Next Spin Privacy Policy – How We Protect Malaysian Players' Data

This Privacy Policy explains how Next Spin ("Platform", "We") collects, uses, stores, and protects your personal information when you use our services at nextspin.club. It applies to all users of the Next Spin platform, including visitors who browse our website, registered players, and former members.

At Next Spin, we understand that Malaysians are becoming increasingly aware of and concerned about their online data privacy. You have every right to know exactly what happens to your information when you interact with our platform — whether you're creating an account, making a deposit via Touch 'n Go or DuitNow, enjoying slots and live casino, or simply browsing our promotions page.

This policy is written in plain, straightforward English — not in legal jargon that requires an expert to interpret. If any section is still unclear, the Next Spin support team is available to assist you via 24/7 live chat or by email at support@nextspin.club.

Next Spin collects data across three main categories: information you provide directly, data generated through your use of the platform, and data received from legitimate third parties such as payment processors.

Information you provide directly:

• Registration information: full name, date of birth, identity card number (for age verification), email address, Malaysian phone number.
• Payment information: account holder name, e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account details for DuitNow and FPX — stored as encrypted tokens, not full account numbers.
• Address information for verification and compliance purposes.
• Communications you send to our support team via live chat or email.

Data generated through use of the platform:

• Betting and gaming history: games played, wager amounts, results, and activity timestamps.
• Financial transaction history: deposits, withdrawals, bonus credits, and rebates.
• Technical data: IP address, device type, operating system, web browser, and session data.
• Behavioural data: pages visited, session duration, and interaction patterns within the platform.

Every piece of data we collect is used for a specific, legitimate purpose. Here is a full breakdown of how your data is used at Next Spin:

We do not use your data for any purpose other than those stated above without informing you in advance and, where required, obtaining your consent again.

Next Spin does not sell, rent, or commercialise your personal data to any party for marketing purposes or any other commercial purpose without your consent. Data is shared only in the following three circumstances:

• Required service providers: Payment processors such as Touch 'n Go, GrabPay, DuitNow, and FPX gateway providers need to receive relevant transaction information in order to process your deposits and withdrawals. These providers are bound by strict data protection agreements with Next Spin and may only use such data for payment processing purposes.
• Legal requirement: If required by Malaysian law, a court order, or a valid request from a law enforcement authority, Next Spin may be required to disclose certain information. In such cases, we will endeavour to notify you before the disclosure is made, unless we are legally prohibited from doing so.
• Business transfer: In the event of a merger, acquisition, or transfer of Next Spin's assets, user data may be transferred to the acquiring entity. In such cases, you will be notified and given the option to delete your account before the transfer takes place should you not agree to it.

We never share your data with third-party advertisers, data-reselling analytics companies, or any entity that has no direct connection to the delivery of Next Spin's services to you.

Next Spin invests seriously in security infrastructure to ensure your data is protected at every stage — in transit, at rest, and during processing. The security measures we employ are as follows:

• 256-bit SSL/TLS Transit Encryption: All communication between your browser or app and Next Spin's servers is encrypted using TLS 1.3 protocol with 256-bit encryption — the same standard used by Malaysia's banking institutions.
• Data-at-rest encryption: Sensitive data stored in our databases — including payment information and identity numbers — is encrypted at the storage level using AES-256.
• Role-based access control: Only Next Spin staff who require access to specific data in order to carry out their duties are authorised to do so. Access is audited on a regular basis and access rights are updated whenever staff roles change.
• 24/7 Threat Monitoring: Our security monitoring system operates around the clock to detect and respond to any unauthorised access attempts, suspicious activity patterns, or other cybersecurity threats.
• Regular penetration testing: Next Spin conducts regular security testing carried out by independent third parties to identify and address any system vulnerabilities before they can be exploited.
• Data breach response procedure: In the unlikely event of a data breach affecting your personal information, we have clear procedures in place to notify affected users within the stipulated timeframe.

While we take every reasonable measure to protect your data, no security system can be guaranteed to be 100% secure. We encourage you to take your own precautions as well — use a strong password, do not share your login credentials, and contact us immediately if you suspect your account has been accessed without authorisation.

Next Spin retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. The following are general guidelines on retention periods for different categories of data:

• Active account information: Retained for as long as your account remains active with Next Spin.
• Financial transaction records: Retained for a minimum of 7 years after the transaction, in line with Malaysian legal requirements on financial records and anti-money laundering.
• Support communication history: Retained for 2 years after the last communication, for reference and dispute resolution purposes.
• Technical data and logs: Retained for 90 days for security and fraud detection purposes, then automatically deleted or anonymised.
• Marketing data (with consent): Retained until you withdraw your consent, after which we will stop using it for marketing purposes and delete it within 30 days.
• Self-exclusion records: Retained indefinitely to ensure you cannot re-register an account if you have opted for permanent self-exclusion.

Once the retention period expires, data is securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process is automatic and requires no action on your part.

Next Spin uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential Cookies (cannot be disabled): Required for core platform functions such as login sessions, security, and language preferences. Without these cookies, the platform will not function properly.
• Performance Cookies: Collects information on how you use the Next Spin platform — which pages you visit most frequently, how long you spend on them, and where you came from. This data is used to improve the platform and does not contain personal information that can directly identify you.
• Functional Cookies: Allows the platform to remember your preferences — such as language, display format, and other settings — to provide a more personalised experience.
• Marketing Cookies (with consent): Used to show you relevant Next Spin promotions. This is only activated if you consent during cookie settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Next Spin platform. For detailed guidance on managing cookies in popular browsers such as Chrome, Safari, or Firefox, refer to the help section of the respective browser.

As a Next Spin player in Malaysia, you have the following rights regarding your personal data. We respect and facilitate the exercise of each of these rights: