Privacy Policy SpinCity999 — Our Commitment to Protecting Your Data

SpinCity999 ("we", "the platform" or "SpinCity999") deeply respects the privacy of every member who uses our services. This Privacy Policy is designed to explain clearly and transparently how we manage your personal data — from the moment you first register an account through your entire active use of the platform.

This policy applies to all information you provide to us directly, information collected automatically when you use the platform, and information we receive from legitimate third-party sources such as payment providers. This policy does not apply to third-party websites or services that may be linked from our platform.

Spincity999 operates in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection principles. We are committed to ensuring that your personal data is collected lawfully, used for clearly defined purposes, stored securely, and not retained longer than necessary.

Spincity999 collects personal data from you through two primary methods — data you provide directly, and data collected automatically when you use our platform.

We do not collect sensitive data such as medical information, religious beliefs or political views. All data collected is solely for the purposes of platform operations and account management.

Spincity999 uses your personal data solely for legitimate purposes directly related to the provision of our platform services. We do not process your data for any purpose not stated in this Privacy Policy without first obtaining your explicit consent.

Primary Purposes of Data Use

• Account management: Registration, identity verification (KYC), login and account recovery.
• Transaction processing: Verifying and securely processing deposits and withdrawals.
• Fraud detection: Monitoring suspicious activity and protecting the platform against abuse.
• Customer support: Handling member enquiries, complaints and support requests.
• Legal compliance: Meeting mandatory KYC, AML and related regulatory requirements.
• Platform improvements: Analysing usage patterns to improve the user experience.
• Service communications: Sending transaction notifications, security updates and relevant account information.

If you have agreed to receive marketing communications, we may also use your contact information to inform you of promotions, bonus offers and relevant platform news. You may withdraw this consent at any time through your account settings.

Spincity999 does not sell, rent, or share member personal data with third parties for marketing or commercial purposes without your explicit consent. However, there are specific situations where we may need to share your information with the following parties:

Authorised Service Providers

We share necessary data with payment service providers such as DuitNow, FPX and eWallet providers to process transactions. These providers are bound by strict confidentiality agreements and may only use your data for transaction processing purposes.

Legal Authorities

Spincity999 will disclose member data to the relevant authorities when required by law, court order, or a legitimate criminal investigation. In such circumstances, we will endeavour to notify the member concerned unless doing so is prohibited by law.

The security of member personal data is SpinCity999's highest priority. We continuously invest in security infrastructure and adopt a defence-in-depth approach to ensure your data is protected from every angle.

• 256-bit SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for data stored in the database.
• Two-factor authentication (2FA) for all staff access to internal systems.
• Regular security scans and penetration testing by independent specialists.
• Real-time 24/7 threat monitoring and intrusion detection (IDS/IPS).
• Role-based access control (RBAC) — only staff who need access to specific data are permitted to view it.
• Automatic daily data backups to a secure offsite data centre.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. Members are also responsible for maintaining the security of their own account passwords.

Spincity999 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your login session. The following are the types of cookies we use:

You can manage your cookie settings through your web browser or via the privacy settings panel in your SpinCity999 account. Please note that disabling required cookies may affect certain platform functions.

As a SpinCity999 member, you have the following rights regarding your personal data held by us, in accordance with the Malaysia PDPA 2010:

Spincity999 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or to fulfil applicable legal obligations. The following are guidelines on our data retention periods:

• Active account data: Retained for the duration your account is active and for three years after account closure.
• Financial transaction records: Retained for seven years in line with AML and tax legal requirements.
• Security and audit logs: Retained for two years for forensic and investigative purposes if required.
• Customer support communications: Retained for two years from the date of last interaction.
• Anonymous analytics data: Can be stored indefinitely as it contains no personally identifiable information.

Once the retention period expires and no legal requirement prevents deletion, your data will be securely erased using non-recoverable deletion methods.

SpinCity999 is a platform exclusively for individuals aged 21 and above. We do not knowingly collect any personal data from minors. Should we discover that a minor's data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you become aware that a minor has registered an account at SpinCity999, please contact our support team immediately so that appropriate action can be taken.

Spincity999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or developments in security technology. Members will be notified of any material amendments via in-platform notifications or email.

The "Updated" date at the top of this page reflects when the last amendment was made. Your continued use of the spincity999 platform after any amendments are announced will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or wish to exercise your rights regarding personal data, our team is ready to assist through the following channels. All privacy-related requests will be handled by our dedicated data protection officer.

• In-platform Live Chat — available 24/7, response within 5 minutes
• Privacy email: [email protected]
• Data requests are processed within 14 business days.
• All enquiries are answered in both Malay and English.