Privacy Policy spincity88 – Your Personal Data Protection

1 Introduction and Scope of This Privacy Policy

Spincity88 ("we", "our platform") understands how important privacy is to you. This Privacy Policy is crafted to give you a clear and transparent overview of how we handle your personal data — from the moment you register through every interaction you have with us.

This policy applies to all users of the spincity88 platform who access our website, mobile app, and all services provided under the spincity88.app domain. It also covers data we collect through direct interactions with our customer support team.

We are committed to ensuring that your personal data is processed lawfully, fairly, and transparently in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have any questions after reading this policy, do not hesitate to contact us — contact details are provided at the end of this document.

2 Types of Personal Data We Collect

Spincity88 only collects data that is genuinely necessary to deliver quality services, ensure platform security, and comply with legal requirements. Below is a summary of the types of data we collect:

3 How We Collect Your Data

Your personal data is collected through several key channels, all conducted transparently and with your knowledge:

• Account registration: When you register a new account at spincity88, you provide basic information such as your name, email, phone number, and password.
• KYC Process: Once your account reaches a certain threshold, or before your first withdrawal, you may be required to submit identity verification documents to meet KYC (Know Your Customer) compliance requirements.
• Financial transactions: Your bank account or e-wallet information is collected when you make a deposit or submit a withdrawal request.
• Platform usage: Our system automatically records your gaming activity, betting records, and interactions with the platform for security and service improvement purposes.
• Cookies and tracking technologies: Our website uses cookies, pixels, and similar technologies to record user preferences and improve site performance. Further details are provided in Section 9.
• Customer support: When you contact our support team via live chat or email, the conversation is recorded for training and service quality purposes.
• Social media and partners: If you access our platform via an affiliate link or social media, we may receive limited information such as your public username or referral ID.

4 Purpose of Using Your Personal Data

Spincity88 uses your personal data solely for legitimate and necessary purposes. We do not use your data for any other purpose without first obtaining your additional consent:

• Account management: Creating, verifying, and maintaining your account so you can access all platform features seamlessly.
• Transaction processing: Processing deposits, withdrawals, and all other financial transactions accurately and promptly using your preferred payment method.
• Identity verification (KYC/AML): Meeting legal compliance requirements related to anti-money laundering (AML) and age verification to ensure the platform remains free from unlawful activity.
• Security and fraud prevention: Monitoring suspicious activity, detecting unauthorised access attempts, and protecting your account from misuse.
• Customer support: Providing efficient and relevant support whenever you contact us, with reference to your account and transaction history.
• Service improvement: Analysing usage patterns in aggregate (not individually) to improve platform design, performance, and the overall user experience.
• Important communications: Sending notifications related to your account such as transaction confirmations, security alerts, and important policy updates.
• Marketing (with consent): If you have consented to receive marketing communications, we may send you information about relevant promotions, bonuses, and the latest spincity88 offers. You may withdraw this consent at any time.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including maintaining transaction records in accordance with Malaysian legal requirements.

5 Data Sharing with Third Parties

Spincity88 takes a highly restricted and cautious approach to sharing your personal data. We do not share your data except in the clearly defined situations outlined below:

• Technical service providers: We work with trusted service providers such as cloud infrastructure providers, payment processing systems, and gaming software suppliers. All third parties are bound by strict data protection agreements and are only permitted to use your data for specified purposes.
• Payment gateway: Required transaction information is shared with certified payment providers (such as DuitNow, FPX, and e-wallet providers) solely for the purpose of processing your financial transactions.
• Regulatory authority: If required by Malaysian law or by direction from a competent authority (such as the police, a court, or a regulatory body), we will disclose the necessary data in accordance with legal provisions.
• Identity verification service: During the KYC process, your identity documents may be verified through recognised third-party verification services that comply with PDPA.
• Business transfers: In the event of a merger, acquisition, or sale of spincity88 assets, user data may be transferred as part of the business assets. You will be notified in advance via email or an in-platform notification.

