s4spin Privacy Policy

1 Introduction

s4spin ("we", "us", "our", "the Platform") is committed to protecting the privacy of all individuals who interact with the s4spin website at https://s4spin.co and any associated services (collectively, "the Services"). This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which that data is processed, the legal bases underpinning our processing activities, and the rights available to you as a data subject.

By registering for an s4spin account, accessing the Platform, or using any of the Services, you acknowledge that you have read, understood, and agreed to the terms of this Policy. If you do not agree to this Policy, you must cease using the s4spin Services immediately and request account closure through our support team.

This Policy is to be read in conjunction with the s4spin Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. Capitalised terms not otherwise defined in this Policy have the meanings ascribed to them in the Terms & Conditions.

2 Personal Data We Collect

s4spin collects personal data in the following categories:

2.1 Registration Data. When you create an s4spin account, we collect your full name, date of birth, residential address, email address, and contact number. This information is required to verify your identity, confirm age eligibility (21+), and set up your member account.

2.2 Identity Verification Data. To satisfy applicable know-your-customer (KYC) and anti-money laundering (AML) obligations, we may request copies of identity documents such as a Malaysian identity card (MyKad), passport, or utility bill as proof of address.

2.3 Financial Data. We collect data relating to your deposits, withdrawals, and transaction history on s4spin. This includes the payment method used, transaction amounts in MYR, and timestamps. We do not store full payment card numbers or full e-wallet account credentials on our servers.

2.4 Technical and Usage Data. We automatically collect technical information when you access s4spin, including your IP address, browser type and version, device type and operating system, session timestamps, pages visited, and gameplay activity. This data is used for platform security, fraud prevention, and service improvement.

2.5 Communications Data. Records of your communications with s4spin — including live chat transcripts, email correspondence, and support ticket histories — are retained for service quality and dispute resolution purposes.

2.6 Responsible Gaming Data. If you set deposit limits, loss limits, cooling-off periods, or self-exclusion on your s4spin account, a record of those elections is maintained to ensure they are enforced correctly.

3 How We Use Your Personal Data

s4spin processes your personal data for the following purposes:

• To create, maintain, and operate your s4spin member account;
• To verify your identity and confirm that you meet the minimum age requirement of 21 years;
• To process deposits and withdrawals in MYR through your chosen payment method;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
• To administer promotions, bonuses, and loyalty programmes for which you are eligible;
• To provide customer support and resolve account or payment queries;
• To send you service-related communications including account notices, security alerts, and transaction confirmations;
• To comply with legal, regulatory, and licensing obligations applicable to s4spin;
• To improve the Platform's performance, user experience, and game offerings through aggregated analytics;
• To enforce our Terms & Conditions and Responsible Gaming Policy.

s4spin does not use your personal data for automated individual decision-making that produces legal effects or significantly affects you, except where expressly required for fraud or AML detection in accordance with applicable legal obligations.

4 Legal Basis for Processing

s4spin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account operation, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable AML, KYC, tax, and gaming regulatory requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting s4spin support.

5 Data Sharing and Disclosure

s4spin does not sell, rent, or trade your personal data to third parties. We may share your personal data in the following limited circumstances:

• Service Providers: Third-party vendors engaged to provide payment processing, identity verification, fraud detection, customer support infrastructure, and cloud hosting services. These providers are contractually bound to process your data only as directed by s4spin and to maintain appropriate security standards;
• Game Providers: Certified gaming studios and platform providers whose games are hosted on s4spin. Data shared with game providers is limited to session identifiers and game-specific activity data required for game operation;
• Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, s4spin may disclose member data to gaming regulators, financial intelligence units, law enforcement agencies, or tax authorities;
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of s4spin's assets, member data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6 Cookies and Tracking Technologies

s4spin uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function, including maintaining your login session and security tokens. These cannot be disabled;
• Analytics Cookies: Used to collect aggregated, anonymised data about how members interact with the Platform, enabling us to identify usability improvements;
• Preference Cookies: Store your language, display settings, and other Platform preferences;
• Security Cookies: Used for fraud detection, bot prevention, and account protection.

You may configure your browser to reject non-essential cookies. Note that disabling certain cookies may affect Platform functionality. s4spin does not use third-party advertising cookies or behavioural profiling cookies for cross-site tracking.

7 Data Retention

s4spin retains your personal data for as long as your account remains active and for such additional period as may be required by applicable law. In particular:

• Account registration and identity data is retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years from the date of the relevant transaction;
• Support communications are retained for a minimum of two (2) years from the date of the relevant interaction;
• Technical and usage logs are retained for a period of up to twelve (12) months for security and fraud investigation purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8 Your Data Rights

Subject to applicable law and regulatory restrictions, s4spin members have the following rights in respect of their personal data:

• Right of Access: You may request a copy of the personal data s4spin holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to s4spin's legal retention obligations;
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances;
• Right to Data Portability: You may request that data you provided to s4spin be provided to you in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including profiling;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact s4spin support at [email protected]. We will respond to valid requests within thirty (30) calendar days. Identity verification may be required before processing any data subject request.

9 Children's Privacy

s4spin is strictly an adult gaming platform. Access to and use of s4spin is prohibited for any individual under the age of 21 years. s4spin does not knowingly collect personal data from individuals under 21 years of age. If we become aware that an account has been created by or on behalf of a person under 21, that account will be immediately closed, all associated balances forfeited, and any collected data deleted in accordance with our retention policy. Parents and guardians who suspect that a minor has registered on s4spin should contact our support team immediately.

10 Data Security

s4spin implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest;
• Role-based access control limiting internal data access to authorised personnel with a legitimate business need;
• Regular third-party penetration testing and vulnerability assessments;
• Real-time intrusion detection and automated alerting systems;
• Multi-factor authentication for all administrative system access.

Notwithstanding the above, no data transmission over the internet can be guaranteed to be completely secure. s4spin will notify affected members of any confirmed data breach in accordance with applicable notification requirements.

11 International Data Transfers

s4spin's services involve the use of infrastructure and service providers that may be located outside Malaysia. Where personal data is transferred to a jurisdiction that may not provide a level of data protection equivalent to that applicable in Malaysia, s4spin will implement appropriate safeguards — such as contractual data protection clauses — to ensure your data remains protected to a standard consistent with this Policy.

12 Changes to This Privacy Policy

s4spin reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered members via the registered email address or via a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of s4spin following any amendment constitutes your acceptance of the revised Policy.

13 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or s4spin's data processing practices, please contact our support team: