SuperSpin Privacy Policy – Your Personal Data Protection

1 Introduction

Welcome to the SuperSpin Privacy Policy page. This document has been carefully prepared to inform you — as a user and member of the SuperSpin platform — of your privacy rights and how we handle every piece of information you entrust to us.

SuperSpin is an online casino platform operating in Malaysia. We understand that trust is the foundation of our relationship with every member. That is why we take a fully transparent approach to personal data management — not merely to comply with the law, but because it is simply the right thing to do.

This Privacy Policy applies to all information collected through superspin.vin, the SuperSpin mobile app, and all our official communication channels including live chat and customer support email.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

2 Personal Data We Collect

SuperSpin only collects data that is genuinely necessary to deliver a safe, seamless, and responsible service. The following are the categories of data we may collect from you:

Identity & Registration Data

• Full name as shown on a valid identity document
• Date of birth and gender
• National identity card (MyKad) or passport number
• Current residential address
• Nationality

Contact Data

• Active email address
• Mobile phone number

Financial & Transaction Data

• Bank account holder name
• Bank account number for withdrawal purposes
• E-wallet information (DuitNow, Touch 'n Go, GrabPay)
• Deposit, withdrawal, and wagering history

Technical & Usage Data

• IP address at login
• Device type and operating system
• Web browser type and version
• Session data and activity logs within the platform
• Cookie and similar tracking technology data

Data Summary Table

3 How We Collect Data

Your personal data is collected through various channels within the SuperSpin ecosystem. We always ensure this collection process takes place lawfully and with your knowledge:

Directly from You

You provide data to us voluntarily when:

• Registering a new account on the superspin platform
• Completing the identity verification (KYC) process
• Making a deposit or submitting a withdrawal request
• Contacting our customer support team
• Updating your account profile
• Filling in a feedback form or satisfaction survey

Automatically

When you use our platform, our systems automatically record technical information such as IP address, device type, login and logout times, and gaming activity. This data is used solely for security, system debugging, and user experience improvement purposes.

From Trusted Third Parties

In certain situations, we may receive data from trusted third parties, including:

• Identity verification service providers for the KYC process
• Payment gateway providers to verify transaction status
• Authorised fraud prevention agencies

4 Purpose of Data Use

Every piece of data we collect has a clear and legitimate purpose. SuperSpin does not use your data for any purpose not stated in this policy:

• Account Management: To register, verify, and securely maintain your member account.
• KYC & AML Compliance: To meet legal requirements related to identity verification and anti-money laundering.
• Transaction Processing: To process deposits and withdrawals accurately and securely.
• Platform Security: To detect and prevent fraud, unauthorised access, and suspicious activity.
• Customer Support: To respond to enquiries, resolve complaints, and provide technical support.
• Product Improvement: To understand usage patterns and improve your gaming experience on the platform.
• Service Communications: To send important notifications related to your account, transactions, and system updates.
• Targeted Marketing (with consent): To send relevant promotional offers and bonuses — only if you have consented to receive them.
• Legal Compliance: To fulfil applicable legal and regulatory obligations.

5 Data Sharing & Disclosure

Superspin does not sell, rent, or trade your personal data to any party for marketing purposes. Data sharing only occurs in limited and lawful circumstances as follows:

Internal Service Providers

We share data with companies that help us operate the platform, including cloud infrastructure providers, licensed game software suppliers, and payment service providers. All such parties are bound by strict data processing agreements.

Authorities & Legal Requirements

We may disclose your data to government authorities, law enforcement agencies, or courts when required to do so under applicable Malaysian law. In such situations, we will notify you in advance where legally permitted.

Business Transfer

In the event of any merger, acquisition, or sale of company assets, members' personal data may be transferred as part of that process. You will be notified in advance, and the same or stricter privacy standards will apply to your data.

6 Data Protection Measures

SuperSpin invests seriously in security infrastructure to ensure your personal data remains protected at all times. The following are some of the protection layers we employ:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 — the highest industry standard.
• Two-Factor Authentication (2FA): You can enable an additional security layer for your account via OTP verification at login.
• Strict Access Control: Only designated staff with an operational need are permitted to access user data, and all access is logged and audited on a regular basis.
• 24/7 Monitoring: Our systems are continuously monitored to detect any unusual activity or attempted data breaches.
• Separate Storage: Sensitive data such as financial information is stored separately from general profile data with additional access control layers.
• Regular Penetration Testing: We conduct regular security audits and independent penetration testing to identify and address any system vulnerabilities.

7 Data Retention Period

SuperSpin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our data retention guidelines:

Once the retention period has expired, your data will be securely deleted or anonymised in accordance with established procedures. Anonymised data may be used for analytical purposes and cannot be re-linked to any individual.

8 Cookies & Tracking Technologies

SuperSpin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform to help us improve the user experience. All data is collected anonymously.
• Functional Cookies: Saving your preferences such as language and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Used to understand overall platform navigation and usage patterns for improvement purposes.

Managing Your Cookie Preferences

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect platform functionality and your login experience.

9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. SuperSpin fully respects and facilitates each of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your data. This right is subject to our legal data retention obligations.
• Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will process your request within 30 working days. In complex cases, this period may be extended with written notice to you.

10 Children's Privacy

The SuperSpin platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

11 Amendments to the Privacy Policy

SuperSpin reserves the right to update or modify this Privacy Policy at any time. Amendments take effect immediately upon publication on this page. The "Updated" date at the top of the page will reflect the date of the most recent revision.

For material and significant amendments, we will notify members via:

• In-platform notifications upon login
• Email to the email address registered to your account
• A clear notice on the superspin.vin homepage

Your continued use of the platform after any amendments to this Privacy Policy constitutes your acceptance of the updated version. If you disagree with the changes, you have the right to close your account before they take effect.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we are here to help:

• Data Protection Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the platform
• FAQ: Visit page FAQ us for a quick response

We are committed to responding to all privacy-related enquiries within 5 business days. For urgent matters or data breach concerns, please contact us via live chat for an immediate response.