The Spin Casino platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.
All registrants are required to confirm they are 18 years of age or older during the registration process. Spin Casino also carries out age verification procedures during KYC to ensure compliance with this requirement. Should we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.
If you are a parent or guardian and believe your child under the age of 18 has registered an account with Spin Casino, please contact us immediately at support@spincasino.express so we can take the appropriate action.
While Spin Casino employs extensive security measures, we acknowledge that no system can guarantee absolute security. Should a data breach involving your personal information occur, we have clear procedures in place to address it promptly and responsibly.
If you suspect any suspicious activity on your Spin Casino account, or believe your information has been compromised, please contact our support team immediately via Live Chat or email at support@spincasino.express. We will act promptly to investigate and secure your account.
Spin Casino reserves the right to review and update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or industry best practices in data protection.
When we make significant changes to this Privacy Policy, we will:
We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. If you do not agree with any amendments, you have the right to close your account and request the deletion of your data.
If you have any questions, concerns, or requests regarding Spin Casino's Privacy Policy or the handling of your personal data, please contact us through the following channels:
Response time for privacy enquiries submitted by email is within 5 business days. For formal rights requests (access, erasure, correction), we will acknowledge receipt within 24 hours and provide a full response within the timeframe stipulated by law.
When submitting a privacy request by email, please clearly state your Spin Casino account number and the type of request to help us process it promptly. All privacy communications are handled in strict confidence by our trained team.
Under Malaysia's PDPA, you hold these rights and may exercise them at any time.
Request a copy of all personal data we hold about you. We will respond within 21 days of receiving your request. No charge applies to the first request each year.
If any information we hold about you is inaccurate or out of date, you have the right to request a correction. We will update it within 5 business days of your request being verified.
Request the deletion of your personal data when it is no longer needed. Deletion will be carried out within 30 days, except for data we are legally required to retain, such as financial records.
Object to the processing of your data for direct marketing purposes at any time. We will stop such processing immediately without affecting the core services of your Spin Casino account.
Request that we restrict the processing of your data under certain circumstances — for example, while you are verifying the accuracy of your data, or while you have objected to processing and we are assessing your request.
Request your data in a machine-readable format (JSON or CSV) for transfer to another service provider. Requests will be processed within 30 days of verification.
To exercise any of these rights, contact us at support@spincasino.express
The most frequently asked questions from Malaysian players about privacy and data protection at Spin Casino.
Spin Casino places your privacy and data security first. With 256-bit SSL encryption, compliance with Malaysia's PDPA, and a strict no-data-sale policy, you can play with complete peace of mind. Register a free account today and enjoy a welcome bonus of up to RM 500.