SpinCity is fully committed to protecting the personal data of every member in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your privacy is not merely a legal obligation — it is our moral responsibility to the SpinCity community.
Summary: This Privacy Policy explains how SpinCity collects, uses, stores, and protects your personal data as a platform member. We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the SpinCity platform, you agree to the practices described herein.
SpinCity is an online entertainment and betting platform operating exclusively for the Malaysian market. We understand how sensitive personal data can be in today's digital age, particularly when it involves financial transactions and personal information shared in an online environment.
This Privacy Policy is written to give you — as a SpinCity member — complete clarity on what data we collect, why we need it, and how we protect it. We do not believe in vague terms or convoluted explanations. If anything is unclear, SpinCity's customer support team is available to answer your questions 24 hours a day.
As a platform operating in Malaysia, SpinCity is fully bound by the provisions of Personal Data Protection Act 2010 (PDPA) and all regulations issued thereunder. We regard PDPA compliance not merely as a legal obligation, but as a core value in building trust with the SpinCity community.
SpinCity only collects data that is strictly necessary to deliver our services safely and efficiently. The following are the categories of data we collect:
| Data Category | Example | Requirements |
|---|---|---|
| Identity Information | Full name, date of birth, IC number / passport number | Mandatory (KYC) |
| Contact Information | Malaysian phone number, email address, residential address | Mandatory |
| Financial Data | Bank account/e-wallet name, account number (partial), MYR transaction records | Mandatory (Transactions) |
| Platform Activity Data | Game history, Sports Betting history, account balance | Mandatory (Services) |
| Technical Data | IP address, device type, web browser, operating system | Automatic |
| Preference Data | Language preference, favourite sports, notification settings | Optional |
| Communication Data | Live chat records, support emails, and filed complaints | Automatic |
SpinCity does NOT collect: your bank PIN or password, full credit/debit card details (we process payments exclusively through secure third-party payment gateways), and we do not store your SpinCity account password in plain text — all passwords are hashed using a robust algorithm.
Data is collected through various channels throughout your interactions with the SpinCity platform:
SpinCity uses your personal data only for legitimate and relevant purposes. The following are the primary purposes for which data is processed:
SpinCity will not use your data for purposes unrelated to service delivery or legal compliance without first obtaining your explicit consent.
SpinCity does not sell, does not rent and does not disclose your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we share certain information with the following parties where there is a legitimate need:
Information required to process your transactions is shared with approved payment gateways including Touch 'n Go eWallet, GrabPay, DuitNow, FPX, ShopeePay, and Boost. Only the minimum data necessary to complete your MYR transactions is shared.
SpinCity may disclose your personal data to law enforcement agencies, courts, or Malaysian government authorities when required by law or a valid court order. This includes investigations into financial crime, money laundering, or fraud cases involving our platform.
Third-party technical service providers — including server hosting companies, game software providers, and analytics firms — may have limited access to your data strictly within the scope required to deliver their services to SpinCity. All such providers are bound by strict data confidentiality agreements.
Important Reminder: SpinCity is not responsible for the privacy practices of third-party platforms, such as other websites you may visit through links in our emails or communications. Please review the privacy policies of those platforms separately.
SpinCity makes serious investments in cybersecurity infrastructure to protect your personal data. The protective measures we have in place include:
In the event of a data breach: In the event of any security incident affecting your personal data, SpinCity will notify affected members within 72 hours after an incident is identified, in accordance with Malaysian PDPA requirements. We will also take immediate remedial action.
SpinCity uses cookies and similar tracking technologies to enhance user experience and platform security. Below are the types of cookies we use:
You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect certain functions on the SpinCity platform. SpinCity cookies are not used to collect sensitive information such as passwords or payment card details.
SpinCity retains your personal data only for as long as necessary for the stated purposes, or as required by law. The following are our data retention guidelines:
Upon expiry of the retention period or upon a valid request from you, SpinCity will securely delete or anonymise your data using methods that ensure it cannot be recovered.
Under Malaysia's PDPA 2010, you have important rights regarding your personal data. SpinCity is committed to respecting and facilitating the exercise of these rights:
Request a copy of the personal data SpinCity holds about you. We will provide it within 21 days.
Correct inaccurate or outdated data in your SpinCity profile via account settings or support.
Request the deletion of your data when there is no longer a legitimate reason to retain it, subject to legal obligations.
Object to the processing of your data for marketing purposes at any time — with immediate effect, no questions asked.
Request that SpinCity restrict the processing of your data in specific circumstances while a dispute is being resolved.
Withdraw marketing consent at any time without affecting your core SpinCity services.
To exercise any of the rights above, please contact the SpinCity privacy team at privacy@spincity.ws or via live chat within the platform. Requests will be processed within 21 business days from the date of receipt. For complex cases, we will notify you if additional time is required, not exceeding 30 days.
The SpinCity platform is strictly for users aged 18 and above. SpinCity does not knowingly collect, process, or store personal data of any individual under the age of 18.
Should SpinCity discover that personal data of a minor has been collected without our knowledge, we will take the following steps immediately:
If you suspect that a minor has registered for or is using the SpinCity platform, please report it to us at support@spincity.ws immediately. We take the protection of minors seriously and will act promptly on every report.
SpinCity reserves the right to update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any material changes will be communicated to you via:
Non-material changes — such as spelling corrections or clarifications that do not alter the meaning — may be updated without specific notice. We encourage you to review this page periodically to stay informed about how SpinCity protects your privacy.
For any enquiries, requests, or complaints relating to data privacy, you may contact SpinCity's Data Protection Officer via:
If you are not satisfied with SpinCity's response to your privacy complaint, you have the right to lodge a complaint with Malaysia Personal Data Protection Commissioner through the official channels of the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.
Effective Date: 1 June 2026 | Version: 3.1 | Jurisdiction: Malaysia | Standards: PDPA 2010
Six privacy protection commitments that set SpinCity apart from other platforms
All data in transit and at rest is encrypted with 256-bit SSL – the same standard used by Malaysia's leading banks. No one can intercept or read your data during transmission.
SSL A+ RatingSpinCity is fully compliant with Malaysia's Personal Data Protection Act 2010. We have appointed a Data Protection Officer (DPO) responsible for ensuring every aspect of our operations adheres to the law.
PDPA CompliantSpinCity has never sold, and will never sell, members' personal data to any third party for commercial purposes. Your information belongs to you — it is not a commodity we trade in.
Zero Data SellingPenetration testing by independent cybersecurity firms is conducted quarterly. Any vulnerabilities identified are remediated within 48 hours or less, depending on severity.
Quarterly AuditYou are in full control — access your data, correct inaccuracies, withdraw marketing consent, or request data deletion at any time. SpinCity processes all privacy requests within 21 days.
Members' Rights ProtectedIn the event of any security incident involving your data, SpinCity is committed to notifying you within 72 hours – well ahead of the timeframe required by law.
Full TransparencyWith industry-standard privacy protection and full PDPA 2010 compliance, you can enjoy football, badminton, e-sports, and SpinCity's casino games without worrying about the safety of your personal data.