Privacy Policy

Privacy Policy 99spin — Protection of Our Members' Personal Data

Your privacy is our priority. Learn how 99spin collects, uses, stores, and protects your personal information to the highest industry security standards.

Updated: 1 January 2026 SSL 256-bit PDPA Compliant

99spin's Six Pillars of Data Protection

We protect your information using industry-leading technology and best practices.

Full Data Encryption

All data transmitted between your device and 99spin servers is encrypted using 256-bit SSL/TLS protocols. Your personal and financial information cannot be intercepted by any third party during data transfer.

Strict Access Control

Only authorized 99spin staff may access member personal data, and only for the purposes stated in this policy. All access is logged and regularly audited to ensure there is no misuse.

Secure Data Storage

Your data is stored in ISO 27001-certified data centres with multi-layered backup systems. Our servers are protected by advanced firewalls, intrusion detection systems, and round-the-clock security monitoring.

No Data Selling

99spin does not sell, rent, or commercialise members' personal data to any third party. Your information belongs entirely to you, and we only use it for purposes you have agreed to.

Data Breach Notification

In the event of any security incident involving your personal data, 99spin will notify you within 72 hours and take immediate remedial action in accordance with legal requirements.

Member Access Rights and Controls

You have the right to access, correct, download, or request deletion of your personal data at any time. 99spin provides a straightforward and transparent process for members to manage their own personal information.

Updated 1 Jan 2026

Welcome to the 99spin Privacy Policy. This document details how the 99spin platform ("we", "Company", "Platform") collects, processes, stores, and protects your personal information ("Member", "you") when you use our services at 99spin.onl.

We are committed to respecting and protecting the privacy of every member in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. This policy applies to all information collected through our website, mobile app, and other communication channels we operate.

Important Note: By registering or continuing to use the 99spin platform, you are deemed to have read, understood, and agreed to all provisions of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

This Privacy Policy is to be read alongside the 99spin Terms and Conditions. Any term not defined herein carries the same meaning as set out in our Terms and Conditions.

1Introduction and Scope of This Policy

99spin is a licensed online gaming platform serving players in Malaysia. We understand that your trust in us depends on how responsibly we handle your personal information.

This Privacy Policy covers all aspects of how we process your personal data, including:

  • Information you provide during account registration and KYC verification.
  • Data we collect automatically while you use the platform.
  • Information we receive from trusted third parties.
  • How we use, share, and protect all such information.
  • Your rights regarding your personal data and how to exercise them.

This policy applies to all 99spin platform users regardless of access method, whether via web browser, mobile app, or any other channel associated with 99spin services.

2Information We Collect

99spin collects various types of information to enable us to provide a safe, efficient, and reliable service to all our members. This information falls into three main categories:

A. Information You Provide Directly

  • Registration Information: Full name, phone number, email address, date of birth, and password.
  • KYC Information: Identity card number (MyKad), facial photo, and selfie holding the identity document.
  • Financial Information: Bank account number, account holder name, and digital wallet details for deposit and withdrawal purposes.
  • Communications: Messages you send to our customer support team via live chat, email, or WhatsApp.

B. Information Collected Automatically

  • Device Data: Device type, operating system, unique device identifier, screen resolution.
  • Network Data: IP address, geographic location (city/state level), ISP.
  • Usage Data: Pages visited, games played, session duration, login frequency.
  • Cookie Data: Session cookies, preference cookies, and analytics tracking identifiers.

C. Information from Third Parties

  • Verification data from payment processors and financial institutions.
  • Information from identity verification databases for KYC purposes.
  • Data from gambling exclusion lists and self-exclusion programmes.

Data Minimisation Principle: 99spin only collects information that is strictly necessary to provide our services and comply with legal requirements. We do not collect data that is excessive or irrelevant to our service purposes.

Data Type Primary Purpose Legal Basis
Identity Information Identity verification, KYC, account security Legal requirements
Financial Information Processing deposits and withdrawals Contract Performance
Usage Data Service improvement, analytics Legitimate interest
Communication Data Customer support, notifications Contract Performance
Cookie Data Platform functionality, website analytics Consent
3How We Use Your Information

The information we collect is used solely for legitimate and transparent purposes. 99spin uses your personal data for the following:

  • Account Management: Creating and maintaining your account, processing registration, and ensuring the security of your login.
  • Identity Verification (KYC): Verifying your identity to comply with anti-money laundering (AML) legal requirements and Know Your Customer obligations.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and accurately.
  • Service Provision: Offering games, promotions, VIP programs, and all relevant platform features to you.
  • Communications: Sending important account notifications, promotional updates (with your consent), and service information.
  • Security and Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and security breaches.
  • Product Improvement: Analyzing usage patterns to improve the user experience and develop better new features.
  • Legal Compliance: Fulfilling reporting obligations to the relevant regulatory and legal authorities.

Marketing: 99spin will only send you marketing communications if you have given your explicit consent. You may withdraw that consent at any time by contacting our support team.

4Information Sharing and Disclosure

99spin does not sell or trade members' personal information to any third party for commercial purposes. However, there are limited situations where we may need to share your information with certain parties:

  • Trusted Service Providers: Payment processing companies, cloud computing service providers, and KYC verification software vendors working on our behalf under strict confidentiality agreements.
  • Game Providers: Third-party game software providers integrated with our platform may receive limited game session data for technical purposes.
  • Regulatory Authority: Information required by law or by direction of lawful authorities such as the Financial Intelligence Unit, Companies Commission of Malaysia, or the police.
  • Fraud Prevention: Sharing necessary information within the industry fraud prevention network to protect all parties.

