myspin Privacy Policy

1. Who We Are

myspin ("we", "us", "the Company") operates the online gaming platform at myspin.one, offering casino games, live dealer games, sportsbook betting, and specialty games to registered players. myspin holds an operating licence from an international gaming authority (IGA) and processes all accounts and transactions in Malaysian Ringgit (MYR). References to "you" or "your" in this Privacy Policy refer to any individual who registers an Account on or otherwise accesses the myspin Platform.

This Privacy Policy applies to all personal data processed by myspin in connection with your use of the Platform, regardless of the device or method by which you access the Platform.

2. Data We Collect

2.1 Identity & Contact Data

When you register a myspin Account, we collect: your full legal name, date of birth, nationality, email address, phone number, and residential address. This information is required to create and manage your Account and to fulfil our KYC obligations under our IGA licence.

2.2 Identity Verification Documents

As part of the KYC process, we collect copies of government-issued identity documents such as the Malaysian MyKad or passport. For certain higher-value accounts, we may also request proof of address (utility bill, bank statement) and source-of-funds documentation.

2.3 Financial Data

We collect information about the payment methods used to fund your myspin Wallet, including e-wallet account identifiers (Touch n Go eWallet, Boost, GrabPay), bank account details where relevant (FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank), and transaction records. We do not store full card numbers or complete bank account credentials on our servers.

2.4 Gaming & Transactional Data

We maintain records of all activity conducted through your myspin Account, including: deposit and withdrawal history; game play history (slots, live casino, Plinko); sportsbook bet history including markets, stakes, and outcomes; bonus credits and wagering progress; account login timestamps and IP addresses.

2.5 Technical & Device Data

We automatically collect certain technical data when you access the Platform: your IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, and session duration. This data is collected via server logs and, where applicable, cookies and similar technologies.

2.6 Communications Data

We retain records of communications between you and myspin, including live chat transcripts, support emails, and any information you voluntarily provide in correspondence.

3. How We Collect Data

myspin collects personal data through the following means:

• Directly from you — via registration forms, the KYC submission process, cashier transactions, and support communications;
• Automatically — through server logs, cookies, and tracking technologies when you access the Platform;
• Third parties — from identity verification service providers, payment processors, fraud prevention agencies, and our IGA where information is provided as part of regulatory compliance procedures.

4. Legal Basis for Processing

myspin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your Account, process deposits and withdrawals, and deliver gaming services you have requested;
• Legal obligation: Processing required to comply with our IGA licence conditions, including KYC, anti-money laundering (AML) checks, responsible gaming obligations, and regulatory reporting;
• Legitimate interests: Processing for fraud detection and prevention, security monitoring, platform improvement, and customer service, where these interests are not overridden by your rights;
• Consent: Where we process data for marketing communications, we do so on the basis of your consent, which you may withdraw at any time by contacting support or updating your account marketing preferences.

5. How We Use Your Data

myspin uses the personal data we collect for the following purposes:

• To register and administer your myspin Account;
• To verify your identity and age (KYC) in compliance with our IGA licence;
• To process MYR deposits and withdrawals via your chosen payment method;
• To deliver casino, live dealer, sportsbook, and Plinko services;
• To administer bonuses, promotions, and the myspin VIP programme;
• To detect, investigate, and prevent fraud, money laundering, and prohibited conduct under our Terms & Conditions;
• To enforce responsible gaming measures, including self-exclusion and deposit limits;
• To communicate with you regarding your Account, transactions, and support queries;
• To send marketing communications where you have provided consent;
• To comply with regulatory reporting obligations to our IGA;
• To improve platform performance, game offerings, and user experience through analysis of aggregated usage data.

