Privacy Policy — NextSpin
This Privacy Policy explains how NextSpin collects, uses, stores and protects the personal data of registered users and visitors. We are committed to handling your information transparently and responsibly in accordance with applicable data protection principles.
Your Data Is Encrypted
All personal data transmitted to and from NextSpin is protected using 256-bit SSL/TLS encryption. Data stored at rest is encrypted using industry-standard protocols at all times.
We Never Sell Your Data
NextSpin does not sell, rent or commercially exploit your personal information to any third party. Data sharing is limited strictly to what is necessary for platform operation and legal compliance.
You Control Your Data
Registered users have the right to access, correct and request deletion of personal data held by NextSpin, subject to legal retention obligations. Contact our support team to exercise your rights.
Minimal Data Collection
We collect only the information necessary to operate your Account, process payments, fulfil KYC obligations and deliver our services. We do not collect data beyond these defined purposes.
Transparent Cookie Use
NextSpin uses cookies and similar technologies to maintain session security and improve platform performance. We do not use tracking cookies for advertising purposes on third-party networks.
Defined Retention Periods
Personal data is retained only for as long as required by applicable law or necessary to fulfil the purposes outlined in this Policy. Data is securely deleted or anonymised once the retention period expires.
Introduction
NextSpin ("we", "us", "our") operates the online casino and sports betting platform accessible at nextspin.cam. This Privacy Policy ("Policy") describes how NextSpin collects, processes, uses, stores, discloses and protects the personal data of individuals who access or use our platform, whether as registered account holders or as visitors browsing the website.
We are committed to protecting the privacy of our users in accordance with applicable data protection laws and international best practices. This Policy applies to all personal data processed in connection with the NextSpin platform and its associated services — including casino games, sports betting markets, live dealer tables, account management functions, payment processing and customer support interactions.
By registering an Account on NextSpin, or by continuing to use the Platform following notification of updates to this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" means any information that identifies or can identify a natural person, directly or indirectly, including name, identification number, location data, online identifiers or factors specific to that person's identity.
- "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure or erasure.
- "Data Controller" means NextSpin, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
- "Data Processor" means a third party that processes Personal Data on behalf of NextSpin under contractual instruction, such as payment gateway providers or KYC verification services.
- "User" means any individual who registers an Account on or accesses the NextSpin Platform.
- "KYC" means Know Your Customer — the identity and age verification process required under anti-money laundering and responsible gambling obligations.
- "Cookies" means small data files placed on a User's device by the Platform to enable session functionality, security and performance monitoring.
Data We Collect
NextSpin collects Personal Data through the following means: directly from Users during registration and Account use; automatically through Platform interaction; and from third-party service providers such as payment processors and KYC verification partners. The categories of Personal Data we collect are as follows:
3.1 Registration & Identity Data
- Full legal name
- Date of birth (to verify the 21+ age requirement)
- Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
- Email address
- Mobile phone number
- Username and hashed password
3.2 Identity Verification (KYC) Data
- Copy of national identity document (e.g., Malaysian MyKad) or passport
- Proof of address documentation (e.g., utility bill or bank statement)
- Selfie or photograph submitted for liveness verification, where required
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction records (amount, date, payment method, status)
- Payment method identifiers (e.g., partial e-wallet account numbers for Touch 'n Go eWallet, Boost, GrabPay; bank account details for DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong)
- Betting history and wagering records
- Bonus and promotional transaction records
3.4 Technical & Usage Data
- IP address and approximate geographic location
- Device type, operating system, browser type and version
- Session duration, pages visited and features used
- Log files and error reports
- Cookie identifiers and session tokens
3.5 Communication Data
- Records of live chat conversations with our support team
- Email correspondence sent to or received from NextSpin
- Records of responsible gambling interactions (e.g., deposit limit requests, self-exclusion applications)
Legal Basis for Processing
NextSpin processes your Personal Data on the following legal bases:
| Purpose of Processing | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Terms & Conditions) |
| Processing deposits and withdrawals | Performance of contract; Legal obligation (AML) |
| KYC identity and age verification | Legal obligation; Legitimate interest |
| Responsible gambling monitoring | Legal obligation; Legitimate interest |
| Customer support and communications | Performance of contract; Legitimate interest |
| Fraud prevention and security monitoring | Legitimate interest; Legal obligation |
| Platform analytics and improvement | Legitimate interest |
| Promotional communications (where opted in) | Consent |
How We Use Your Data
NextSpin uses Personal Data collected from Users for the following purposes:
- Account operations: To create, manage and maintain your NextSpin Account, including authentication and account recovery.
- Payment processing: To facilitate deposits and withdrawals through your selected payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and major Malaysian bank transfers.
- KYC and compliance: To verify your identity and age in fulfilment of our anti-money laundering obligations and responsible gambling commitments.
- Game and betting services: To record and process all betting activity, game sessions and associated transactions on your Account.
- Responsible gambling: To monitor Account activity for indicators of problem gambling behaviour and to administer deposit limits, self-exclusion requests and reality check reminders.
- Fraud and security: To detect, prevent and investigate suspected fraud, identity theft, unauthorised access and other security threats.
