🔏 99spin Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 99spin ("Company", "we", "us", "our") collects, processes, stores, and protects personal data provided by users ("Player", "you", "your") in connection with your registration and use of the 99spin online gaming platform accessible at https://99spin.app and any associated mobile applications (collectively, the "Platform").

99spin is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. We recognise the trust Malaysian players place in us when they share their personal information, and we take that responsibility seriously.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which govern your use of the 99spin Platform.

2 Personal Data We Collect

99spin collects personal data through several channels, including account registration, ongoing Platform use, payment processing, customer support interactions, and technical systems. The categories of personal data we collect include:

Identity & Registration Data:

• Full legal name
• Date of birth (for 21+ age verification purposes)
• Gender (optional)
• Government-issued identification documents (NRIC, passport) where KYC verification is required
• Username and account credentials (password stored in hashed form only)

Contact Data:

• Mobile phone number (Malaysian or otherwise)
• Email address
• Residential address (where required for KYC or withdrawal processing)

Financial Data:

• Payment method details (e-wallet identifiers, bank account numbers, cryptocurrency wallet addresses)
• Deposit and withdrawal transaction history
• Wagering activity and account balance history

Technical & Usage Data:

• IP address and approximate geographic location
• Device type, operating system, browser type and version
• Session duration, pages visited, features used
• Login timestamps and access logs

Communications Data:

• Records of customer support interactions (live chat transcripts, email correspondence)
• Feedback, survey responses, and promotional participation records

3 How We Use Your Personal Data

99spin processes personal data only for specific, legitimate purposes. The primary purposes for which we use your data are as follows:

• Account Management: Creating, maintaining, and administering your 99spin player account, including authentication and access control.
• Identity & Age Verification: Conducting KYC checks to verify your identity and confirm that you are at least 21 years of age, as required under our responsible gaming obligations and age restriction policy.
• Payment Processing: Processing deposits and withdrawals via your chosen Malaysian payment methods, including Touch n' Go eWallet, Boost, Maybank, CIMB, Public Bank, and USDT.
• Service Delivery: Providing access to the game library, sportsbook, live casino, lottery, and all other features of the 99spin Platform.
• Customer Support: Responding to queries, resolving disputes, and providing account assistance.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, money laundering, identity theft, and other prohibited activities.
• Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering, age restriction, and gaming regulations.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant product updates — where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, design, and user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and to provide appropriate interventions or support.

4 Legal Basis for Processing

99spin processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contractual relationship established when you create a 99spin account — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and responses to lawful requests from relevant authorities.
• Legitimate Interests: Processing conducted for purposes of fraud prevention, Platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where consent has been obtained. You may withdraw this consent at any time by contacting 99spin support or via your account settings.

5 Data Sharing & Disclosure

99spin does not sell your personal data to third parties. We may share your data with carefully selected third parties in the following circumstances:

• Payment Processors: Malaysian payment partners (Touch n' Go, Boost, Maybank, CIMB, Public Bank, and cryptocurrency processors) receive the financial data necessary to process your transactions.
• Identity Verification Providers: Third-party KYC and age verification service providers process identity documents submitted to 99spin for verification purposes.
• Game Technology Providers: Licensed game studios and RNG providers may receive session-level data necessary for game operation and audit purposes.
• IT Infrastructure & Security Providers: Cloud hosting, security monitoring, and technical support providers operate infrastructure on which the 99spin Platform runs, subject to data processing agreements.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory authority, 99spin may disclose personal data without prior notice to you.
• Fraud Prevention Networks: In cases of suspected fraud, financial crime, or multi-accounting, relevant information may be shared with industry fraud prevention networks.

All third parties with whom 99spin shares personal data are contractually required to process such data solely for the specified purpose and in accordance with data protection standards consistent with this Policy.

6 Cookies & Tracking Technologies

99spin uses cookies and similar tracking technologies on the Platform to deliver, maintain, and improve the user experience. Types of cookies used include:

• Essential Cookies: Required for Platform functionality, including authentication sessions and security features. These cannot be disabled without affecting Platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how the Platform is used — page views, session duration, navigation patterns. This data helps us improve the 99spin experience.
• Preference Cookies: Store your language, display, and Platform preferences so they persist between sessions.
• Security Cookies: Assist in detecting and preventing fraudulent activity and unauthorised access.

You may manage cookie preferences through your browser settings. Disabling essential cookies may impair your ability to access and use the 99spin Platform.

7 Data Retention

99spin retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Active account data is retained for the duration of your account registration plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction records are retained for a minimum of seven (7) years in line with financial regulation requirements.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing consent records are retained for the duration of the consent and for a reasonable period thereafter for accountability purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

8 Data Security

99spin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 99spin Platform.
• Encrypted storage of passwords using industry-standard hashing algorithms. 99spin staff cannot view your password in plain text.
• Two-factor authentication (2FA) available to all registered players to secure account access.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists.
• Access controls ensuring that personal data is accessible only to 99spin personnel with a legitimate need to process it.
• Incident response procedures to detect, contain, and notify affected users of any data security breach in accordance with applicable requirements.

9 Your Data Rights

Subject to applicable law, you hold the following rights in respect of your personal data processed by 99spin:

• Right of Access: You may request confirmation of whether 99spin processes personal data about you, and if so, obtain a copy of that data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by 99spin.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that 99spin restrict the processing of your personal data in certain circumstances while a dispute or objection is resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact 99spin support via email or live chat. We will respond to all verifiable requests within a reasonable timeframe and no later than 30 days from receipt of the request.

10 Children's Privacy

The 99spin Platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual who does not meet our age eligibility requirement, that data will be deleted promptly and the associated account will be closed.

If you believe that a minor has registered an account on the 99spin Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11 International Data Transfers

99spin's primary operations and data processing infrastructure are structured to serve the Malaysian market. Where personal data is transferred to or processed in locations outside Malaysia — for example, by cloud infrastructure providers or game technology partners — 99spin ensures that appropriate safeguards are in place to protect such data to a standard at least equivalent to that which applies within Malaysia.

Such safeguards may include contractual protections, data processing agreements, or reliance on recognised data transfer mechanisms. By using the 99spin Platform, you consent to such transfers where they occur in accordance with this Policy.

12 Third-Party Links & Services

The 99spin Platform may contain references to third-party game providers and payment processors. Where you interact with third-party systems — such as a payment gateway or a game studio's platform — that third party's own privacy policy governs the processing of your data within their systems. 99spin is not responsible for the privacy practices of third-party services.

We encourage you to review the privacy policies of any third-party service with which you interact in connection with your use of the 99spin Platform.

13 Changes to This Privacy Policy

99spin reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, technology, or our data processing practices. Where material changes are made, we will notify registered players via email or in-Platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the 99spin Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 99spin, please contact our support team. We respond to all privacy-related enquiries with care and in a timely manner.

📧 Email: [email protected]

Live chat support is available 24/7 on the 99spin Platform and is typically the fastest way to reach us. Our multilingual team can assist in English, Bahasa Malaysia, and Chinese.