SpinCity Cash Privacy Policy – Our Commitment to Protecting Your Personal Data

1 Introduction

SpinCity Cash ("we", "platform", or "SpinCity Cash") is the data controller responsible for processing your personal information when you use our online casino platform at spincity.cash.

This Privacy Policy explains how SpinCity Cash collects, uses, discloses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect the privacy of every player and are committed to keeping your information secure and handling it responsibly.

By registering a SpinCity Cash account or using any of our services, you consent to the processing of your personal data as described in this Privacy Policy. If you do not agree, please do not register for or use SpinCity Cash services.

2 Personal Data We Collect

SpinCity Cash collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

3 How SpinCity Cash Uses Your Data

SpinCity Cash uses your personal data for the following purposes:

• Account Management: Creating and managing your SpinCity Cash account, including identity verification and the KYC process
• Service Delivery: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay; processing MYR withdrawals; and providing access to all SpinCity Cash games
• Platform Security: Detect and prevent fraud, money laundering, and other illicit activities that may occur on the SpinCity Cash platform
• Communications: Sending account information, transaction notifications, service updates, and (with your consent) relevant SpinCity Cash bonus promotions
• Legal Compliance: Comply with applicable legal and regulatory requirements, including anti-money laundering (AML) and know your customer (KYC) obligations
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support
• Platform Improvements: Analysing how players use SpinCity Cash to improve the user experience, resolve technical issues, and develop new features

4 Legal Basis for Data Processing

SpinCity Cash processes your personal data on the following legal bases in accordance with Malaysia's PDPA 2010:

• Consent: When you provide explicit consent, such as when registering a SpinCity Cash account or subscribing to our marketing communications
• Contract: When processing is necessary to fulfil the contract between you and SpinCity Cash, including processing deposits and withdrawals in MYR
• Legitimate Interests: Where SpinCity Cash has a legitimate business interest, such as detecting fraud, enhancing platform security, and conducting internal analysis
• Legal Obligation: When processing is necessary to comply with applicable Malaysian law, including reporting obligations to the relevant authorities

5 Third-Party Data Sharing

SpinCity Cash does not sell your personal data. However, we may share your data in the following limited circumstances:

• Service Providers: Technical and service partners that help SpinCity Cash operate, such as game software providers, Malaysian payment processors (including FPX, TNG, GrabPay, and DuitNow networks), and cloud computing services. All such third parties are bound by strict confidentiality agreements.
• Authorities: When SpinCity Cash is required by law or court order to disclose data to the relevant Malaysian authorities, including Bank Negara Malaysia, the Royal Malaysia Police, and financial regulatory bodies
• Fraud Investigation: To bodies involved in fraud prevention and financial crime where SpinCity Cash has reasonable grounds to believe fraudulent activity is taking place
• Business Transfers: In the event that SpinCity Cash is involved in a merger, acquisition, or asset sale, player data may be transferred as part of that transaction, subject to notice being provided to players

6 International Data Transfers

In the course of its operations, SpinCity Cash may need to transfer your personal data to countries outside Malaysia, particularly in relation to cloud server infrastructure and international gaming technology providers.

When SpinCity Cash transfers your data outside Malaysia, we ensure that protection equivalent to Malaysia's PDPA standards is upheld through the following mechanisms:

• Contractually binding data protection agreements with overseas data recipients
• Transfers only to countries recognised as providing an adequate level of data protection
• Use of approved standard contractual clauses to ensure the security of your data at the international level

7 Data Retention Period

SpinCity Cash retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by Malaysian law:

• Active Account Data: For the duration your SpinCity Cash account remains active, plus any additional period required after account closure for legal compliance purposes
• Financial Transaction Records: Minimum 7 years from the transaction date, in line with Malaysian financial legal requirements
• KYC & Identity Verification Data: Minimum 5 years after account closure, in line with anti-money laundering requirements
• Communication Logs: 2 years from the date of communication, for dispute resolution and audit purposes
• Gaming Data: 3 years, for the purposes of winnings verification, fairness auditing, and dispute resolution

Once the retention period has elapsed, SpinCity Cash will securely delete or destroy your personal data using methods that prevent unauthorised access or recovery.

8 Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by SpinCity Cash:

9 Data Security at SpinCity Cash

SpinCity Cash implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Data Encryption: All stored and transmitted data is protected with AES-256 and SSL/TLS 256-bit encryption
• Two-Factor Authentication (2FA): SpinCity Cash offers two-factor authentication for all player accounts as an added layer of security.
• Firewalls & Monitoring: SpinCity Cash's infrastructure is protected by enterprise-grade firewalls and intrusion detection systems operating 24/7
• Regular Security Audits: SpinCity Cash conducts regular independent penetration testing and security audits.
• Staff Training: All SpinCity Cash staff who handle personal data receive comprehensive data protection training.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only, on a strictly need-to-know basis

While SpinCity Cash takes all reasonable precautions, no security system is 100% impenetrable. In the event of a data breach involving your personal data, SpinCity Cash will notify you and the relevant authorities within the timeframe required by law.

10 Cookies & Tracking Technologies

SpinCity Cash uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the SpinCity Cash platform.

11 Children's Privacy

The SpinCity Cash platform is intended for individuals aged 18 years and above only. SpinCity Cash does not knowingly collect, use, or store the personal data of individuals under the age of 18.

If SpinCity Cash becomes aware that personal data of an underage individual has been collected without parental or guardian knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their child has provided personal data to SpinCity Cash are encouraged to contact us immediately at privacy@spincity.cash.

12 Changes to This Privacy Policy

SpinCity Cash reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Displaying clear notices on the SpinCity Cash platform
• Sending email notifications to registered players regarding important changes

Your continued use of the SpinCity Cash platform after any changes are published will be considered acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

13 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how SpinCity Cash handles your personal data, please contact our Data Protection Officer:

SpinCity Cash will respond to all privacy-related enquiries within 30 working days. For urgent matters requiring immediate action regarding account security, please use the live chat function available 24/7 on the SpinCity Cash platform.

If you are not satisfied with SpinCity Cash's response, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant Malaysian data protection authority.