Updated: January 2026

MrSpin Privacy Policy – Data Protection for Malaysian Players

MrSpin takes the privacy of every member seriously. This policy clearly sets out what information we collect, why we need it, and how we protect it at all times.

Your Data Is Protected

All personal and financial information for MrSpin members is encrypted with 256-bit SSL — the same security standard used by Malaysia's major banks.

SSL
256-bit Encryption
2FA
Two-Factor Authentication
0
Sale of Data to Third Parties
24/7
Security Monitoring

MrSpin's Privacy Commitment to Malaysian Players

Six core principles that shape how MrSpin handles your data

Bank-Grade Encryption

Every bit of data transmitted between your device and MrSpin's servers is protected by 256-bit SSL encryption — the same technology used by Maybank, CIMB, and Malaysia's leading financial institutions. Your information cannot be intercepted or read by any third party during transmission.

No Data Sales

MrSpin has never and will never sell, rent, or trade members' personal information to any third party for marketing purposes. Your data belongs to you — we use it only for the purposes to which you have explicitly consented.

Minimum Collection

MrSpin only collects data that is genuinely necessary for providing our services, processing payments, and meeting legal requirements. We do not collect information that is irrelevant or unnecessary for platform operations.

Strict Access Controls

Access to MrSpin members' personal data is restricted to employees who genuinely require it to carry out their duties. All access is logged and monitored. Violations of internal access policy are treated as a serious offence and may result in disciplinary action.

Right to Access & Rectification

You have the right to access all personal data MrSpin holds about you, request corrections where there are errors, and in certain circumstances, request the complete deletion of your data. Submit your request to support@mrspin.best and we will respond within 30 days.

Breach Notification

In the event of a data security breach affecting members' personal information, MrSpin is committed to notifying affected members within 72 hours of becoming aware of the incident, along with the remedial measures we have taken.

This Privacy Policy describes MrSpin's data protection practices at mrspin.best. By registering for or using the MrSpin platform, you agree to the collection and use of information as described in this policy. This policy forms part of MrSpin's overarching Terms and Conditions.

1Information We Collect

MrSpin collects various types of information to provide all Malaysian members with a safe, fair, and high-quality service. Generally, the information we gather falls into three main categories.

1.1 Information You Provide Directly

  • Full name as it appears on your official identification document
  • An active Malaysian mobile number
  • A valid and active email address
  • Date of birth (for age verification — 18+ only)
  • Current residential address in Malaysia
  • A copy of your identification document (MyKad or passport) when required for verification
  • Payment method information (account holder name and masked account number only — full financial data is not stored)

1.2 Information Collected Automatically

  • IP address and general location information (state/city)
  • Type and version of the web browser or application used
  • Device type (Android/iOS, phone model)
  • Browsing history within the MrSpin platform
  • Game session data including date, time, game type, and outcome
  • Deposit and withdrawal transaction logs
  • Cookie data and similar tracking technologies

1.3 Information from Third Parties

In certain circumstances, MrSpin may receive information about you from trusted third parties, including identity verification service providers to ensure the accuracy of the information you provided during registration, and payment gateways such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX to process and verify financial transactions.

Important Note: MrSpin does not store your credit card numbers, full bank account numbers, or eWallet passwords in our systems. All sensitive financial information is processed directly through encrypted payment gateways and never passes through or is stored on MrSpin's servers.

2How We Use Your Information

MrSpin uses the information collected for legitimate and necessary purposes in operating a responsible online casino platform. Below is a full breakdown of how your data is used.

Purpose of Use Type of Data Involved Legal Basis
Service provision & account management Name, email, phone number Contract performance
Identity verification & age restriction MyKad / passport, date of birth Legal requirements
Deposit & withdrawal processing Payment account information Contract performance
Fraud prevention & security IP address, login history, transaction patterns MrSpin's legitimate interests
AML (Anti-Money Laundering) Compliance Transaction records, identity information Legal requirements
Customer support Communication history, account information Contract performance
Personalisation & game recommendations Game history, player preferences Your consent
Promotional & bonus communications Email address, phone number Your consent

2.1 Marketing & Promotional Communications

MrSpin may use your contact information to send you notifications about new bonuses, special promotions, and platform updates. You can opt out of these marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting support@mrspin.best. Opting out of marketing communications does not affect essential service communications such as withdrawal notifications or account security alerts.

3Information Sharing & Disclosure

MrSpin holds firmly to the principle that member data is confidential and not to be shared indiscriminately. We do not sell, rent, or trade your personal information. However, there are legitimate situations where sharing certain information is necessary.

3.1 Third-Party Service Providers

MrSpin works with trusted service providers who help us run our platform operations. These providers include:

  • Payment gateways — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks) — for processing financial transactions
  • Identity verification service providers for the KYC (Know Your Customer) process
  • Cloud service providers for secure hosting and data storage
  • Game providers such as Pragmatic Play, PG Soft, and Evolution Gaming for game operations
  • Analytics services to understand usage patterns and improve the platform

All third-party service providers are bound by data protection agreements that require them to handle your data in accordance with privacy standards equivalent to those of MrSpin. They are only permitted to use your data for the specific purposes outlined in those agreements.

