Privacy Policy Spinking33 – Our Commitment to Protecting Your Personal Data

Spinking33 collects your personal information transparently and only when it is genuinely necessary to deliver our services effectively. We do not collect excessive or irrelevant data beyond what is required to operate the platform. Below are the categories of data we collect and the reasons they are needed.

The information you provide during the spinking33 registration process – including your full name, phone number and email address – is the basic information required to create and manage your account. Without this, we are unable to deliver our services securely. For certain financial transactions, particularly withdrawals above a specified threshold, we may request a copy of an identity verification document such as your MyKad or Malaysian passport.

Every piece of data we collect has a clear and specific purpose. spinking33 does not use your data for purposes beyond the scope described below without your consent. Here is a full overview of how we use the personal data of Malaysian players on our platform.

• Account management: Creating and maintaining your spinking33 account, processing registrations, verifying identity and managing access credentials to our services.
• Financial transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX; processing withdrawal of winnings; generating transaction records and account statements for your reference.
• Provision of betting services: Giving you access to all games and betting markets on spinking33 — from slots and Live Casino to Sports Betting on EPL football, Liga Super Malaysia, BWF badminton and esports.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and any unauthorised access to your account. This is a critical use that protects both you and all other spinking33 players.
• Service communications: Sending account-related notifications, transaction confirmations, security alerts and important service updates. These are not marketing communications — they are necessary operational communications.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support, and implementing deposit limits or self-exclusion periods at your request.
• Platform improvements: Analysing aggregated and anonymised usage data to understand how players use the spinking33 platform and to make relevant improvements to the user experience.
• Marketing communications (with consent): Sending you information about spinking33 promotions, bonuses and special offers – only where you have given consent to receive such communications. You may withdraw this consent at any time.

Spinking33 processes your personal data on a valid legal basis. Understanding these bases helps you know your rights in the context of each type of data processing we carry out.

• Contract performance: The majority of our data processing is necessary to fulfil the service agreement between you and spinking33 – including account management, transaction processing and providing access to games. Without this processing, we are unable to provide services to you.
• Legitimate interests: Certain processing activities — such as fraud prevention, platform security and usage analytics — serve the legitimate interests of spinking33 and our players as a whole. These interests do not override your privacy rights when exercised responsibly.
• Legal obligation: Certain data processing is mandatory under applicable legal requirements – including KYC (Know Your Customer) obligations, anti-money laundering requirements, and the retention of financial records for periods prescribed by Malaysian law.
• Your consent: For marketing communications and certain types of analytics cookies, we rely on the explicit consent you provide. You may withdraw this consent at any time without affecting the validity of any processing carried out beforehand.

Spinking33 does not sell your personal data to anyone. Full stop. That said, to deliver a complete and secure service to you, we do need to share certain data with trusted third-party service providers. Below are the categories of parties who may receive some of your data and the reasons why.

• Technology infrastructure providers: Server hosting companies and cloud infrastructure providers that store your data in a secure and reliable environment. All such providers are bound by strict confidentiality agreements with spinking33.
• Game providers: Companies such as Pragmatic Play, PG Soft, and Evolution Gaming receive the session data required to deliver their games to you. They do not receive your personal financial information.
• Payment gateway providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) providers receive the transaction information required to process your deposits and withdrawals. Each of these providers has its own privacy policy governing the protection of your financial data.
• Fraud prevention agencies: Where there is substantial evidence of fraud, money laundering or other illegal activity, spinking33 may be required by law to share information with the relevant authorities in Malaysia.
• Professional advisors: Lawyers, accountants, or consultants involved in spinking33's operations may need to access certain data in the course of their professional work, subject to strict professional confidentiality obligations.

Spinking33 continuously invests in security infrastructure that meets the highest industry standards. We understand that your trust in us depends on our ability to protect your data from unauthorised access, disclosure, alteration or destruction.

Key technical security measures we have in place include 256-bit SSL encryption for all communications between your device and spinking33's servers – the same standard used by leading Malaysian banking institutions such as Maybank and CIMB. Your password is stored in an irreversible hashed format, meaning that even in the event of unauthorised system access, your actual password will not be exposed.

• End-to-end encryption: All data transmitted across our network is encrypted using the latest TLS protocol, protecting your data from interception in transit.
• Role-based access control: spinking33 staff only have access to the data required for their specific role. Customer support managers, for instance, do not have access to full financial data.
• 24/7 security monitoring: Our systems are continuously monitored for suspicious activity, unauthorised access attempts, and anomalies that may indicate a security threat.
• Regular security audits: spinking33 conducts regular internal and external security audits to identify and address any vulnerabilities before they can be exploited.
• Secure data backup: Your data is backed up regularly to secure, separate locations to ensure prompt recovery in the event of any system disruption.
• Staff training: All spinking33 staff who handle personal data receive regular data security training to ensure best practices are upheld at all times.

Spinking33 does not retain your personal data indefinitely. We only keep your data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. The following guidelines outline our data retention periods.

• Active account data: For as long as your spinking33 account remains active, we retain all data necessary to operate it securely and effectively.
• Financial transaction records: All deposit and withdrawal transaction records are retained for a minimum of seven (7) years in accordance with financial compliance requirements and anti-money laundering laws in Malaysia.
• Identity verification (KYC) data: Identity verification documents provided to us are retained for seven (7) years from the date of verification or the date of account closure, whichever is later.
• Support communication records: Live chat logs and support email records are retained for three (3) years for reference and dispute resolution purposes.
• Technical data and system logs: Access logs, security logs, and technical data are retained for twelve (12) months for security and threat detection purposes.
• After account closure: When your account is closed at your request, we will delete or anonymise data that is no longer needed within 90 days, subject to the legal retention requirements outlined above.

You have important rights regarding the personal data spinking33 holds about you. These rights exist to ensure you always remain in control of your own information. Below is an overview of your rights and how to exercise them.

To exercise any of the above rights, contact the spinking33 support team via live chat or email at support@spinking33.asia, clearly stating the right you wish to exercise and the relevant details. We will verify your identity before processing your request and will respond within 30 calendar days.

Spinking33 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit spinking33. They allow us to recognise you on return visits and deliver a more personalised, seamless experience.

• Essential cookies (required): These cookies are required for the platform's core functions — including login authentication, session management and platform security. Without them, spinking33 cannot operate properly. These cookies cannot be disabled if you wish to use our platform.
• Preference cookies: These cookies save your preferences such as interface language, display settings and game preferences, so you don't have to reconfigure them every time you log in to spinking33.
• Analytics cookies: These cookies help us understand how players use the spinking33 platform — which pages are visited most, how long a typical session lasts, and where players run into difficulties. This data is used in aggregated form to improve the platform.
• Security cookies: These cookies are used to detect suspicious activity, prevent CSRF attacks, and protect your account from unauthorised access.

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and usability of the spinking33 platform. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

Spinking33 takes the protection of minors extremely seriously. Our platform is exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.

If we discover that data belonging to anyone under the age of 21 has been collected without appropriate consent, we will take immediate steps to delete that information from our records and close the account in question. Parents or guardians who believe their child or ward may have registered an account with spinking33 are urged to contact us immediately at support@spinking33.asia.

Spinking33 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements or improvements to our services. When material changes are made, we will notify you via an in-platform notice and/or by email to your registered address.

The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to review this policy periodically to stay informed about how we protect your information. Continued use of the spinking33 platform after any amendments take effect will be considered your acceptance of the revised policy.

For any enquiries, requests or complaints regarding your data privacy at spinking33, you may contact us through the following channels:

• Live chat: Available on the spinking33 platform – response time under 3 minutes, 24 hours a day, 7 days a week.
• Email: support@spinking33.asia – for privacy-related enquiries, please include "Privacy Enquiry" in the subject line.
• Response time: We are committed to providing an initial response within 48 hours and resolving data rights requests within 30 calendar days.