Myrspin Privacy Policy – Malaysian Player Data Protection

Myrspin collects your personal information through various channels — account registration, platform usage, financial transactions and communications with our support team. Below are the categories of data we collect:

A. Identity & Registration Data

• Full name — As shown on official Malaysian identity documents (MyKad or passport).
• Phone number — Used for OTP verification during registration, login and important transaction notifications.
• Email address — For account communications, promotional notifications (with your consent) and identity verification.
• Date of birth — To verify that you meet the minimum age requirement of 18 years to use the myrspin platform.
• MyKad number or identity document — Collected when KYC (Know Your Customer) verification is required for identity verification or large withdrawal amounts.

B. Financial & Transaction Data

• Details of the payment method used — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks.
• Deposit and withdrawal history, including amounts, dates, times and methods.
• Betting history and game activity records within the platform.
• Records of bonuses and promotions claimed and their usage.

C. Technical & Usage Data

• IP address, web browser type, operating system and device type used to access myrspin.
• Session data including login time, logout time, pages visited and actions taken within the platform.
• Cookie data and similar tracking technologies — further details are set out in Section 5.
• General location information based on IP address (not precise GPS location).

D. Communications Data

• Records of live chat conversations with the myrspin customer support team.
• Emails and messages you send us through official support channels.
• Feedback and reviews you provide about your experience on myrspin.

Myrspin uses the personal data it collects for the following purposes, all of which are lawful under Malaysia's PDPA:

Myrspin does not use your personal data for automated decision-making that has a significant impact on you without human oversight, except for fraud detection and anti-money laundering measures as required by law.

For marketing purposes — including promotional emails about bonuses, odds boosts for Malaysia matches, or special campaigns around Hari Raya or the Thomas Cup — myrspin will only send such communications if you have given explicit consent during registration or through the communication preferences in your account settings. You may withdraw this consent at any time.

Myrspin does not sell, rent or share your personal data with third parties for their own marketing or commercial purposes. However, there are specific situations where data sharing is necessary to operate the platform properly:

• Payment service providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks receive the transaction information necessary to process your deposits and withdrawals. All of these providers are bound by strict confidentiality agreements and PCI-DSS security standards.
• Game providers — The myrspin platform integrates games from reputable third-party providers. Session information required to run the games is shared with those providers, but does not include your full identity details.
• Technology service providers — Cloud infrastructure providers, analytics services (data anonymised) and cybersecurity tools that help us operate the platform safely and efficiently.
• Authorities and law enforcement agencies — myrspin will disclose personal data to Malaysian authorities or law enforcement agencies when required by a court order, a lawful directive, or applicable legislation — including AML (Anti-Money Laundering) compliance requirements.

All third parties working with myrspin are bound by data protection agreements that require them to handle your information to a security standard equal to or higher than our own. myrspin does not transfer your personal data to countries outside Malaysia without ensuring that adequate protections are in place at the destination.

Myrspin continually invests in cybersecurity infrastructure to ensure your personal data remains protected against unauthorised access, loss, destruction, or inadvertent disclosure. The key security measures we employ are:

• 256-bit SSL/TLS Encryption — All data transmitted between your browser or app and myrspin's servers is encrypted using 256-bit SSL/TLS protocols. This means that even if someone were to intercept your network traffic, the captured data would remain unreadable.
• Encryption of data at rest — Sensitive data such as passwords (stored as bcrypt hashes), identification numbers, and financial information is encrypted within the myrspin database using AES-256 standards.
• Tiered access controls — Only myrspin staff with a legitimate business need and who have undergone background checks are permitted to access members' personal data. All access is logged and automatically monitored.
• Two-factor authentication (2FA) — myrspin offers and actively encourages the use of two-factor authentication for all member accounts as an added layer of security.
• 24/7 threat monitoring — Automated security monitoring systems operate around the clock to detect and respond to suspicious activity or unauthorised access attempts.
• Regular security audits — myrspin conducts regular internal and independent security audits, including penetration testing carried out by certified third-party security firms.
• Incident response plan — myrspin maintains a comprehensive cybersecurity incident response plan. In the event of a material data breach, we will notify affected members and the relevant authorities in accordance with PDPA requirements within the timeframe prescribed by law.

While myrspin takes all reasonable steps to protect your data, no cybersecurity system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

Myrspin uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage patterns on an aggregated basis. The following are the types of cookies we use:

• Essential cookies (required) — Required for core myrspin platform functions such as maintaining your login session, temporarily storing betting cart contents, and enabling essential security features. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Functional cookies — Remembers your preferences such as language, display settings and saved login details (if you opt in to the "remember me" feature). These cookies improve your overall experience on the myrspin platform.
• Analytics cookies — Helps us understand how players use the myrspin platform as a whole — the most frequently visited pages, time spent in each section, and common navigation paths. This data is collected in aggregate and anonymised — we do not identify individuals from analytics data.
• Security cookies — Used to detect suspicious activity such as login attempts from new or repeated locations, helping to protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies will affect your ability to use the myrspin platform fully. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

As a myrspin member residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA), which myrspin is fully committed to upholding:

Myrspin retains your personal data only for as long as necessary for the purposes it was collected, or as required by Malaysian law. The following are general guidelines for our data retention periods:

When data is no longer needed and there is no legal obligation to retain it, myrspin will securely delete or destroy that data using methods that ensure it cannot be recovered. For data stored in physical format, secure destruction is carried out in accordance with industry-recognised procedures.

Myrspin has appointed a Data Privacy Officer responsible for ensuring PDPA compliance and managing all privacy-related enquiries and requests from our members. If you have any questions, concerns or requests regarding how myrspin handles your personal data, you can reach us through the following channels:

• Email: support@myrspin.click (please indicate "Privacy Enquiry" in the email subject line)
• Live chat: Available on the myrspin platform, 24 hours a day, 7 days a week
• Response time: We are committed to responding to all privacy enquiries within 14 business days of receipt.

If you are not satisfied with our response to your privacy enquiry after following the procedure above, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under PDPA 2010. Information on how to submit a complaint to the relevant authority is available through the official website of the Department of Personal Data Protection Malaysia.