6 Data Security Measures

Protecting your personal data is spincity88's highest priority. We continuously invest in the latest security infrastructure and industry best practices to keep your data safe at all times:

• 256-bit SSL/TLS Encryption: All data communications between your browser and spincity88 servers are encrypted using 256-bit encryption — the standard adopted by the world's leading banking and financial institutions.
• Secure password storage: Your password is never stored in plain text. We use strong hashing algorithms with a unique salt value for each account.
• Two-factor authentication (2FA): spincity88 supports and encourages the use of two-factor authentication for an additional layer of protection on your account.
• 24/7 security monitoring: Our security team continuously monitors systems in real time to detect any unusual or suspicious activity.
• Internal access controls: Access to users' personal data within spincity88 is strictly limited to staff who genuinely require it, and all access is logged and audited on a regular basis.
• Regular penetration testing: Our platform undergoes regular penetration testing by independent third-party security experts to identify and address any vulnerabilities.
• Integrated data backup: Your data is regularly backed up to a secure, separate location to ensure service continuity and data recovery in the event of an unexpected incident.

While we take all reasonable precautions, no system can guarantee 100% absolute security. You also play an important role by ensuring your password is strong, not shared, and that your device is always updated with the latest security patches.

7 Data Retention Period

Spincity88 does not store your personal data indefinitely. We retain your data only for as long as it is needed for the stated purposes or as required by Malaysian law:

• Active account data: While your account remains active, we retain the data necessary to provide our services to you.
• Financial transaction records: As required under Malaysian law (including tax legislation and AML requirements), financial transaction records are retained for a minimum of 7 years from the date of the transaction.
• KYC documents: Identity verification documents are retained for the duration of your membership plus 5 years after account closure, in line with PDPA and AML requirements.
• Support communication logs: Live chat and customer support email records are retained for 2 years for reference and service improvement purposes.
• Marketing data (with consent): Retained until you withdraw your consent or close your account, whichever comes first.
• After account closure: Data not required to be retained by law will be deleted or anonymised within 90 days of confirmed account closure.

8 Your Rights Under PDPA

As a spincity88 platform user and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

9 Cookies and Tracking Technologies

Spincity88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential for platform operation.
• Preference Cookies: Saving your settings and preferences such as language selection, display theme, and game settings to streamline your experience.
• Analytics Cookies: Helping us understand how users interact with our platform in aggregate (not individually) so we can improve design and performance.
• Marketing Cookies: Used only with your consent to display relevant advertisements and measure the effectiveness of our marketing campaigns.

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality of some features on our platform.

10 Links to Third-Party Services

The spincity88 platform may contain integrations or references to third-party services such as game providers, payment processors, and social media platforms. Please note that:

• Spincity88 is not responsible for the privacy practices of any third-party websites or services you may access through our platform.
• Each third-party service has its own privacy policy that applies to your interactions with them.
• We encourage you to read the privacy policy of any third-party service before providing them with your personal data.
• Third-party game providers integrated within the spincity88 platform are bound by data protection agreements that ensure player data is handled securely and responsibly.

11 Child Protection

Spincity88 is an online gaming platform exclusively for individuals aged 18 and above. We take child protection very seriously:

• Our platform is not designed for, nor intended to attract, individuals under the age of 18.
• We do not knowingly collect personal data from individuals under the age of 18.
• If we discover that we have collected data from underage users, we will take immediate action to delete that data and close the account in question.
• Parents or guardians who suspect their child may have registered or used our platform should contact our support team immediately.

12 Amendments to This Privacy Policy

Spincity88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. We are committed to keeping you informed of any material changes:

• The "Last Updated" date at the top of this document will be updated each time an amendment is made.
• For amendments deemed material (significant changes to how we use your data), we will notify you via your registered email or a prominent in-platform notification.
• Continued use of the spincity88 platform after any policy amendment takes effect constitutes your acceptance of the updated terms.
• If you do not agree with the amendments made, you have the right to close your account and request the deletion of your data in accordance with the procedure outlined in Section 8.

We encourage you to review this page periodically to stay up to date on how we protect your privacy.

13 Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise any of your privacy rights, the spincity88 Data Protection Officer team is ready to assist you:

• Privacy & Data Email: [email protected] — include "Privacy Inquiry" in the subject line for faster processing.
• Live Chat: Available 24/7 via the support icon on the platform — for general privacy-related inquiries.
• Response time: We aim to respond to all privacy-related enquiries within 3–5 business days, and to process data rights requests within 21 business days as required under PDPA.