Privacy Policy

This Privacy Policy ("Policy") describes how MySpin ("MySpin", "We", "Us", "Our") collects, uses, stores, and discloses personal data relating to individuals ("You", "User", "Player") who access or use the MySpin online gaming platform at myspin.cam (the "Platform").

MySpin takes the privacy and security of your personal data seriously. We operate in compliance with applicable data protection legislation and industry best practices. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform.

By registering an account with MySpin or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

MySpin collects personal data from you directly (when you register, make a deposit, contact support, or interact with the Platform) and automatically (through cookies and server logs). The categories of personal data we collect are described below.

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth — collected for the purpose of verifying that you meet the minimum age requirement of 21 years.
• Email address — used for account communications, transaction notifications, and, where consented to, marketing.
• Mobile phone number — used for account verification and, where applicable, two-factor authentication.
• Residential address — collected for KYC compliance and fraud prevention purposes.
• Username and encrypted password — used to authenticate access to your account.

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification, such as your Malaysian National Identity Card (MyKad) or passport.
• Proof of address documents, such as utility bills, bank statements, or government correspondence dated within the last three months.
• Selfie or live facial image, where required to match against the submitted identity document for enhanced verification.

3.3 Financial & Transaction Data

• Payment method details, including e-wallet identifiers (e.g., Touch 'n Go eWallet, Boost, GrabPay), bank account references, and FPX transaction references.
• Deposit and withdrawal history, including amounts in Malaysian Ringgit (MYR), timestamps, and payment method used.
• Wagering activity — game types played, bet amounts, win/loss outcomes, and session durations. This data is used for responsible gambling monitoring and fraud detection.

3.4 Technical & Usage Data

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, browser type, and browser version.
• Pages visited, features used, time spent on the Platform, and clickstream data.
• Session logs and error reports generated during your use of the Platform.

3.5 Communications Data

• Records of live chat conversations, email correspondence, and any other communications you initiate with MySpin's support team.
• Feedback, survey responses, and complaints submitted to MySpin.

MySpin uses your personal data for the following purposes:

MySpin processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform the contract between you and MySpin — i.e., to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Processing required for MySpin to comply with applicable legal and regulatory obligations, including KYC, anti-money-laundering checks, and responses to valid court orders or regulatory directives.
• Legitimate Interests: Processing necessary for MySpin's legitimate business interests — including fraud detection, platform security, customer support, and product improvement — provided such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and optional data analytics features. You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

MySpin does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the relevant purpose.

6.1 Authorised Data Processors

MySpin engages third-party service providers who act as data processors on our behalf. These providers are contractually bound to process your data only in accordance with our instructions and in compliance with applicable data protection requirements. Categories of data processors include:

• Payment Processors: Including Touch 'n Go eWallet, DuitNow, FPX-connected banks, Boost, and GrabPay — for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party platforms that assist with age and identity verification checks on MySpin's behalf.
• Game Providers: Certified gaming content providers whose games are hosted on the Platform. These providers may receive limited technical and transactional data necessary to operate game sessions and certify outcomes.
• IT Infrastructure & Security Providers: Cloud hosting, DDoS protection, and cybersecurity service providers engaged to maintain Platform availability and security.
• Customer Support Platforms: Live chat and email support software providers who process communication data on MySpin's behalf.

6.2 Regulatory & Legal Disclosures

MySpin may disclose your personal data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, valid court order, or binding regulatory instruction. Such disclosures are made only to the extent required and are handled in compliance with our data protection obligations.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of MySpin's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via on-platform notice or email prior to your data being subject to a materially different privacy policy.

MySpin uses cookies and similar tracking technologies to operate core Platform functionality, analyse usage patterns, and deliver a consistent experience across sessions. The categories of cookies we use are described below.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. MySpin does not use third-party advertising or cross-site tracking cookies.

MySpin retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account relationship with MySpin, and for a period of up to five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the conclusion of the business relationship, consistent with regulatory obligations.
• Support Communications: Live chat and email records are retained for up to two (2) years to support ongoing dispute resolution and quality assurance, unless a longer retention period is required by law.
• Technical Logs: Server and access logs are retained for up to twelve (12) months, after which they are deleted or anonymised.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained until consent is withdrawn, and for a period of one (1) year thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you.

MySpin implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and MySpin's servers is protected using TLS 1.2 or higher. Our Platform enforces HTTPS across all pages and connections.
• Encryption at Rest: Sensitive personal data — including identity documents and financial records — is stored in encrypted form using AES-256 encryption on secured infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. MySpin staff who are authorised to access personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Available to all Players as an optional account security layer. MySpin strongly recommends enabling 2FA to protect your account from unauthorised access.
• Regular Security Audits: MySpin engages independent security professionals to conduct penetration testing and vulnerability assessments on a regular basis.
• Data Breach Response: MySpin maintains a documented incident response procedure. In the event of a personal data breach that poses a risk to your rights, MySpin will notify you and any applicable regulatory authority within the timeframes required by law.

Subject to applicable data protection legislation, you have the following rights with respect to your personal data held by MySpin. To exercise any of these rights, please contact our support team as described in Section 14.

• Right of Access: You have the right to request a copy of the personal data MySpin holds about you, along with information about how it is processed. We will respond to verified access requests within a reasonable timeframe.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Certain data may also be updated directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that this right is subject to exceptions — for example, where MySpin is required to retain data to comply with a legal obligation or to defend a legal claim.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data that is based on MySpin's legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

MySpin will respond to all legitimate rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

MySpin may send you promotional communications about new games, bonus offers, and platform features — but only where you have provided explicit, informed consent to receive such communications at the point of registration or through your account settings.

You may opt out of marketing communications at any time by updating your preferences in your account settings or by contacting our support team. Opting out of marketing communications will not affect the delivery of essential account-related communications, such as transaction confirmations, account security alerts, and policy update notifications.

The MySpin Platform is strictly intended for adults aged 21 (twenty-one) years and above. MySpin does not knowingly collect personal data from individuals under the age of 21. Age verification is applied as part of the account registration and KYC process.

If MySpin becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, the account will be immediately suspended, all associated personal data will be deleted without undue delay, and any deposited funds will be returned to the originating payment method following a compliance review.

If you have reason to believe that a minor has registered on the MySpin Platform, please notify us immediately via our support team. We take all such reports seriously and will act swiftly to investigate and, where confirmed, remove the account.

MySpin reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes — those that meaningfully affect your privacy rights or how your data is processed — will be communicated to registered Players via a prominent on-platform notice or by email to the address registered on your account, no less than fourteen (14) days before the change takes effect.

Non-material amendments, such as typographical corrections or clarifications that do not affect the substance of the Policy, may be made without specific advance notification. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended Policy, you should cease using the Platform and contact our support team to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by MySpin, please contact our support team through the following channels:

MySpin is committed to handling all privacy-related enquiries fairly, transparently, and in plain English. We treat every data rights request with the same level of care we apply to our broader commitment to player trust.