Contractual Guarantee: All third parties receiving personal data of 99spin members are bound by strict data processing agreements and must comply with the same security standards we uphold. They are not permitted to use that data for any purpose other than those specified.

Should 99spin undergo corporate restructuring, a merger, or acquisition, member personal data may be transferred as part of the business assets. In such circumstances, you will be notified in advance and an equally strict or stricter Privacy Policy will be maintained.

5Data Security and Protection Measures

The security of your data is a responsibility we take very seriously. 99spin implements multiple layers of technical and organizational security to ensure your personal information is always protected:

  • End-to-End Encryption: All data communications are encrypted using TLS 1.3 and AES-256 encryption for stored data.
  • Two-Factor Authentication (2FA): An additional security layer that prevents unauthorized access to your account even if your password becomes known to others.
  • Continuous Monitoring: Our threat detection and security monitoring system operates 24/7 to identify and respond to any threats.
  • Regular Security Audits: Periodic penetration testing and independent security audits are conducted by accredited cybersecurity firms.
  • Role-Based Access Control: Staff may only access data required for their specific duties, with all access logged and monitored.
  • Certified Data Centre: Data is stored in data centres compliant with ISO 27001 standards, with strict physical security controls.

Account Security Alerts: While we implement robust security measures, your account's safety also depends on your own actions. Please use a strong and unique password, enable 2FA, and never share your login details with anyone.

6Cookies and Tracking Technologies

99spin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language, theme, and personal display settings.
  • Analytics Cookies: Helps us understand how members use the platform for continuous improvement. Data is collected in aggregate and anonymized form.
  • Marketing Cookies: Used only with your consent to display relevant promotional content.

You can manage cookie settings through your browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your browser's documentation.

By continuing to use the 99spin platform after the cookie notice is displayed, you consent to the use of cookies as described in this policy. Consent for non-essential cookies may be withdrawn at any time.

7Your Privacy Rights as a Member

As a 99spin member, you have the following rights regarding your personal data under Malaysia's PDPA and our policy:

Right of Access

You have the right to request and receive a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If any of your personal information is inaccurate or outdated, you may request a correction at any time through your account settings or customer support.

Right to Erasure

You may request deletion of your personal data. However, certain data may need to be retained to fulfil legal obligations such as financial audit requirements.

Right to Object

You may object to the processing of your personal data for direct marketing purposes or in situations where we rely on legitimate interests as our legal basis.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another party if required.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how we process your data while a dispute or review is in progress.

To exercise any of the above rights, please contact our Data Protection team at [email protected] or via our platform's live chat. We will process your request within 14 business days and notify you of the action taken.

8Data Retention Period

99spin retains your personal data only for as long as necessary for the purposes stated in this policy or to meet applicable legal obligations. Retention periods vary by data type:

Data Category Retention Period Reason
Active Account Data For as long as the account is active Ongoing service requirements
KYC Records 5 years after account closure AML legal requirements
Financial Transaction Records 7 years Audit and tax requirements
Support Communication Logs 2 years Dispute resolution
Analytics Cookie Data 13 months Usage trend analysis
Closed Account Data (Non-KYC) 1 year Prevention of fraudulent re-registration

Upon expiry of the retention period, data will be securely deleted or anonymised so it can no longer be linked to any individual. Anonymised data may be retained for analytics purposes without a time limit.

9Children's Privacy

The 99spin platform is exclusively for individuals aged 18 and above. We do not intentionally collect or process any personal information from individuals under the age of 18.

If you believe your child has registered an account on our platform without your knowledge, please contact us immediately at [email protected]. We will verify and close the account, and delete all associated data within 48 hours.

During the registration process, we request date of birth verification and identity document submission to confirm that members meet the minimum age requirement. These measures reflect our commitment to ensuring this platform is not accessed by minors.

10Amendments to the Privacy Policy

99spin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any amendments take effect immediately upon publication on our website.

We will notify you of important changes through:

  • In-platform notification when you log in.
  • Notification email sent to the address registered on your account.
  • A prominent notice on our homepage for 14 days after the amendment takes effect.

By continuing to use the 99spin platform after any amendments are published, you are deemed to have accepted and agreed to the latest version of the Privacy Policy. If you do not agree with the amendments, you may close your account by contacting our support team.

We recommend reviewing this Privacy Policy regularly — at least once every three months — to stay informed about how we handle your personal data.

11Contact Our Data Protection Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

Privacy Email

[email protected]

Response within 2 business days

Live Chat

Available 24/7 on the platform

Immediate response

Our Data Protection Officer (DPO) will review your complaint and respond within the stipulated timeframe. If you are unsatisfied with our response, you have the right to file a complaint with the Personal Data Protection Department of Malaysia or the relevant authority.

Safe, Trusted, and Transparent — That Is the 99spin Commitment

Your personal data is protected to the highest industry standards. Register now and enjoy a secure gaming experience alongside thousands of trusted 99spin members across Malaysia.

Register Now — Free Account Login
SSL 256-bit PDPA Compliant No Data Selling KYC Verified
Bahasa Melayu