PDPA 2010 Data Protection

Free Spins Malaysia Privacy Policy

Your privacy is our priority. This document transparently explains how free spins collects, uses, and protects your personal data in accordance with the Personal Data Protection Act 2010 (Malaysia).

Last updated: 1 January 2026  |  Version 3.2

Welcome to the Privacy Policy page free spins (freespins.plus). We understand that entrusting personal information to any online platform requires a strong foundation of trust. At free spins, we do not take that trust lightly.

This Privacy Policy clearly and comprehensively describes how we collect, store, use, and protect your personal data when you use the free spins – whether to play slots, live casino, baccarat, blackjack, or place Sports Betting on Malaysia Liga Super football, badminton, and cricket.

This document has been prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. By registering or continuing to use the platform free spins, you agree to the terms of this Privacy Policy.

Our Commitment: free spins has never sold and will never sell your personal data to any third party for marketing or commercial purposes without your explicit consent. This is our promise to all Malaysian members.
SSL 256-bit
All data transmitted between your device and the free spins servers is encrypted to the industry-leading 256-bit SSL standard.
PDPA 2010 Compliant
Our operations are fully compliant with the Personal Data Protection Act 2010 (Malaysia) – our country's primary privacy legislation.
No Data Selling
Your personal data will not be sold, rented, or exchanged to third parties for marketing purposes without your consent.
Control in Your Hands
You have the full right to access, correct, or request deletion of your personal data at any time.
Secure Server
Data is stored on servers protected by firewalls, intrusion detection systems, and strict access controls.
Dedicated Privacy Officer
We have a Data Protection Officer (DPO) who can be contacted for any privacy-related queries or complaints.
Section 1
What Personal Data Do We Collect?

free spins collects the personal data necessary to operate our services safely and efficiently. The following are the categories of data we collect:

Data Category Sample Information How It Is Collected
Identity Information Full name, date of birth, MyKad / passport number Registration form
Contact Information Email address, Malaysian phone number, residential address Registration form
Financial Data Bank account number, e-wallet account name (Touch 'n Go, GrabPay, DuitNow, FPX) Payment processing
Activity Data Game history, bets, winnings, deposits & withdrawals Automated – system
Technical Data IP address, device type, web browser, operating system, cookie data Automatic – cookies
Communications Support chat logs, emails sent to us, feedback Direct interactions
Note: We do not store full credit or debit card numbers. All sensitive payment information is processed through payment gateways that comply with PCI-DSS standards.
Section 2
Why Do We Collect Your Data?

Every piece of data we collect has a clear and legitimate purpose. free spins use your personal data for the following purposes:

  • Account Management: Creating and managing your member account, verifying your identity, and securing your account against unauthorised access.
  • Transaction Processing: Securely and accurately processing deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u (FPX), CIMB Clicks, and other Malaysian payment methods.
  • Service Delivery: To give you access to all games and services – slots, live casino, baccarat, blackjack, Malaysia Super League football betting, badminton, cricket, and e-sports.
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical support via live chat, email, and phone.
  • Security & Fraud Prevention: Detecting and preventing fraud, money laundering, account misuse, and other unlawful activities.
  • Legal Compliance: To fulfil legal obligations under Malaysia's PDPA 2010 and the requirements of relevant regulatory bodies.
  • Targeted Marketing: Sending information about promotions, bonuses, and special offers free spins that are relevant to you – with your consent. You may opt-out at any time.
  • Platform Improvement: Analysing how the platform is used to improve the user experience, test new features, and ensure optimal platform performance.
Section 3
Legal Basis for Data Processing

free spins only processes your personal data on lawful bases recognised under Malaysia's PDPA 2010. These bases are as follows:

  • Consent: You provide explicit consent at registration and agree to this Privacy Policy. Consent for marketing may be withdrawn at any time.
  • Contract Performance: Processing is necessary to fulfil the service contract between you and free spins – including account management and transaction processing.
  • Legitimate Interest: For security, fraud prevention, and service improvement purposes that do not override your rights and freedoms.
  • Legal Obligation: Compliance with applicable Malaysian laws, including financial record retention requirements and reporting obligations to the relevant authorities.
PDPA 2010: Malaysia's Personal Data Protection Act 2010 is the primary legislation governing the collection and use of personal data in Malaysia. free spins adhere to all seven principles under the PDPA – including the General Principle, Notice & Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.
Section 4
Data Retention & Security

free spins retain your personal data for as long as your account remains active, or as long as needed to fulfil the purposes stated in this Privacy Policy, subject to applicable minimum legal retention requirements.

