nextspin Privacy Policy

1. Who We Are

nextspin ("we", "our", "us") is an online gaming platform operating at https://nextspin.lat, offering slots, live casino games including Dragon Tiger, sports betting via our sportsbook, and related entertainment services to players in Malaysia. For the purposes of this Privacy Policy, nextspin acts as the data controller in respect of the personal data you provide to us.

By accessing or using any part of the nextspin platform — whether through a desktop browser in Kuala Lumpur, a mobile device in Penang, or anywhere else in Malaysia — you acknowledge that you have read, understood and agreed to the practices described in this Privacy Policy.

2. Information We Collect

nextspin collects personal data only to the extent necessary to provide our services and comply with applicable regulatory obligations. The categories of information we may collect include:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, NRIC/passport number	Registration form, KYC verification
Contact Data	Email address, mobile number, mailing address	Registration form, account updates
Financial Data	Bank account details, e-wallet IDs (Touch 'n Go, Boost, GrabPay), transaction history	Deposit/withdrawal requests
Technical Data	IP address, browser type, device ID, operating system	Automatic collection via cookies and server logs
Usage Data	Games played, bet amounts, session duration, login timestamps	Platform activity tracking
Communications Data	Customer support chat logs, email correspondence	Support interactions

We do not intentionally collect special categories of sensitive personal data (such as health information, racial or ethnic origin, or religious beliefs) unless you voluntarily provide such information — for example, in the context of a responsible gaming self-exclusion request.

3. How We Use Your Information

nextspin uses the personal data we collect for the following purposes:

• Account Registration and Management: To create, verify and maintain your nextspin player account.
• Identity Verification (KYC): To comply with anti-money laundering (AML) requirements and confirm you meet the minimum age requirement of 21 years old.
• Processing Transactions: To handle deposits (via Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go, etc.) and process withdrawal requests promptly.
• Customer Support: To respond to your enquiries, resolve disputes and provide assistance in your preferred language.
• Service Improvement: To analyse platform usage, fix bugs, improve game performance and develop new features relevant to Malaysian players.
• Responsible Gaming: To monitor gaming behaviour and reach out where we identify potential signs of problem gambling, or to honour self-exclusion requests.
• Marketing Communications: With your explicit consent, to send you promotional offers, bonus notifications and updates about new games. You may withdraw consent at any time.
• Legal and Compliance: To fulfil our obligations under applicable Malaysian law and to cooperate with authorised regulatory bodies where required.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, unauthorised account access and other malicious activity.

4. Legal Basis for Processing

nextspin processes your personal data on one or more of the following legal grounds, consistent with Malaysia's Personal Data Protection Act (PDPA) 2010:

• Consent: Where you have given us clear, freely-given and informed consent — for example, to receive marketing communications.
• Contractual Necessity: Processing required to fulfil our obligations under the account agreement, including payment processing and account maintenance.
• Legitimate Interests: Where processing is necessary for our legitimate business interests (such as fraud prevention and security) and those interests do not override your rights.
• Legal Obligation: Where processing is required to comply with a legal obligation, including regulatory and law enforcement requirements applicable in Malaysia.

5. Data Sharing and Third Parties

nextspin does not sell, rent or trade your personal data. We may share your information with carefully selected third parties only in the circumstances described below:

• Payment Processors: Banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go, Boost, GrabPay) and crypto payment gateways to facilitate transactions.
• Identity Verification Providers: Authorised KYC/AML service providers who assist us in verifying player identities and meeting compliance requirements.
• Technology Service Providers: Cloud hosting, platform infrastructure and cybersecurity vendors who process data strictly on our behalf and under binding data processing agreements.
• Game Software Providers: Third-party game studios whose titles appear on our platform. These providers may receive anonymised or aggregated gameplay data.
• Regulatory Authorities: Government bodies, law enforcement agencies or courts in Malaysia where we are legally compelled to disclose information.
• Professional Advisers: Auditors, legal counsel and compliance consultants, subject to strict confidentiality obligations.

Any third party we share data with is required to handle that data in accordance with applicable data protection laws and our contractual requirements. We do not permit them to use your data for their own independent marketing purposes.

6. Data Retention

nextspin retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are:

• Active accounts: Personal data is retained for the duration of the account relationship.
• Closed or dormant accounts: Data is typically retained for a minimum of seven (7) years following account closure to satisfy anti-money laundering record-keeping requirements under Malaysian law.
• Transaction records: Financial transaction data is retained for at least seven (7) years.
• Support communications: Retained for up to three (3) years from the date of each interaction.
• Marketing preferences: Retained until you withdraw your consent or request deletion.

When personal data is no longer required, nextspin will securely delete or anonymise it in accordance with our internal data disposal procedures.

7. Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by nextspin:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right of Correction: You may request that we correct any inaccurate or incomplete personal data.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Limit Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: In applicable cases, you may request your data in a structured, machine-readable format.
• Right to Deletion: You may request deletion of your personal data where there is no compelling reason for its continued processing, subject to our legal retention obligations.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days of receipt. We may need to verify your identity before acting on any request.

8. Cookies and Tracking Technologies

nextspin uses cookies and similar tracking technologies to enhance your experience on our platform. A cookie is a small text file placed on your device when you visit our website. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot opt out of these.
• Performance Cookies: Help us understand how players interact with nextspin by collecting anonymised usage data — for example, which games are most popular among players in Johor Bahru or Petaling Jaya.
• Functional Cookies: Remember your preferences such as language settings and display options to personalise your experience.
• Analytics Cookies: Allow us to measure site traffic, track session durations and identify areas where the platform can be improved.

You can manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the nextspin platform. We do not use cookies to serve third-party advertising on our site.

9. Security Measures

nextspin implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive data including financial information and identity documents is encrypted when stored on our servers.
• Access Controls: Personal data is accessible only to nextspin staff who require it to perform their job functions, governed by strict role-based access permissions.
• Two-Factor Authentication (2FA): Available for player accounts to add an additional layer of security beyond passwords.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and address potential weaknesses in our infrastructure.
• Incident Response Plan: nextspin maintains a documented data breach response procedure to ensure any incidents are contained and communicated promptly.

While we take every reasonable precaution, no system is completely impenetrable. We encourage you to use a strong, unique password for your nextspin account and to never share your login credentials with anyone. If you suspect unauthorised access to your account, contact us immediately at [email protected].

10. Children and Age Restrictions

nextspin is strictly an adult platform. Our services are available only to individuals who are 21 years of age or older, in line with Malaysian responsible gaming standards for casino-style gambling. We do not knowingly collect personal data from anyone under the age of 21.

During the registration and KYC process, we verify the age of all new players. If we discover that a player has provided false information about their age, we will immediately suspend the account, reverse any pending transactions where possible, and delete the data collected from that individual.

If you are a parent or guardian and believe that a minor has accessed nextspin or provided us with personal data without your knowledge, please contact us at [email protected] and we will take prompt action to address the situation.

11. Changes to This Policy

nextspin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, applicable law or regulatory requirements. When we make material changes, we will:

• Update the Effective Date at the top of this page.
• Display a prominent notice on the nextspin platform informing players of the update.
• Where required by law or where changes are significant, notify registered players directly via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Continued use of the nextspin platform following the posting of any changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way nextspin handles your personal data, please reach out to our Data Protection team:

• Email: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within 3 to 5 business days.
• Language: You may contact us in English, Bahasa Melayu or Mandarin — our support team is multilingual.

You also have the right to lodge a complaint with the relevant Malaysian data protection authority if you believe your rights under the PDPA have been violated. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a regulatory body.