Spinking33 Privacy Policy – Data Protection Transparent Malaysian Players

Your privacy is not merely a legal obligation to spinking33 — it is a core part of the trust you place in us when you choose to play on our platform. Since spinking33 began operations in 2019, we have built privacy systems and practices designed to protect the personal data of over 520,000 active members across Malaysia.

This Privacy Policy has been drafted to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We believe you have the right to know exactly what data we collect, why we need it, how we use it, and who can access it.

If you have any questions about how spinking33 handles your personal data, our team is available via 24/7 live chat or email at support@spinking33.best. We will respond within 48 business hours to any privacy-related enquiry.

Spinking33 collects various categories of personal data depending on how you interact with our platform. The following is a comprehensive list of the types of data we may collect:

Identity & Registration Data:

• Full name as stated on your MyKad or Malaysian passport
• MyKad or passport number (for KYC identity verification)
• Date of birth (to verify that you are 18 years of age or older)
• Gender
• The username you chose during registration

Contact Details:

• Active email address
• Malaysian mobile phone number
• Residential address in Malaysia (state, city and postcode)

Financial & Transaction Data:

• Deposit and withdrawal history (date, amount in RM, payment method)
• Betting records and gaming activity
• Current account balance and history
• EWallet account information (only the name and number you registered — not your eWallet password or PIN)

Technical & Usage Data:

• The IP address of the device used to access spinking33
• Web browser type and operating system
• Mobile device information (model, operating system — not IMEI)
• Login and logout timestamps
• Pages visited and time spent on each page
• Cookie data and related tracking technologies

Spinking33 no collect your ATM PIN, eWallet password, credit card CVV, or any biometric information. If you ever receive a communication claiming to be from spinking33 requesting such details, please report it to our support team immediately as it may be a fraudulent attempt by a third party.

Spinking33 collects personal data through several key channels, and we want you to understand exactly how each collection occurs:

Directly From You:

• Account registration form — basic identity and contact information
• Identity verification process (KYC) — verification documents such as MyKad
• Deposit and withdrawal forms — payment method information you select
• Communications with the spinking33 customer support team via live chat, WhatsApp or email
• Feedback, reviews, or enquiries you submit to us

Automatically During Platform Use:

• Server logs recording activity on the spinking33 platform
• Cookies and tracking technologies as described in Section 9
• Gaming activity data — bets placed, winnings, losses and time spent playing
• Technical data from your device and web browser

From Trusted Third Parties:

• Payment providers (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) — transaction status verification only
• Third-party identity verification service providers used for the KYC process
• Gambling blacklists and recognised fraud prevention databases

In all cases, spinking33 only collects data that is strictly necessary for the stated purpose. We do not collect data beyond what is required, and every instance of data collection has a clear and legitimate purpose.

Spinking33 uses your personal data for the following purposes, and we ensure every use has a lawful basis under applicable law:

• Account Management: Creating, managing and maintaining your spinking33 account, including identity verification, account settings and activity history.
• Transaction Processing: Process deposits and withdrawals in MYR via your chosen payment method, including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
• Service Provision: Grant access to all games and services on the spinking33 platform, including slots, Live Casino, and Sports Betting.
• Security & Fraud Prevention: Detecting, investigating and preventing fraudulent activity, money laundering, account misuse and any activity that violates spinking33's Terms & Conditions.
• Service Communications: Sending important notifications related to your account, transactions, policy changes and security alerts.
• Marketing Communications (with consent): Sending information about spinking33 promotions, bonuses, exclusive offers and latest news — only if you have given your consent.
• Responsible Gaming: Monitor gameplay patterns to identify signs of problem gambling and reach out to players who may need support, as part of spinking33's commitment to responsible gaming.
• Legal Compliance: Comply with applicable legal and regulatory obligations, including Malaysia's PDPA and anti-money laundering (AML) requirements.
• Platform Improvement: Analysing usage patterns in aggregate (not at the individual level) to improve the design, performance and user experience of the spinking33 platform.

Spinking33 does not use your personal data for any purpose other than those stated above without first obtaining fresh consent from you.

Spinking33 understands that your trust depends on how we handle data sharing. We never sell your personal data. However, there are limited situations where we need to share data with trusted third parties for legitimate operational purposes:

Payment Provider: Information required to process your transaction is shared with the relevant payment provider — Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay or FPX — depending on your chosen method. This sharing is limited strictly to information necessary for transaction verification and processing.

Game Provider: To enable access to third-party games on the spinking33 platform, limited information such as a player ID (not your full name) may be shared with the relevant game providers. These providers are bound by strict confidentiality agreements with spinking33.

Legal Compliance: spinking33 will disclose personal data to the relevant authorities where required by Malaysian law, court order, or direction from a legitimate regulatory body. In such cases, we will endeavour to notify you in advance unless prohibited by law.

