S4spin Privacy Policy — How We Protect the Personal Data of Malaysian Players

S4spin ("we", "platform", "s4spin") operates an online entertainment platform offering slots, Sports Betting on the Malaysia Super League and EPL, badminton, MPL Malaysia esports, progressive jackpots, and live matches to Malaysian players. We understand that trust is the foundation of our relationship with every player, and protecting personal data is the most important part of building that trust.

This Privacy Policy applies to all users of the s4spin platform — including website visitors, registered members, and active players — regardless of how they access it (web browser, mobile app, or otherwise). It also covers all services offered by s4spin, including games, promotions, the VIP programme, and customer service communications.

S4spin collects only the personal data that is genuinely necessary to provide Malaysian players with a safe, compliant, and quality service. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

We do not collect sensitive data such as health information, religious beliefs or political affiliations unless a specific legal requirement obliges us to do so. All financial data — including Maybank and CIMB bank account numbers, Touch 'n Go eWallet, GrabPay or other e-wallet details — is stored in encrypted form and used solely for legitimate transaction processing.

S4spin processes your personal data on lawful legal bases under Malaysia's PDPA 2010. We only process your data for the following purposes:

• Account Management: To create, verify, and securely maintain your s4spin account.
• Transaction Processing: Handles deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX Maybank2u, CIMB Clicks and withdrawals to your account.
• Gaming Service Provision: Gives you access to all games including slots, progressive jackpots, Super League and EPL football betting, badminton, e-sports, and live matches.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account.
• Legal Compliance: Fulfils legal obligations including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Service Communications: Sending important information about your account, transactions, changes to terms, and security updates.
• Product Improvement: Analysing usage patterns in aggregated, anonymised form to improve the s4spin platform experience.
• Responsible Gaming: Monitoring gameplay patterns to help you stay within healthy and safe limits.

S4spin does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a core principle we never compromise on.

However, under the following limited circumstances, s4spin may share your personal data:

• Payment Processors: Required financial data is shared with recognised payment processors such as DuitNow, FPX, Touch 'n Go, and other e-wallet providers solely for the purpose of processing your transactions.
• Game Software Providers: Required game session information is shared with slots and game providers such as NetEnt, Pragmatic Play and Microgaming for technical purposes only.
• Statutory Authority: s4spin will disclose data when required by Malaysian law, court order, or a legitimate request from law enforcement authorities.
• Audit & Compliance: Independent auditors bound by strict confidentiality agreements for the purposes of security auditing and legal compliance.

S4spin invests seriously in security infrastructure to ensure your personal data is protected at all times. Our approach to security is multi-layered, meaning we employ multiple protection mechanisms simultaneously:

• 256-bit SSL Encryption — the same standard used by major Malaysian banks such as Maybank and CIMB to protect all data transmitted between your browser and our servers.
• Data Encryption at Rest — all sensitive data, including financial information and identity documents, is stored in encrypted form on our servers.
• Multi-Layer Firewall System — advanced network perimeter protection to prevent unauthorised access.
• Two-Factor Authentication (2FA) — an added layer of security for logins and withdrawal transactions.
• 24/7 Continuous Monitoring — an intrusion detection system that actively monitors for any suspicious activity.
• Regular Security Audits — independent security audits are conducted regularly to identify and address any vulnerabilities.
• Role-Based Access Control — s4spin staff may only access the data necessary for their specific role.

S4spin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the platform (without personally identifying you) to help us improve our services.
• Functional Cookies: Remembers your preferences such as language, display settings, and favourite games to personalise your experience.
• Analytics Cookies: Used to analyse aggregated traffic patterns and platform usage for improvement purposes.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the s4spin platform. For detailed instructions, refer to the help documentation of your browser.

Under the Personal Data Protection Act (PDPA) Malaysia 2010, you have specific rights regarding the personal data we hold. s4spin is committed to respecting and facilitating the exercise of these rights:

S4spin services are strictly for individuals aged 18 and above. s4spin does not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that data belonging to individuals under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered an account with s4spin are urged to contact us immediately at support@s4spin.ws.

S4spin retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your s4spin account remains active.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date as required by Malaysian accounting and financial law.
• Identity Verification Data (KYC): Retained for a minimum of 5 years after account closure for AML compliance purposes.
• Support Communication Logs: Retained for 3 years for reference and service improvement purposes.
• Gaming Activity Data: Retained for 5 years for responsible gaming and regulatory compliance purposes.

Upon expiry of the relevant retention period, data will be securely deleted or permanently anonymised so that it can no longer be linked to you personally.

S4spin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, evolving legal requirements or platform improvements. All amendments will be published on this page with a clear update date.

For significant amendments that affect how we use your data, s4spin will notify you via your registered email or in-platform notification at least 14 days before the amendment takes effect, giving you sufficient time to review the changes.

For any questions, concerns or complaints regarding this Privacy Policy or the processing of your personal data by s4spin, please contact our Data Protection Officer through the following channels: