Data Protection

Privacy Policy 321spin — Our Commitment to Your Data Security

At 321spin, privacy is more than a legal document — it is a promise to every member. This policy clearly explains how we collect, use, and protect your personal information as a member of our platform in Malaysia.

Last updated: 1 January 2026  |  Effective immediately
Six Principles Data Protection We

These are the principles that shape how 321spin handles every piece of information you entrust to us.

End-to-End Encryption

All data transmitted between your device and 321spin servers is protected with 256-bit SSL encryption. No sensitive information travels across the internet without the highest level of security protection.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, with access restricted solely to staff who genuinely need that information to carry out their duties.

No Data Sales

321spin has never and will never sell, rent, or trade member personal information to any third party for marketing purposes. Your data is not a commodity to us.

Member Controls

You have the full right to access, correct, or request deletion of your personal data at any time through your account settings or by contacting our support team.

Data Minimisation

We only collect information that is strictly necessary to provide the services you request. There is no excessive data collection or collection for purposes unrelated to platform operations.

Breach Notification

In the event of any data security breach affecting your information, 321spin is committed to notifying affected members within 72 hours of the incident being identified.

Rights You as a 321spin Member

You are more than just a user — you have clear, enforceable rights over your personal data.

Right of Access
Request a complete copy of all personal data we hold relating to your account at any time.
Right to Rectification
Update or correct any inaccurate or outdated personal information in your account.
Right to Erasure
Request deletion of your personal data when your account is closed, subject to legal retention obligations.
Right to Object
Object to the processing of your data for direct marketing purposes at any time without needing to provide a reason.
Right to Data Portability
Receive your personal data in a structured, machine-readable format for transfer to another platform if required.
Right to Restriction of Processing
Request that we restrict the processing of your data while any dispute or review is in progress.

1 Personal Information We Collect

When you use the 321spin platform, we collect several categories of personal information depending on the nature of your interaction with the platform. This collection is carried out transparently and only for the purposes stated in this policy.

1.1 Identity Information

This includes your full name, date of birth, identity card number (MyKad) or passport number, gender, and nationality. This information is required during account registration and the KYC (Know Your Customer) process to ensure only eligible individuals use our platform.

1.2 Contact Information

Your email address, mobile number, and full address are collected during registration. This information is used for important account communications, transaction verification, and security notifications.

1.3 Financial Information

We retain details related to the payment methods you use, including bank name, account type and masked account number (we do not store full account numbers), deposit and withdrawal history, and e-wallet details.

1.4 Technical Information

We automatically record your IP address, web browser type, operating system, device used, pages visited, access times and session information. This data is used for security purposes, fraud detection and platform performance improvements.

Note: We do not store credit card or debit card information directly. All payment processing is handled through registered third-party payment gateways that comply with PCI-DSS standards.

2 How We Collect Your Data

321spin collects personal information through several different channels. Understanding our data collection sources helps you make more informed decisions about the information you share with us.

2.1 Directly from You

The majority of our data is obtained directly from you when you register a new account, complete your profile, undergo the KYC process, make a deposit or withdrawal, contact our customer support team, or complete surveys and feedback forms.

2.2 Through Your Use of the Platform

When you use the 321spin platform — whether via the website or mobile app — our system automatically records technical information such as navigation patterns, games played, session duration, and device details. This data is essential for detecting unusual activity and ensuring the security of your account.

2.3 From Trusted Third Parties

In certain cases, we receive additional information from identity verification service providers, payment processors, and fraud prevention agencies. This is done solely to verify your identity and prevent illegal activity on our platform.

3 How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. 321spin does not use your data for purposes unrelated to the provision of platform services. Below is a summary of our data usage:

Purpose of Use Data Type Legal Basis
Account management & registration Identity, contact Contract performance
Deposit & withdrawal processing Financial, identity Contract performance
KYC verification & compliance Identity, documents Legal obligation
Fraud detection & security Technical, behavioural Legitimate interest
Customer Support Contact, account Contract performance
Promotional communications (with consent) Contact, preferences Consent
Platform improvements Technical, usage Legitimate interest

You may withdraw consent for promotional communications at any time through your account settings or by contacting us. Withdrawal of consent does not affect the validity of any data processing carried out prior to that withdrawal.

