Privacy Policy

1Introduction

SpinBet ("we", "us", "our", "Company") operates the online sports betting and live casino platform accessible at spinbet.cam and its associated subdomains (the "Platform"). We are committed to safeguarding the personal data of every individual who visits, registers on, or uses our Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

This Privacy Policy ("Policy") describes how SpinBet collects, uses, stores, discloses, and protects personal data in connection with the operation of the Platform. It also sets out the rights available to you as an individual whose personal data we process, and how you may exercise those rights.

This Policy applies to all personal data processed by SpinBet in connection with the Platform, including data provided voluntarily during registration, data collected automatically during your use of the Platform, and data received from third-party payment processors, identity verification services, and fraud prevention partners.

2Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, location data, online identifiers, IP address, or factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, erasure, or destruction.
• "Data Controller" means SpinBet, which determines the purposes and means of processing Personal Data in connection with the Platform.
• "Data Processor" means any third party that processes Personal Data on SpinBet's behalf in accordance with SpinBet's instructions.
• "Data Subject" means the natural person to whom Personal Data relates — in the context of this Policy, this is primarily you as a registered Player or Platform visitor.
• "Cookie" means a small data file stored on your device by a web browser when you visit a website, used to retain session information, preferences, and usage analytics.
• "KYC" means Know Your Customer — the process of verifying a Player's identity in accordance with applicable regulatory requirements.

3Personal Data We Collect

SpinBet collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity and Contact Data

• Full legal name as it appears on official identification documents
• Date of birth (for age verification — 21+ requirement)
• Malaysian NRIC (MyKad) number or passport number
• Residential address (including postcode, city, state)
• Email address
• Mobile phone number
• Country and city of residence

3.2 Financial and Transaction Data

• Bank account details (where applicable for withdrawals)
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay account references)
• Cryptocurrency wallet addresses (for BTC, ETH, USDT TRC20, BNB transactions)
• Deposit and withdrawal history, including amounts, dates, and payment methods used
• Betting history — markets wagered on, stake amounts, odds, and outcomes

3.3 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Session duration, pages visited, and navigation patterns within the Platform
• Referral URL (the page or link from which you arrived at the Platform)
• Login timestamps and authentication event logs

3.4 Communications Data

• Records of live chat conversations with SpinBet support agents
• Email correspondence sent to and received from SpinBet
• Survey responses, feedback forms, and complaints submitted to SpinBet

3.5 Verification and Compliance Data

• Copies of identity documents submitted for KYC verification
• Proof of address documents (utility bills, bank statements)
• Source of funds declarations where required by compliance procedures
• Self-exclusion and responsible gambling tool settings and history

4How We Collect Your Data

SpinBet collects personal data through the following means:

5Legal Basis for Processing

SpinBet processes personal data only where we have a lawful basis for doing so. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, processing deposits and withdrawals, crediting bonuses, and providing customer support.
• Legal Obligation: Processing necessary to comply with applicable law — including anti-money laundering (AML) obligations, Know Your Customer (KYC) verification, age verification, tax reporting, and fraud prevention requirements imposed by regulatory authorities.
• Legitimate Interests: Processing necessary for SpinBet's legitimate business interests — including fraud detection and prevention, network and information security, improving Platform functionality, and conducting internal analytics — provided that such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — particularly in respect of certain marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6How We Use Your Personal Data

SpinBet uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your SpinBet Account, including login authentication, account history, and preference management.
• Identity Verification: Verifying your identity and age (21+ requirement) in accordance with KYC procedures and regulatory obligations. Preventing access by minors and ineligible persons.
• Transaction Processing: Processing deposits, withdrawals, and bonus credits via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrencies.
• Customer Support: Responding to support queries, resolving account issues, and maintaining records of communications for quality and training purposes.
• Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection laws, including filing required reports with regulatory authorities.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, identity theft, account compromise, and abuse of promotional offers.
• Platform Improvement: Analysing usage patterns to improve Platform functionality, user experience, and game catalogue — including identifying and resolving technical issues.
• Responsible Gambling: Monitoring account activity to identify patterns consistent with problem gambling behaviour, and administering responsible gambling tools such as deposit limits, cooling-off periods, and self-exclusion.
• Marketing Communications: Where you have provided consent, sending promotional communications about SpinBet bonuses, new games, and relevant offers. You may opt out at any time by contacting our support team.

7Sharing Your Personal Data

SpinBet may share your personal data with the following categories of recipients where there is a lawful basis for doing so:

• Payment Processors and Financial Institutions: To facilitate deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, and cryptocurrency networks. These parties process only the data necessary to complete the relevant transaction.
• Identity Verification Providers: Third-party KYC and identity verification services that assist SpinBet in verifying player identity and age as required by applicable regulation.
• Fraud Prevention and Security Services: Services that assist SpinBet in detecting, preventing, and investigating fraud, money laundering, and other prohibited activities.
• Technology and Platform Service Providers: Cloud hosting providers, analytics platforms, customer support software vendors, and other technical service providers engaged to operate the Platform. All such providers are bound by data processing agreements and are not permitted to use your data for any purpose beyond providing services to SpinBet.
• Regulatory and Law Enforcement Authorities: Competent governmental, regulatory, or judicial authorities where SpinBet is required by law to disclose personal data, or where disclosure is necessary to protect the rights, safety, or property of SpinBet, its players, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of SpinBet's assets, personal data held by SpinBet may be transferred to the successor entity. Affected individuals will be notified in advance of any such transfer.

