Your privacy matters to us. This Privacy Policy explains in clear, structured terms what personal data Spin707 collects from you, the purposes for which it is processed, how it is stored and protected, and the rights available to you as a data subject. Please read this document carefully before using the Platform.
Last Updated: 1 January 2026Spin707 ("the Platform", "we", "us", "our") is committed to protecting the personal data of all individuals who use or interact with the spin707.click website and its associated services. This Privacy Policy ("Policy") sets out how we collect, use, store, disclose, and otherwise process personal data in connection with the operation of the Spin707 online gaming platform.
This Policy applies to all registered players, prospective users who browse the Platform, and any individual whose personal data is submitted in connection with the Platform's services — including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia generally.
By accessing the Platform or creating a Spin707 account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please discontinue use of the Platform immediately.
We collect your personal data to operate your account, process transactions, verify your identity, and comply with our international licensing obligations. We do not sell your data to third parties. We use industry-standard encryption to protect everything you share with us. You have the right to access, correct, or request deletion of your data at any time.
The following terms, when used in this Policy, have the meanings set out below:
Spin707 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, Spin707 is responsible for determining how and why your personal data is processed, and for ensuring that such processing complies with applicable data protection standards under our international licensing framework.
Spin707 operates under international gaming licensing. While Malaysia does not have a comprehensive data protection law that applies specifically to this Platform's international operations, Spin707 voluntarily adheres to internationally recognised data protection principles consistent with GDPR frameworks, as a baseline standard of care for all players regardless of location.
For all data-related enquiries, including requests to exercise your rights as a Data Subject, please contact us via the details set out in Section 15 of this Policy.
Spin707 collects personal data across several categories, depending on how you interact with the Platform. The specific data collected includes, but is not limited to, the following:
When you create a Spin707 account, we collect the personal information you provide, which typically includes: full legal name, date of birth, email address, mobile phone number, and preferred currency (MYR).
To comply with our international licensing obligations and to process withdrawals, we collect identity verification documents including: government-issued photo ID (Malaysian MyKad, Passport, or Driver's Licence), proof of residential address (utility bill or bank statement), and in certain cases, a selfie photograph submitted alongside the ID document.
We collect information necessary to process deposits and withdrawals via your chosen payment method. This may include: e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account reference information (for FPX, DuitNow, Maybank, CIMB, and other banks), cryptocurrency wallet addresses, and transaction history within your Spin707 account. We do not store full card numbers or full bank account numbers on our systems.
When you access the Platform, we automatically collect certain technical data, including: IP address, device type and operating system, browser type and version, session duration, pages visited, game activity logs, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance improvement.
If you contact our support team via live chat or email, we retain records of those communications, including timestamps, the content of messages, and any attachments shared. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
| Data Category | Examples | Purpose |
|---|---|---|
| Registration Data | Name, email, date of birth, phone number | Account creation, eligibility verification |
| KYC Data | MyKad, Passport, address proof, selfie | Identity verification, anti-fraud, AML |
| Financial Data | Payment method IDs, transaction history | Deposit / withdrawal processing |
| Usage Data | IP address, device info, game logs | Security, fraud prevention, analytics |
| Communications Data | Live chat and email records | Support, dispute resolution, compliance |
Spin707 processes your personal data for the following specific purposes:
To create, maintain, and administer your Spin707 player account, including applying and enforcing account settings, bonus eligibility, deposit limits, and responsible gambling tools you have activated.
To facilitate deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and cryptocurrency networks. Payment data is transmitted to licensed payment processors using encrypted connections and is not stored in plaintext on our servers.
To conduct Know Your Customer (KYC) checks, verify player age and identity, and comply with anti-money laundering (AML) obligations imposed by our international licensing framework. KYC verification is a mandatory requirement for processing withdrawals and for continued platform access above certain transaction thresholds.
To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct as defined in our Terms & Conditions. Automated monitoring systems and manual review processes are employed for this purpose.
To respond to enquiries, resolve disputes, process self-exclusion requests, and provide general assistance to players via live chat and email support.
To analyse Platform usage patterns, game performance, payment method adoption, and support interactions in order to improve the product experience for Malaysian players. Analytics data is processed in aggregated or pseudonymised form wherever technically feasible.
Where you have provided explicit consent, to send promotional communications including bonus offers, new game announcements, and platform updates via email or other channels. You may withdraw consent to marketing communications at any time by contacting our support team, without affecting the lawfulness of prior processing.
Spin707 processes your personal data under one or more of the following legal bases:
Spin707 does not sell your personal data to third parties under any circumstances. We share your data only where strictly necessary and with appropriate safeguards in place:
Personal and financial data is shared with licensed payment processing partners as required to execute deposit and withdrawal transactions. This includes e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX and DuitNow infrastructure providers, and cryptocurrency processing services. All payment processors are bound by contractual data protection obligations.
Identity documents submitted during the KYC process may be transmitted to third-party identity verification service providers operating under the Platform's licensing framework. These providers process identity data solely for verification purposes and are contractually prohibited from using it for any other purpose.
We may disclose personal data to regulatory authorities, law enforcement bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent required and will be notified to you where legally permissible.
We may share data with affiliated entities or service providers (such as cloud hosting providers, email delivery services, and fraud analytics platforms) strictly on a need-to-know basis and subject to contractual data processing agreements. These providers act only on our instructions and do not have independent authority to process your data.
Spin707 does not sell, rent, or trade your personal data to third-party marketing organisations, data brokers, or advertisers. Your data is used only for the operational, legal, and support purposes described in this Policy. If you receive unsolicited contact claiming to be from Spin707 via a channel you did not register for, please contact our support team immediately.