Data TypeRetention PeriodReason
Identity & Account InformationThroughout active membershipOperational requirements
Financial Transaction Records7 years after the transactionMalaysian legal requirements
Game Logs3 yearsAudit & dispute resolution
Support Communication Logs2 yearsReferences & improvements
Technical Data & Cookies12 monthsPlatform analytics
After account closureDeleted within 90 daysUnless required by law

The technical and organisational measures we employ to protect your data include:

  • 256-bit SSL/TLS encryption for all data transfers between the server and your device.
  • Servers are housed in certified data centres with strict physical access controls and 24/7 monitoring.
  • Next-generation firewall (NGFW) and active intrusion detection & prevention systems (IDS/IPS).
  • Internal access to personal data is restricted to staff who require it on a need-to-know basis (least privilege principle).
  • Regular security audits by independent third parties to identify and address system vulnerabilities.
  • Mandatory privacy awareness and data security training for all staff free spins that processes personal data.
Section 5
Data Sharing & Disclosure to Third Parties

free spins does not disclose your personal data to external parties except in limited and lawful circumstances as outlined below:

  • Payment Service Providers: Payment gateways handling DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) transactions receive only the minimum financial data required to process each transaction.
  • Game Providers: Gaming software companies that provide slots, live casino, and other games may receive session data required to operate those games. They are bound by strict confidentiality agreements.
  • Legal Authority: Where required by Malaysian law or a court order, we will disclose the necessary data to the relevant authorities.
  • Fraud Prevention: Authorised fraud prevention and anti-money laundering agencies may receive data required for legitimate investigations.
What We Do NOT Do: free spins never sell, rent, or disclose your personal data to third-party advertisers, data brokers, or any party for their own marketing purposes without your explicit and revocable consent.
Section 6
Your Rights Under PDPA 2010

As a data subject in Malaysia, you are entitled to the following rights protected under PDPA 2010. free spins committed to making it easy for you to exercise these rights without any barriers.

👁️
Right of Access
You may request a copy of the personal data we hold about you at any time. We will provide this information within 21 business days.
✏️
Right to Rectification
If your personal data is inaccurate, incomplete, or out of date, you have the right to request a correction directly through your account settings or by contacting us.
🚫
Right to Restrict Processing
Under certain circumstances, you have the right to request that we stop processing your personal data – in particular for direct marketing purposes.
🗑️
Right to Erasure
Once your account is closed and there are no remaining legal obligations, you may request the deletion of your personal data from our systems within 90 days.
📤
Right to Data Portability
You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another platform.
📩
Marketing Opt-out Right
You can stop receiving free spins marketing emails or SMS at any time by clicking the "unsubscribe" link or contacting our support team.
To exercise any of the above rights, please contact our Data Protection Officer at privacy@freespins.plus or via the live chat function within the platform. We will process your request within 21 business days.
Section 7
Cookie Policy

free spins use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser.

Cookie TypePurposeStatus
Essential Secure login, user sessions, CSRF protection, language preferences Mandatory – cannot be disabled
Performance Usage analytics, error tracking, page load times Can be disabled
Functionality Remembering display preferences, betting settings, and favourite games Can be disabled
Marketing Displaying relevant promotions and measuring campaign effectiveness Can be disabled

You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the platform free spins.

Section 8
Children's Data Protection

Platform free spins is strictly for individuals aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

  • Should we discover that personal data belonging to an individual under the age of 18 has been collected, we will take immediate steps to delete that data and terminate the relevant account.
  • Parents or guardians who believe their minor child has registered an account with free spins to contact us immediately at privacy@freespins.plus so that appropriate action can be taken promptly.
Section 9
Links to Third-Party Sites

Platform free spins may contain links to or integrations with third-party services such as game providers or payment gateways. This Privacy Policy applies solely to the free spins only.

We are not responsible for the privacy practices of those third-party websites or services. We encourage you to read the privacy policy of each platform you visit separately. All service providers working with us are, however, bound by data processing agreements that require them to protect your data in accordance with the standards we have set.

Section 10
Cross-Border Data Transfers

In carrying out its operations, free spins may transfer personal data to servers or facilities located outside Malaysia for backup or infrastructure management purposes. Any such data transfer will:

  • Protected under data processing agreements that comply with the principles of Malaysia's PDPA 2010.
  • Only carried out to countries or jurisdictions with an equivalent or higher level of data protection.
  • Employing safeguards such as end-to-end encryption during data transmission.
  • Limited to the minimum data required and only for as long as necessary.
Section 11
Changes to This Privacy Policy

free spins reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational improvements. The "Last updated" date at the top of this page will always reflect the latest version.

For significant and material changes, we will notify you via your registered email and/or through a prominent notification on the platform free spins at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated Privacy Policy.

Recommendation: We recommend reviewing this page periodically, especially before making a new deposit or using new platform features. This ensures you are always informed about how your data is handled.
Section 12
Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how free spins handles your personal data, we encourage you to reach out to us directly. We are committed to addressing all privacy enquiries within 5 business days.

📧
Privacy Email
privacy@freespins.plus
Response time: within 5 business days
💬
Live Chat
Available 24/7 within the platform
Response time: within 5 minutes

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia which is the regulatory authority for PDPA 2010 in this country.

YOUR PRIVACY IS PROTECTED

Play with Confidence at Free Spins

Your data is fully protected. Enjoy slots, live casino, Liga Super football, badminton & cricket with complete peace of mind.

Register an Account Now Responsible Gambling
Bahasa Melayu