- Customer support: To respond to enquiries, resolve disputes and handle complaints raised by registered Users.
- Platform improvement: To analyse usage patterns, identify technical issues and improve the functionality, content and performance of the Platform.
- Promotional communications: To send relevant offers, bonus notifications and platform updates to Users who have opted in to receive marketing communications. You may withdraw consent at any time by contacting our support team.
- Legal obligations: To comply with applicable laws, regulations, licensing requirements and lawful requests from competent authorities.
Data Sharing
NextSpin does not sell, rent, trade or otherwise commercially share your Personal Data with third parties. We may share Personal Data with the following categories of recipients only to the extent necessary and permitted by applicable law:
6.1 Payment Service Providers
Personal and transaction data is shared with payment gateway providers — including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow and FPX transactions — to process deposits and withdrawals. These providers are contractually bound to handle data securely and use it only for payment purposes.
6.2 KYC and Compliance Partners
Identity documents and verification data may be shared with licensed KYC verification service providers to fulfil identity and age verification requirements. These partners process data under strict data processing agreements and are not permitted to use the data for their own purposes.
6.3 Technology and Infrastructure Providers
NextSpin uses third-party technology partners for cloud hosting, security monitoring and platform infrastructure. These providers act as Data Processors under our instruction and do not independently access or use User data for their own purposes.
6.4 Legal and Regulatory Disclosure
NextSpin may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where required by applicable law, or where we believe disclosure is necessary to prevent fraud, illegal activity, or harm to any person.
Storage & Security
Personal Data collected by NextSpin is stored on secure servers protected by industry-standard technical and organisational safeguards. The following measures are in place to protect your data:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encryption of Personal Data at rest using AES-256 or equivalent standards.
- Role-based access controls limiting internal access to Personal Data to authorised personnel only.
- Regular penetration testing and vulnerability assessments of platform infrastructure.
- Two-factor authentication requirements for all internal administrative systems.
- Audit logging of all access to sensitive data categories.
While we implement robust security measures, no system can guarantee absolute security against all possible threats. In the event of a data breach that presents a material risk to User rights, NextSpin will notify affected Users and relevant authorities in accordance with applicable legal requirements.
Data Retention
NextSpin retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following general retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of Account plus 5 years post-closure |
| KYC verification documents | 5 years from submission (AML obligation) |
| Financial transaction records | 7 years (standard financial record-keeping) |
| Betting and game history | Duration of Account plus 3 years post-closure |
| Customer support communications | 3 years from last interaction |
| Technical and usage logs | Up to 12 months (rolling) |
| Marketing consent records | Until consent is withdrawn, then 1 year |
Following the expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes Personal Data.
Cookies & Tracking Technologies
NextSpin uses cookies and similar technologies — including session tokens and local storage objects — to maintain session security, enable platform functionality and monitor performance. The following categories of cookies are used:
- Essential Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core functionality.
- Performance Cookies: Used to collect anonymous information about how Users interact with the Platform, enabling us to identify and fix technical issues and improve user experience. Data collected is aggregated and does not identify individual Users.
- Functional Cookies: Store user preferences such as language and display settings to personalise the Platform experience across sessions.
NextSpin does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes. You may manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from logging in or using core features of the Platform.
User Rights
Subject to applicable law, NextSpin Users have the following rights in relation to their Personal Data. To exercise any of these rights, please contact our support team. Requests will be acknowledged within five business days and fulfilled within thirty days, subject to complexity.
Minors & Age Restriction
NextSpin is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory step in our KYC process, and Accounts cannot be fully activated until age has been confirmed.
If NextSpin becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant Account, delete the associated data, and refund any deposited funds in accordance with our account closure procedure. If you believe a minor has registered an Account on NextSpin, please contact our support team immediately.
Third-Party Services
The NextSpin Platform integrates third-party services including game software providers, payment processors, KYC verification partners and infrastructure providers. While NextSpin takes contractual steps to ensure these partners maintain appropriate data protection standards, we are not responsible for the independent privacy practices of third-party entities.
This Policy does not govern the privacy practices of third-party services. We encourage Users to review the privacy policies of any third-party payment providers they use — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow and their banking providers — to understand how those services handle personal data independently.
Policy Changes
NextSpin may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations or platform functionality. Where changes are material, we will notify registered Users via a platform notification or to the email address on record.
The "Last Updated" date at the top of this page reflects when the most recent revision was published. We encourage you to review this Policy periodically. Continued use of the NextSpin Platform following the effective date of any update constitutes your acceptance of the revised Policy.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact NextSpin's support team. We are available 24 hours a day, seven days a week via live chat, with our team operating on Malaysia Standard Time (MYT, UTC+8).
For formal data-related requests — including access, rectification, erasure or portability requests — please contact us in writing, including your registered Account username and a description of your request. We will acknowledge receipt within five business days.
We're Here to Help
If you'd like to understand more about how NextSpin handles your data, or if you want to exercise your data rights, our support team is available 24/7. You can also read our full Terms & Conditions or visit our FAQ for answers to the most common questions from Malaysian players.
NextSpin is strictly for players aged 21 and above only. Play responsibly.