4 Information Sharing with Third Parties

321spin takes the trust you place in us seriously. We do not share, sell, or disclose your personal information to third parties except in the following limited and controlled circumstances:

4.1 Essential Service Providers

We work with selected service providers who help us operate the platform — including payment processors, identity verification service providers, cloud computing providers, and analytics companies. All such third parties are bound by strict data protection agreements and are only permitted to process your data in accordance with 321spin's specific instructions.

4.2 Legal Requirements

In situations where we are required by law, court order, or regulatory body to disclose certain information, we will do so. We will notify you of such disclosure unless prohibited from doing so by law.

4.3 Platform & Member Protection

We may share information with fraud prevention agencies and relevant authorities if we detect or suspect fraudulent activity, money laundering, or serious security threats to the platform or our members.

Our Guarantee: 321spin does not share member personal data with advertising networks, data brokers, or any party for third-party marketing purposes without your explicit prior consent.

5 Cookies & Tracking Technologies

The 321spin platform uses cookies and similar tracking technologies to enhance your experience, maintain session security and understand how our platform is used. The following are the types of cookies we use:

5.1 Necessary Cookies

These cookies are required for the basic operation of the platform — including maintaining your login session, remembering language preferences and ensuring account security. Without these cookies, the platform cannot function properly. Essential cookies cannot be disabled.

5.2 Performance & Analytics Cookies

These cookies help us understand which pages are visited most frequently, how long users stay on each page and where users exit the platform. All data is collected in aggregate and anonymised — we cannot identify individuals from this analytics data.

5.3 Cookie Management

You can manage your cookie settings through your web browser. Most browsers allow you to delete existing cookies, block new cookies, or receive warnings before cookies are stored. Please note that blocking certain cookies may affect platform functionality.

6 Data Security Measures

We continuously invest in security infrastructure to ensure your personal data is always protected. The technical and organisational measures we implement include:

  • Data encryption in transit using TLS 1.3 protocol
  • Data encryption at rest for all sensitive information
  • Role-based access control — only authorised staff can access specific data
  • Regular security audits by independent third parties
  • 24/7 system monitoring to detect threats and anomalies
  • Two-factor authentication (2FA) for staff login to internal systems
  • Security awareness training programme for all staff
  • A comprehensive and tested incident response plan

While we take all reasonable precautions, no security system can guarantee 100% absolute protection. We encourage you to take your own precautions as well, such as using a strong, unique password and never sharing your login credentials with anyone.

7 Data Retention Period

321spin does not retain personal data longer than necessary. Retention periods are determined based on operational needs, legal obligations, and the platform's legitimate interests:

  • Active account data — retained for the duration of active membership plus 5 years after account closure to meet financial audit requirements
  • Transaction records — retained for 7 years in accordance with accounting and anti-money laundering legal requirements
  • KYC Documents — retained for 5 years after the end of the business relationship
  • Support communication logs — retained for 2 years for quality and training purposes
  • Technical data & logs — retained for 90 days for security and fraud detection purposes

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with our internal procedures.

8 Children's Data Protection

The 321spin platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process the personal data of children under the age of 18. If we discover that a child's data has been collected without our knowledge, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately through our customer support channels.

9 Links to External Websites

The 321spin platform may contain references to third-party services such as payment processors. When you leave our platform, the privacy policy of those other websites will apply, not this one. We encourage you to read the privacy policy of every website you visit.

321spin is not responsible for the privacy practices or content of third-party websites that may be visited through links on our platform.

10 Changes to This Privacy Policy

321spin reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via:

  • Notification via email to your registered address
  • A clear notice on the platform's home page
  • A pop-up notification upon your next login

We recommend you review this page regularly. The "Last Updated" date at the top of this page always reflects the current version of the policy. Continued use of the platform after changes take effect will be considered acceptance of the updated policy.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, our data protection team is ready to assist. You may reach us via:

  • Live chat within the 321spin platform (available 24/7)
  • Privacy-specific email: [email protected]
  • Page FAQ us for frequently asked questions

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex requests such as full data access or account deletion, the process may take up to 14 business days depending on the complexity of the request.

321spin's Commitment: Your privacy is our priority. We operate on the principles of transparency, accountability and respect for your rights as the owner of your own personal data. Do not hesitate to contact us if you have any concerns.
Ready to Get Started?
Your Data is Safe. Join 321spin Today.

By registering, you confirm that you have read and understood this Privacy Policy. Your privacy is fully protected at 321spin.

Bahasa Melayu