3.2 Legal Requirements

MrSpin may be required to disclose your personal information to the relevant authorities when mandated by law, court order, or direction from a legitimate law enforcement agency. This includes financial crime investigations, confirmed fraud cases, or compliance with anti-money laundering reporting requirements. In all such cases, MrSpin will only disclose the minimum information required by law.

Our Commitment: MrSpin will never disclose your information to advertising companies, data brokers, or any party that does not have a direct service relationship with MrSpin's operations. This is a commitment we do not compromise on.

4Data Security & Protection Measures

MrSpin invests seriously in security infrastructure to ensure member data is always protected against cyber threats, unauthorised access, and data breaches. Below is an overview of the technical and organisational measures we have in place.

4.1 Technical Measures

  • 256-bit SSL/TLS encryption for all communications between your browser or app and MrSpin's servers
  • Password storage using one-way hashing that cannot be decrypted (bcrypt)
  • Two-factor authentication (2FA) is available and recommended for all accounts
  • Intrusion Detection System monitoring traffic 24/7
  • Regular security vulnerability scans conducted by both internal and external security teams
  • Encrypted data storage on servers with strict physical access controls
  • Regular secure encrypted data backups stored at separate data centres

4.2 Organisational Measures

  • Mandatory data security training for all MrSpin employees with access to member data
  • Minimum access principle — staff only have access to the data required for their specific role
  • All access to sensitive data is logged and reviewed on a regular basis
  • Binding non-disclosure agreements (NDAs) for all MrSpin employees and contractors
  • Clear, tested incident response procedures for handling any security breach

That said: No security system is 100% foolproof. We encourage members to play an active role in protecting their own accounts — use a strong, unique password, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact support@mrspin.best immediately.

5Cookies & Tracking Technologies

MrSpin uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns, and deliver more relevant content. The following are the types of cookies used by MrSpin.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect your ability to log in and use the MrSpin platform properly.

6Data Retention Period

MrSpin retains your personal information only for as long as necessary for the purposes outlined in this policy, or as required by applicable law.

  • Active account data: Retained for the duration that your MrSpin account remains active
  • Financial transaction records: Retained for a minimum of 7 years in accordance with tax and financial legal requirements
  • Customer support communication logs: Retained for 3 years from the date of last communication
  • Identity verification (KYC) data: Retained for 5 years after account closure in accordance with AML compliance requirements
  • Security log data: Retained for 1 year for security incident investigation purposes
  • Gaming and wagering data: Retained for 3 years for dispute resolution and auditing purposes

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

7Your Rights Regarding Personal Data

As a MrSpin member, you have certain rights regarding the personal data we hold about you. MrSpin is committed to respecting and facilitating the exercise of these rights.

Right of Access

Request a copy of all personal data MrSpin holds about you.

Right to Rectification

Request corrections to inaccurate or incomplete data.

Right to Erasure

Request deletion of data in situations where it is no longer required.

Right to Restriction

Request a restriction on the processing of your data under certain circumstances.

Right to Data Portability

Receive your data in a machine-readable format (JSON/CSV).

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, submit a written request to support@mrspin.best with the subject line "Data Privacy Rights Request". MrSpin will respond within 30 calendar days. For complex cases, we may require up to 60 days and will notify you of any extension.

8Children's Privacy

The MrSpin platform is exclusively for individuals aged 18 and above. MrSpin does not knowingly collect or process any personal information from individuals under the age of 18. If we discover that we have collected information from someone below the required age limit, we will take immediate steps to delete that information and close the account in question.

Parents or guardians who suspect that a minor has registered on the MrSpin platform are urged to contact us immediately at support@mrspin.best. We take child protection seriously and will respond promptly to any such report.

9Privacy Policy Amendments

MrSpin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or platform growth. All amendments take effect upon publication at mrspin.best/privacy-policy with a revised "Updated" date.

  • For material amendments (significant changes that affect your privacy rights), we will send a notification via email or an in-platform notice at least 7 days before the changes take effect
  • Your continued use of the MrSpin platform after any amendments take effect will be considered your acceptance of the revised policy
  • If you do not agree with any amendments made, you have the right to close your account and request deletion of your data

10Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way MrSpin handles your personal data, please contact us through the following channels:

Privacy Email: support@mrspin.best (subject: "Data Privacy Enquiry")

Live Chat: Available 24/7 within the MrSpin platform — select the "Privacy & Data Security" category

Response Time: We are committed to responding to all privacy-related enquiries within 5 working days, and to data rights requests within 30 calendar days.

Why Data Privacy Matters to MrSpin Players

For many Malaysian players, questions about data privacy can feel like a technical matter with little bearing on the actual gaming experience. In reality, however, robust data protection is the foundation of the trust you place in any online casino platform — including MrSpin. When you register, you entrust us with your personal information, and we take that responsibility very seriously.

One aspect of privacy that new players often overlook is the security of financial information. When you make a deposit via Touch 'n Go eWallet or DuitNow at MrSpin, the transaction is processed directly by a certified payment gateway. MrSpin does not store your eWallet account number, PIN, or any financial credentials in our systems. This means that even in the highly unlikely scenario where MrSpin's servers experience any disruption, your sensitive financial information remains protected because it was never held by us in the first place.

Another important aspect is how MrSpin uses your gaming data. Your game history, favourite games, and betting patterns are used primarily for two purposes — to provide you with more relevant game recommendations, and to monitor signs of problem gambling as part of our commitment to our Responsible Gaming programme. This means your data is actually used to protect your interests, not the other way around. If our system detects patterns that suggest a potential gambling problem, our support team may proactively reach out to offer assistance.

MrSpin also wants to assure Malaysian players that we never share your data with advertisers or social media platforms for targeted marketing purposes. This sets us apart from many free apps online that fund their operations through the sale of user data. MrSpin is funded through legitimate casino platform operations, and we have no need to sell your privacy to stay in business. This gives us the freedom to put players' privacy interests ahead of commercial considerations.

Finally, we would like to remind all MrSpin members that data security is a shared responsibility. MrSpin can put in place the most advanced security systems available, but if you use a weak password, reuse the same password across multiple platforms, or share your account credentials with others, security risks remain that are beyond our control. We encourage you to enable two-factor authentication on your MrSpin account, use a unique and strong password, and always remember to log out from shared devices. Together, we can ensure that your experience on MrSpin remains safe, enjoyable, and protected for everyone.

Security Summary
256-bit SSL Encryption
Two-Factor Authentication (2FA)
No financial data storage
24/7 threat monitoring
No sale of data to third parties
Breach notification within 72 hours
Privacy Enquiries

For any enquiries or requests relating to your personal data, please reach out to our team.

support@mrspin.best
24/7 Live Chat
Response within 5 business days
Responsible Gaming

Your gaming data also helps us monitor your wellbeing. Responsible gaming tools are available within your account.

Help Centre

Frequently Asked Questions – MrSpin Privacy Policy

Answers to the most frequently asked questions about data privacy at MrSpin

No. MrSpin does not store credit card numbers, full bank account numbers, eWallet PINs, or any other sensitive financial credentials in our systems. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the transaction is processed entirely by a certified third-party payment gateway. MrSpin only receives confirmation that a transaction was successful — not your financial details. This means that even in an unlikely worst-case scenario, your financial data remains safe because it has never been held by us.

Yes, you have the right to request deletion of your personal data. Submit a written request to support@mrspin.best with the subject line "Data Deletion Request". However, certain exceptions apply — financial transaction records must be retained for a minimum of 7 years in accordance with financial and tax regulations, and identity verification (KYC) data must be kept for 5 years after account closure under AML compliance requirements. Any data that has exceeded its mandatory retention period will be securely deleted or anonymised. MrSpin will confirm the action taken within 30 days of receiving your request.

Your gaming history at MrSpin is used for three main purposes. First, to provide more relevant game recommendations based on your interests — for example, if you frequently play Pragmatic Play slots, we may suggest new titles from the same provider. Second, for responsible gambling monitoring — our system analyses playing patterns to identify signs of problem gambling. Third, to resolve any disputes regarding game outcomes or transactions. Your gaming history is never shared with any third party for marketing or advertising purposes.

There are two ways to stop receiving promotional emails from MrSpin. The first is to click the "Unsubscribe" link found at the bottom of any promotional email you receive. The second is to contact support@mrspin.best with a request to be removed from the marketing mailing list. Once your request has been processed (typically within 5 business days), you will no longer receive promotional emails. However, you will still receive important service emails such as withdrawal notifications, account security alerts, and transaction confirmations — these cannot be disabled as they are essential to the security of your account.

When you close your MrSpin account, we will process your remaining balance for withdrawal within 5 working days. Regarding personal data, MrSpin is required to retain certain information for specified periods in accordance with legal obligations — financial transaction records for 7 years, KYC data for 5 years from the date of closure, and communication logs for 3 years. Once these mandatory retention periods have elapsed, all data associated with your account will be permanently deleted or anonymised. Information not subject to legal retention requirements will be deleted immediately upon confirmation of account closure. You may request a full list of data retained after closure by emailing support@mrspin.best.
YOUR DATA IS SAFE WITH MRSPIN

Play with Confidence – Your Privacy Is Guaranteed

MrSpin protects your personal data with bank-grade encryption. Register for free today and enjoy over 3,200 games with complete peace of mind — your security is our top priority.

256-bit SSL encryption No data sales Minimum deposit RM30 24/7 Malay Language Support
Bahasa Melayu