SpinBet requires all third-party service providers to implement appropriate technical and organisational measures to protect personal data and to process it only in accordance with SpinBet's documented instructions.

8Data Retention

SpinBet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes without restriction.

9Data Security

SpinBet implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the SpinBet Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive personal data stored on SpinBet servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All SpinBet staff with access to personal data are subject to confidentiality obligations and undergo regular data protection training.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their Accounts. SpinBet uses 2FA internally for all staff accessing production systems.
• Fraud Monitoring: Automated fraud detection systems monitor Account activity 24/7 to identify and flag unusual patterns indicative of unauthorised access or fraudulent behaviour.
• Regular Security Audits: SpinBet's systems and security controls are subject to periodic internal and third-party security assessments.

While SpinBet takes all reasonable precautions to protect personal data, no internet-based transmission or storage system can be guaranteed to be 100% secure. You are responsible for keeping your Account credentials confidential and should notify SpinBet immediately at the contact details in Section 15 if you suspect any unauthorised access to your Account.

10Cookies & Tracking Technologies

SpinBet uses cookies and similar tracking technologies on the Platform for operational, analytical, and functional purposes. A cookie is a small text file placed on your device by your web browser when you visit the Platform.

The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that maintain your login state, security cookies that prevent cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled without affecting Platform functionality.
• Analytical / Performance Cookies: Used to collect aggregated, anonymised information about how visitors interact with the Platform — such as pages visited, time spent, and navigation paths — to help SpinBet improve user experience and Platform performance.
• Functional Cookies: Used to remember your preferences and personalise your experience, such as your preferred game category, display settings, or responsible gambling tool configuration.
• Fraud Prevention Cookies: Used to support SpinBet's fraud detection and security monitoring systems by identifying unusual device or behavioural patterns across sessions.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, though some functional features may be limited. SpinBet does not use third-party advertising cookies or cross-site tracking cookies for behavioural advertising purposes.

11Your Data Rights

As a data subject, you hold the following rights in respect of your personal data processed by SpinBet. To exercise any of these rights, please contact us using the details provided in Section 15.

• Right of Access: You have the right to request a copy of the personal data SpinBet holds about you, along with information about how it is being used. We will respond to verified access requests within 30 calendar days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Some data — such as registered name and date of birth — can only be corrected with supporting documentary evidence.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. Note that this right is subject to overriding legal retention obligations — SpinBet cannot delete data that must be retained for regulatory or AML compliance purposes.
• Right to Restriction: You may request that SpinBet restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data held, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: Where processing is carried out on the basis of consent or contract and by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of SpinBet's legitimate interests, including for direct marketing purposes. Where you object to marketing, SpinBet will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12Minors & Age Verification

SpinBet's services are strictly intended for individuals aged 21 years and above. SpinBet does not knowingly collect personal data from or provide services to persons under the age of 21.

SpinBet employs multiple layers of age verification as part of its responsible gambling and KYC obligations:

• Date of birth is collected and validated at the point of registration.
• Identity documents submitted for KYC verification are reviewed to confirm age eligibility.
• Accounts are suspended pending age verification where date of birth data is inconsistent or cannot be confirmed.
• Any account found to belong to a person under 21 will be immediately and permanently closed. Deposits will be returned; any winnings or bonuses associated with the account will be forfeited.

If SpinBet becomes aware that personal data has been collected from an individual under the age of 21 without the appropriate consent of a parent or guardian, we will take steps to delete that data promptly. If you believe that SpinBet may hold personal data about a minor in your care, please contact us immediately using the details in Section 15.

13International Data Transfers

In the course of operating the Platform and delivering services to Malaysian players, SpinBet may transfer personal data to service providers, processors, or servers located in jurisdictions outside of Malaysia. Such transfers may be required, for example, in connection with cloud hosting, identity verification, fraud prevention, or technical support services.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in Malaysia, SpinBet implements appropriate safeguards to ensure the protection of that data, including:

• Standard contractual clauses approved by applicable regulatory authorities;
• Binding corporate rules where applicable;
• Adequacy decisions confirming equivalent data protection standards in the recipient jurisdiction.

By using the Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where it is necessary to deliver our services, subject to the safeguards described above.

14Amendments to This Policy

SpinBet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Updated versions of this Policy will be published on this page with a revised effective date and version number.

For material changes to this Policy — particularly those that may affect how your personal data is used or your rights as a data subject — SpinBet will endeavour to notify registered Players via email or through an on-platform notification prior to the change taking effect, where reasonably practicable.

Your continued use of the Platform following the posting of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the revised Policy, you should cease using the Platform and may request Account closure by contacting our support team.

15Contact Us & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or SpinBet's data processing practices, please contact our Data Protection team using the following details:

• Data Protection Contact: SpinBet Data Protection Team
• Email: [email protected] — plain text, not a clickable link
• Live Chat: Available 24/7 via the Platform in English, Bahasa Melayu, and Mandarin Chinese
• Reference: Please include "Privacy Policy Request" or "Data Rights Request" in your communication subject line for faster routing
• Response Time: We aim to respond to all privacy-related requests within 30 calendar days of receipt

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe that SpinBet has processed your personal data in violation of applicable data protection law. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a regulatory authority.