6. Sharing Your Data

myspin does not sell your personal data to third parties. We share your data only in the following circumstances and with the following categories of recipients:

• KYC and identity verification providers — third-party services that assist us in verifying identity documents and age as required by our IGA licence;
• Payment processors and e-wallet operators — including Touch n Go eWallet, Boost, GrabPay, FPX network participants, DuitNow, and USDT TRC20 network infrastructure, to the extent necessary to process your transactions;
• Fraud prevention and AML screening services — to detect and prevent prohibited conduct;
• Game content providers — studio partners (e.g., Pragmatic Play, Play'n GO, NetEnt, Nolimit City) receive anonymised session data for game performance reporting; they do not receive your personally identifiable information;
• International Gaming Authority — myspin is required to report certain data to our IGA as part of licence compliance, including account and transaction data where required by our regulatory obligations;
• Law enforcement and government authorities — where we are required to disclose data by applicable law, court order, or legal process;
• Corporate successors — in the event of a merger, acquisition, or sale of all or part of the myspin business, your data may be transferred as part of that transaction.

All third-party recipients are contractually required to process your personal data only for the specified purpose and to maintain appropriate security standards.

7. Data Retention

myspin retains your personal data for as long as your Account remains active and for a period of at least five (5) years after Account closure, in accordance with our IGA licence obligations relating to anti-money laundering record-keeping requirements. Specific categories of data may be retained for longer periods where required by applicable law or regulatory obligation.

Following the expiry of the retention period, your personal data will be securely deleted or anonymised such that it can no longer be associated with you as an individual.

8. Security Measures

myspin implements technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments of our platform infrastructure;
• Incident response procedures for data breach detection, containment, and notification.

While myspin takes reasonable steps to protect your data, no internet-based system is completely secure. You are responsible for maintaining the confidentiality of your Account password and for notifying myspin immediately if you suspect unauthorised access to your Account.

9. Cookies & Tracking Technologies

myspin uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function, including maintaining your login session and Wallet state. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to understand how players navigate the Platform, which games are most accessed, and where users experience friction. Data collected is aggregated and anonymised.
• Fraud prevention cookies: Device fingerprinting and session consistency checks used to detect suspicious login activity and protect Account security.

You can manage non-essential cookie preferences through your browser settings. Disabling certain cookies may limit Platform functionality. myspin does not use third-party advertising cookies or share cookie data with advertising networks.

10. Your Rights

Subject to applicable law and our IGA licence obligations, you have the following rights in relation to your personal data held by myspin:

• Right of access: Request a copy of the personal data myspin holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to restriction: Request that myspin restrict the processing of your data in certain circumstances;
• Right to portability: Request a machine-readable copy of personal data you have provided to myspin;
• Right to object: Object to processing of your data based on legitimate interests, including for marketing purposes;
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the myspin Data Protection team at: [email protected]. We will respond within 30 days of receiving a valid request. We may require identity verification before actioning a data request.

11. Children & Minors

The myspin Platform is strictly for adults aged 21 years and above. myspin does not knowingly collect personal data from individuals under 21. If we become aware that personal data of an individual under 21 has been collected, we will take immediate steps to close the associated Account, forfeit any winnings in accordance with our Terms & Conditions, and securely delete the personal data concerned. If you believe a minor has registered an Account on the Platform, please contact support at: [email protected] immediately.

12. International Data Transfers

myspin's server infrastructure and certain service providers may be located outside Malaysia. Where your personal data is transferred to a country that does not provide an equivalent level of data protection to Malaysia, myspin will implement appropriate safeguards — such as contractual data protection clauses — to ensure that your data continues to be protected in accordance with this Privacy Policy and applicable law.

13. Third-Party Links

The myspin Platform may contain references to game studios or service providers. myspin is not responsible for the privacy practices of any third-party operator or platform. This Privacy Policy applies solely to data processed by myspin in connection with the myspin.one Platform.

14. Policy Updates

myspin may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or IGA licence obligations. Material changes will be communicated to registered Players via the email address on file at least seven (7) days before the updated policy takes effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the myspin Data Protection team:

Email: [email protected] (plain text — not a clickable link)

Please include your registered email address and Account ID in all data-related requests to facilitate prompt processing. We aim to respond to all privacy requests within 30 calendar days of receipt.