SpinWin77 Privacy Policy

SpinWin77 ("we", "us", "our", "the Platform") operates as an international online casino and sports betting platform accessible at spinwin77.cam. We understand that your personal data is important to you, and we are committed to processing it lawfully, fairly, and transparently in accordance with applicable data protection standards.

This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information relating to individuals who access or use SpinWin77's services ("you", "the Player", "the Data Subject"). It applies to all personal data collected through the SpinWin77 website, mobile interface, customer support interactions, and any other channel through which you engage with us.

This Policy should be read in conjunction with SpinWin77's Terms & Conditions and Responsible Gambling Policy, both of which form part of the contractual relationship between you and SpinWin77.

By registering an account on SpinWin77 or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood the practices described herein. If you do not agree with any aspect of this Policy, you must discontinue your use of the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

SpinWin77 collects Personal Data through several channels, including direct submission during account registration, automatic collection during platform use, and third-party verification services. The categories of Personal Data we collect are as follows:

• Full legal name as it appears on a government-issued identity document;
• Date of birth (for age verification purposes — all players must be 21 years of age or older);
• Gender (optional, for personalisation purposes);
• Nationality and country of residence;
• Malaysian National Identity Card (MyKad) number or passport number, collected as part of the KYC verification process; and
• Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam).

• Email address (used for account correspondence, security alerts, and promotional communications where you have opted in);
• Malaysian mobile phone number or international equivalent (used for two-factor authentication and account security).

• Deposit and withdrawal transaction records, including amounts denominated in Malaysian Ringgit (MYR), timestamps, and payment method used;
• Partial payment identifiers as provided by Malaysian payment processors (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank) — SpinWin77 does not store full card numbers or banking credentials;
• Wallet balance history and transaction ledger; and
• Source of funds declarations where required for AML compliance.

• Betting and gaming activity records, including game history, stake amounts, winnings, and session duration;
• Sports betting market selections, including EPL, Liga Super Malaysia, and other covered markets;
• Platform navigation patterns and feature usage;
• Responsible gambling tool interactions (deposit limits, session timers, self-exclusion requests); and
• Customer support interaction records, including live chat transcripts and email correspondence.

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens; and
• Cookie and tracking data as described in Section 7.

SpinWin77 processes your Personal Data only for specified, explicit, and legitimate purposes. The primary purposes for which we process your data are as follows:

SpinWin77 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing necessary to perform the contract between you and SpinWin77 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing carried out for SpinWin77's legitimate business interests, including fraud prevention, platform security, and product improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

SpinWin77 does not sell your Personal Data to third-party advertisers or data brokers. We disclose Personal Data to third parties only in the following circumstances:

We share transaction-relevant data (name, account identifiers, transaction amounts in MYR) with Malaysian payment processors — including providers operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank payment rails — solely to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial data protection regulations.

We engage specialist third-party KYC verification service providers to assist with identity document verification and age confirmation. These providers act as Data Processors and are contractually bound to process your identity data solely for the purpose of completing your verification, in accordance with our instructions and applicable data protection law.

Game studio partners integrated into the SpinWin77 platform may receive session-level technical data (player session token, stake amounts, game outcomes) necessary to deliver and settle the game. These integrations are governed by data processing agreements that restrict use of this data to service delivery purposes only. Real-name or contact data is not disclosed to game studios.

SpinWin77 will disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where required by law, regulation, or a legally valid order. We will, where legally permissible, notify you of any such disclosure request prior to compliance.

In the event of a merger, acquisition, restructuring, or sale of all or part of SpinWin77's business, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to the data controller's identity prior to the transfer becoming effective.

SpinWin77 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and analyse usage patterns. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as language, display settings, and responsible gambling tool configurations, so you do not need to re-enter them at each session.
• Analytics Cookies: Collect aggregated and anonymised data about how players use the platform, which pages are most visited, and how navigation flows occur. This data is used solely to improve platform performance and user experience. No individual betting history or personal financial data is shared with analytics providers.
• Marketing Cookies: Used to deliver relevant promotional content within the platform to users who have opted into marketing communications. These are not used to track your browsing activity outside of spinwin77.cam.