Spin707 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by our licensing obligations or applicable law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | Licensing compliance, AML obligations |
| KYC / Identity Documents | Duration of account + 5 years post-closure | Regulatory requirement under gaming licence |
| Transaction Records | Minimum 5 years from transaction date | AML compliance, dispute resolution |
| Support Communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Usage / Technical Logs | Up to 12 months | Security monitoring, fraud investigation |
| Marketing Consent Records | Until consent is withdrawn + 12 months | Demonstrating consent compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Data that has been anonymised and can no longer be attributed to an identifiable individual is not subject to this Policy.
Spin707 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
Notwithstanding these measures, no digital system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Spin707 will notify affected individuals as required under applicable standards.
You are responsible for maintaining the confidentiality of your Spin707 account credentials. Do not share your username or password with any third party. If you suspect that your account has been accessed without your authorisation, contact our support team immediately via live chat to initiate an account security review.
Spin707 uses cookies and similar tracking technologies on the Platform to deliver and improve the user experience. The types of cookies we use are as follows:
These cookies are essential for the Platform to function correctly. They enable core features such as session management, login authentication, and access control. The Platform cannot operate without these cookies, and they do not require your consent.
These cookies enable the Platform to remember your preferences and personalisation settings — such as your preferred language, display settings, and last visited game category. Disabling these cookies may reduce the quality of your Platform experience.
We use analytics cookies to understand how players interact with the Platform — including which pages are visited most frequently, where users spend time, and how they navigate between sections. This data is used in aggregate form to improve Platform performance. These cookies do not identify you personally.
Certain cookies are used specifically for fraud detection and account security purposes — for example, to identify unusual login patterns or to flag suspicious payment activity. These cookies are necessary for maintaining the security of your account and the Platform.
You may control cookie settings through your browser preferences. Note that disabling strictly necessary or security cookies may prevent you from accessing certain Platform features or your account entirely.
Given that Spin707 is an internationally licensed platform serving players across multiple countries including Malaysia, your personal data may be transferred to and processed in jurisdictions outside Malaysia. This includes data stored on cloud infrastructure, processed by KYC verification providers, and transmitted through international payment networks.
Where personal data is transferred internationally, Spin707 ensures that appropriate safeguards are in place — including contractual data processing agreements with Data Processors that require them to maintain data protection standards equivalent to those applied by Spin707 itself.
By using the Platform, you acknowledge and consent to the transfer of your personal data to international jurisdictions as described in this section, where required for the provision of Platform services.
As a Data Subject whose personal data is processed by Spin707, you have a number of rights in respect of that data. These rights, and how to exercise them, are described below. To exercise any of these rights, contact our support team via the details in Section 15.
You have the right to request a copy of the personal data Spin707 holds about you. We will provide this within a reasonable timeframe upon verified request. You may request details of what data is held, why it is processed, and who it has been shared with.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For account details such as email address or phone number, you may update these directly through your account settings or by contacting support.
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies. Note that data subject to regulatory retention obligations (such as KYC records) cannot be deleted until the mandatory retention period expires.
You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending a determination of our legitimate interests.
Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.
You have the right to object to processing conducted on the basis of legitimate interests, including profiling and direct marketing. Upon receipt of a valid objection to marketing, we will cease processing your data for that purpose immediately.
The Spin707 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from minors. If we become aware that personal data has been submitted by or on behalf of an individual under the age of 21, we will promptly delete that data and close the associated account.
Our KYC verification process is specifically designed to confirm player age as part of identity verification. Any player who fails to demonstrate they are aged 21 or above during KYC review will have their account suspended and their data handled in accordance with our licensing obligations.
If you are a parent or guardian and believe that a minor may have registered an account on our Platform using falsified information, please contact our support team immediately via live chat or email so that we can investigate and take appropriate action.
Spin707 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. Material changes to this Policy will be communicated to registered players via email notification to the address on file, at least 14 days prior to the effective date of the change where reasonably practicable.
The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically.
If you have any concerns about changes to this Policy, please contact our support team before the effective date of the revision.
For all data protection and privacy enquiries — including requests to exercise your rights as a Data Subject, questions about this Policy, or concerns about how your personal data is being handled — please contact the Spin707 team through the following channels:
When submitting a data subject rights request, please include your registered email address, the specific right you wish to exercise, and sufficient detail to allow us to identify your account and process your request accurately. We may require identity verification before fulfilling certain rights requests to protect against fraudulent data access.
For general questions about the Platform's legal framework, please refer to our Terms & Conditions. For responsible gambling-related matters, including self-exclusion requests, please visit our Responsible Gambling page.
These are the core privacy principles that guide how Spin707 handles your personal data. Full details are in the policy above.
All personal data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption — the same standard used by major banks and financial institutions in Malaysia and globally.
Your personal data is never sold, rented, or traded to third-party marketers, data brokers, or advertisers. We share data only where strictly required to operate your account or comply with licensing obligations.
You have the right to access, correct, restrict, port, or request erasure of your personal data at any time. Submit your request via live chat or email and we will process it in accordance with applicable standards.
Identity documents submitted during verification are encrypted at rest and transmitted only to licensed KYC service providers. We never share your MyKad or Passport data with unrelated third parties.
We retain your data only as long as required — typically 5 years post-account closure for KYC and transaction records, in line with international gaming licensing obligations. Data is securely deleted thereafter.
When we update this Privacy Policy in a material way, we notify registered players by email before changes take effect. You are never left guessing about what has changed or why.
If you have questions about how Spin707 handles your personal data, want to exercise your data subject rights, or simply want to understand more about our privacy practices — our support team is available 24/7 via live chat. For players aged 21 and above only.
Spin707 operates under international gaming licensing. 21+ only. Online gambling may not be legal in all jurisdictions. Please verify applicable local laws before participating.