Technical Service Providers: Companies providing technical infrastructure services to spinking33 (such as cloud and cybersecurity services) may have limited access to data within the scope of their work. All such vendors are bound by strict confidentiality and data protection agreements with spinking33.

Spinking33 invests seriously in security infrastructure to protect your personal data from unauthorised access, loss, misuse, disclosure, or alteration. The following are the key security measures we have in place:

• Data Transmission Encryption: All data transmitted between your device and spinking33's servers is encrypted using TLS (Transport Layer Security) protocol with 256-bit encryption — the same standard used for online banking transactions.
• Data Storage Encryption: Sensitive data stored in spinking33's databases is encrypted at rest using industry-standard encryption algorithms.
• Password Protection: Your password is stored using a one-way cryptographic hash function that cannot be reversed. This means that even if our database were ever compromised, your actual password cannot be recovered.
• Two-Factor Authentication (2FA): spinking33 offers a 2FA option to protect your account with an additional layer of security beyond your password.
• 24/7 Monitoring: spinking33's automated monitoring system operates around the clock to detect any suspicious activity or intrusion attempts and respond immediately.
• Internal Access Controls: Only spinking33 staff who require data access to carry out their assigned duties are granted that access, in accordance with the principle of least privilege. All access to sensitive data is logged and audited on a regular basis.
• Security Testing: spinking33 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

While spinking33 takes all reasonable steps to protect your data, no system is 100% immune to all cyber threats. We encourage you to take your own protective measures as well — use a strong, unique password for your spinking33 account, enable 2FA, and never share your login credentials with anyone.

Spinking33 retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy, or as required under applicable Malaysian law.

In general, data retention periods are as follows:

• Active account data: Retained for as long as your spinking33 account remains active, plus any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years after the transaction occurs, in accordance with Malaysian legal requirements on financial records and anti-money laundering.
• Identity verification documents (KYC): Retained for a minimum of 5 years after account closure, in accordance with AML/KYC regulatory compliance requirements.
• Customer support communication logs: Retained for 2 years after the communication takes place, for reference and service quality purposes.
• Technical data and server logs: Retained for 90 days for security monitoring and technical troubleshooting purposes.
• Marketing data (if consent has been given): Retained until you withdraw your consent or close your account, whichever comes first.

Once the retention period expires, spinking33 will securely delete or anonymise your personal data in accordance with approved procedures, unless continued retention is required for legal compliance or resolution of outstanding disputes.

As a spinking33 player residing in Malaysia, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and spinking33's privacy policy:

To exercise any of the rights above, please contact the spinking33 team at support@spinking33.best with the email subject "Privacy Rights Request", specifying the right you wish to exercise along with your account details. spinking33 will process your request within 30 business days.

In situations where your request cannot be fully fulfilled — for example, due to legal record-keeping obligations — we will clearly and transparently inform you of the reasons.

Spinking33 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how our platform is being used. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core spinking33 platform functions such as login session management, bet slip handling and account security. These cookies cannot be disabled without affecting platform functionality. We do not request consent for these cookies as they are necessary for the service you have requested.
• Performance Cookies: Collects information on how visitors use the spinking33 platform — pages visited most frequently, error messages, and so on. All information is aggregated and anonymised. We use it to improve how the platform functions.
• Functional Cookies: Enables the spinking33 platform to remember your preferences such as language, display settings, and saved login information (if you select "remember me"). These cookies personalise your experience on the platform.
• Marketing Cookies (with consent): Used to tailor the promotions and advertisements you see on the spinking33 platform based on your interests and gaming history. Only used with your consent.

You can manage your cookie preferences through your web browser or via the privacy settings in your spinking33 account. Disabling certain cookies may affect the functionality of the platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

Spinking33 is committed to keeping this Privacy Policy up to date to reflect changes in our practices, the technologies we use, and evolving legal requirements. When we make material changes to this privacy policy, we will:

• Updating the "Effective Date" at the top of this document
• Sending a notification to your registered email address if changes involve a new or different way your data is used
• Displaying a pop-up notice upon login for significant amendments

Continued use of the spinking33 platform after any amendments take effect constitutes your acceptance of the revised privacy policy. If you do not agree with the changes, you may close your account and request data deletion in accordance with the procedure outlined in Section 8.

For any enquiries, concerns or requests relating to the privacy policy and your personal data at spinking33, please contact us via:

• Email: support@spinking33.best (subject: "Privacy Enquiry")
• Live Chat: Available on the spinking33 platform, 24 hours a day, 7 days a week
• WhatsApp: Number available in your account after logging in

Spinking33 is committed to responding to all privacy-related enquiries within 48 business hours. For formal complaints regarding personal data protection that cannot be resolved through us, you may contact the Department of Personal Data Protection Malaysia for further guidance.