You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will affect your ability to log in and use core platform features. Blocking analytics or marketing cookies will not affect your ability to bet, deposit, or withdraw.

SpinWin77 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applicable to key data categories are as follows:

Upon the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be linked to any identifiable individual.

SpinWin77 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.3 Encryption: All data transmitted between your device and the SpinWin77 platform is encrypted using TLS 1.3 protocol, preventing interception by third parties.
• Data Encryption at Rest: Sensitive personal and financial data stored in SpinWin77's systems is encrypted at rest using industry-standard AES-256 encryption.
• Two-Factor Authentication (2FA): All player accounts support 2FA to prevent unauthorised access even in the event of credential compromise.
• Access Controls: Access to personal data within SpinWin77's organisation is restricted on a strict need-to-know basis. Employees and contractors are permitted access only to the data required to perform their specific role.
• Regular Security Audits: SpinWin77 conducts periodic third-party security audits and penetration testing to identify and remediate vulnerabilities in its infrastructure.
• PCI-DSS Compliant Payment Processing: All payment data is processed through PCI-DSS certified payment gateways. SpinWin77 does not store full card numbers or banking credentials on its own servers.

Subject to applicable law and certain limitations arising from our legal obligations (including AML record-keeping requirements), you have the following rights with respect to your Personal Data held by SpinWin77:

To exercise any of these rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and respond substantively within 30 calendar days, or inform you if additional time is required.

Please note that certain rights may be limited or overridden where SpinWin77 is required by law to retain specific data — for example, AML and KYC records that must be maintained for a minimum of 5 years regardless of account closure.

SpinWin77 maintains a strict minimum age policy of 21 years for all registered users. The platform does not knowingly collect Personal Data from any person under the age of 21. Age is verified through the mandatory KYC process prior to the activation of withdrawal privileges and full account functionality.

If SpinWin77 becomes aware that an account has been registered by or on behalf of a person under 21 years of age, we will immediately suspend and close that account, delete or anonymise all associated Personal Data to the extent permitted by law, and handle any wallet balance in accordance with applicable regulations and the circumstances of the underage registration.

If you are a parent or guardian and believe that a minor in your care has registered an account on SpinWin77, please contact us immediately at [email protected].

The SpinWin77 platform does not contain links to external third-party websites. All payment method references (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank) are to services integrated within the SpinWin77 payment infrastructure; players interact with these payment providers directly through their own authenticated interfaces, which operate under those providers' own privacy policies.

SpinWin77 is not responsible for the privacy practices of any third-party service provider, payment processor, or game studio partner operating under its own independent privacy policy. We encourage you to review the privacy policies of any third-party service you use in connection with deposits or withdrawals to your SpinWin77 account.

As an international online gaming platform, SpinWin77 may process or store your Personal Data on servers located outside of Malaysia. Where Personal Data is transferred to countries that do not provide a level of data protection equivalent to that applicable in Malaysia, SpinWin77 will implement appropriate safeguards — such as contractual data transfer clauses or equivalent mechanisms — to ensure your Personal Data receives an adequate level of protection.

By registering and using SpinWin77, you acknowledge that your Personal Data may be transferred to and processed in countries outside of Malaysia for the purposes described in this Policy. SpinWin77 will always ensure that such transfers are conducted in compliance with applicable data protection law and that your rights as a Data Subject are preserved.

SpinWin77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made, we will update the "Last Updated" date at the top of this page and notify registered users via email or in-platform notification at least 7 days prior to the changes taking effect.

Non-material changes (such as typographical corrections or clarifications that do not alter the substance of our data processing practices) may be made without advance notice. Your continued use of the SpinWin77 platform following the effective date of any revised Policy constitutes your acceptance of those revisions.

The current version of this Privacy Policy will always be accessible at spinwin77.cam/privacy-policy. We recommend reviewing this page periodically to stay informed of any changes.

For all privacy-related enquiries, data subject rights requests, or complaints relating to the processing of your Personal Data by SpinWin77, please contact us using the details below. All privacy enquiries will be handled with strict confidentiality.

If you are not satisfied with SpinWin77's response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Malaysian residents may contact the Personal Data Protection Department (PDPD) under the Ministry of Communications and Digital, Malaysia, which administers the Personal Data Protection Act 2010 (PDPA).