Rujukan Laman

How spin999 Handles Your Personal Data

Your privacy matters to us, and this page sets out exactly how spin999 collects, stores and uses the personal data tied to your account — including details you…

Data collected only as neededTouch 'n Go, GrabPay, Boost dan FPX payment data protectedYour right to access and correct dataEncrypted account storageContact us anytime about your data
spin999 How spin999 Handles Your Personal Data
REACH OUR DATA TEAM

Open a Data Request With Our Team

If you want to exercise any of your data rights — access, correction, deletion or portability — our privacy support team is reachable through the channels below. We aim to respond to all data-related requests within 14 business days. For urgent account-security concerns, live chat is the fastest path to our team.

Team online

Live Chat

Available around the clock directly inside your account dashboard. Describe your data concern clearly and our team will open a request ticket for you within minutes.

Email Support

Send your data access or deletion request to our privacy inbox. Include your registered email address so we can verify your identity before processing any changes to your record.

Help Centre

Our Help Centre hosts step-by-step instructions for submitting a data request, updating consent settings, or reviewing the cookies active on your account session.

DATA HANDLING STANDARDS

See How We Protect and Manage Your Account Data

Every piece of data spin999 holds is handled according to the practices below. From the moment you open your account to the point you request deletion, we follow consistent processes designed to…

Encryption at Rest and in Transit

All account data — including your name, contact details and payment references — is encrypted using industry-standard TLS in transit and AES-256 at rest. This applies to every Touch 'n Go, GrabPay and Boost transaction record we store.

Cookie Management

We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used. You can review and adjust cookie preferences at any time from the cookie settings panel in your account.

Account Security Practices

Two-factor authentication is available on your account. We also monitor for unusual login patterns — such as access from an unrecognised device — and will prompt you to verify your identity before continuing.

Data Retention Schedule

Account profile data is retained for as long as your account remains active. Once you request closure, non-financial data is deleted within 30 days. Payment records required by applicable financial rules are retained for the regulatory minimum period.

Your Right to Request Changes

You may request a copy of all data we hold on you, ask us to correct inaccurate details, or request deletion of data we no longer need. Submit requests through live chat or our privacy email and we will respond within 14 business days.

Third-Party Data Sharing

We share data only with payment processors handling your Touch 'n Go, GrabPay, Boost dan FPX transactions, and with identity-verification partners where required. We do not share your data with advertisers or marketing brokers.

Frequently Asked Questions About Your Privacy

The questions below cover the most common concerns we hear from account holders about how their personal data is used, stored and protected on spin999. If your question is not answered here, reach us directly through live chat or email and our team will respond promptly.

We collect the name, email address, phone number and date of birth you provide during registration. We also record payment method identifiers when you transact via Touch 'n Go, GrabPay, Boost dan FPX, along with your device type and IP address for security purposes.

Transaction references from Touch 'n Go, GrabPay, Boost dan FPX are encrypted and stored in isolated payment logs. We do not store full card numbers or e-wallet credentials — only the reference tokens provided by the payment processor after a transaction completes.

Yes. Submit a data access request through live chat or our privacy email with your registered email address. We will verify your identity and send you a copy of all data we hold within 14 business days of confirming the request.

Contact our support team via live chat or email and state clearly that you are requesting deletion. We will remove non-financial account data within 30 days of account closure. Payment records subject to financial regulations are retained for the minimum required period only.

We do not sell or share your data with advertisers. Data is shared only with the payment processors who handle your transactions and with identity-verification services where required. All third-party processors are contractually bound to our data protection standards.

We use essential session cookies to keep your account active and analytics cookies to improve the lobby experience. You can view which cookies are active and withdraw consent for non-essential cookies at any time from the cookie settings panel inside your account.

Reach our privacy team immediately via live chat for the fastest response, or email us with a clear description of your concern. We will acknowledge your complaint within 2 business days and provide a full response within 14 business days of receipt.