Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by 12malaysia ("Platform", "we", "us", "our"), the operator of the online gaming platform accessible at https://12malaysia.cam and all associated sub-domains and mobile interfaces.

This Policy describes how 12malaysia collects, uses, stores, discloses, and otherwise processes personal data about individuals ("Data Subjects", "you") who visit our website, register an Account, or otherwise interact with our services — including casino games, live dealer tables, sports betting, and payment processing.

By registering an Account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, contact number, identification number, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — 12malaysia, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" — a third party that processes Personal Data on behalf of 12malaysia under a data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a specified purpose.
• "KYC Data" — identity verification documents and related information collected as part of the Know Your Customer compliance process.
• "Cookies" — small text files placed on a user's device by a web server to store session and preference information.
• "PDPA" — the Personal Data Protection Act 2010 of Malaysia (Act 709), which regulates the processing of personal data in commercial transactions involving persons in Malaysia.

Data We Collect

12malaysia collects Personal Data through multiple channels in the course of providing its services. The categories of data collected are set out below.

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser information
• Session duration, pages visited, and navigation path
• Cookies, session tokens, and similar tracking identifiers
• Referring URL and search query (where applicable)

3.3 Transaction and Gaming Data

We record all financial transactions (deposits, withdrawals, bonus credits) and gaming activity (bets placed, game results, session history) as part of our regulatory and fraud-prevention obligations.

3.4 Communications Data

Where you contact us via live chat, email, or other support channels, we retain records of those communications for quality assurance, training, and dispute resolution purposes.

Legal Basis for Processing

12malaysia processes your Personal Data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing is required to perform the contract between you and 12malaysia — i.e., to provide gaming services, process payments, and manage your Account.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and licensing conditions.
• Legitimate Interests: Processing is necessary for our legitimate business interests — such as fraud detection, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your rights.
• Consent: Where we rely on consent as a legal basis (primarily for marketing communications and non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

How We Use Your Data

12malaysia uses the Personal Data we collect for the following purposes:

5.1 Account Management & Service Delivery

• Creating and maintaining your registered Account on the Platform.
• Processing deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels (BTC, ETH, USDT).
• Providing customer support via live chat, email, and other channels in English, Bahasa Melayu, and Chinese.
• Delivering bonuses, promotions, and VIP loyalty rewards to eligible Players.

5.2 Compliance & Regulatory Obligations

• Verifying your identity and age (minimum 21 years) through KYC procedures.
• Monitoring transactions for anti-money laundering (AML) compliance and fraud prevention.
• Maintaining records as required by our licensing authority.
• Responding to lawful requests from regulatory or law enforcement authorities.

5.3 Responsible Gambling

• Monitoring gaming behaviour for indicators of problem gambling.
• Administering deposit limits, cooling-off periods, and self-exclusion requests.
• Contacting Players where there are welfare concerns in accordance with our responsible gambling obligations.

5.4 Platform Improvement & Analytics

• Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game selection.
• Conducting A/B testing and feature development based on anonymised behavioural patterns.

5.5 Marketing Communications (with Consent)

With your explicit consent, we may send you promotional emails, push notifications, or in-platform messages about bonuses, new game releases, sports betting offers, and platform updates. You can withdraw consent at any time by contacting our support team.

Data Sharing & Disclosure

12malaysia does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may disclose your data to the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment Processors: Malaysian payment service providers (including FPX gateway operators, DuitNow processors, e-wallet operators such as Touch 'n Go and Boost) and cryptocurrency processing services receive payment-related data to facilitate transactions.
• Game Studio Partners: Licensed third-party game providers receive anonymised session identifiers to deliver game content and calculate outcomes.
• KYC & Identity Verification Services: Accredited third-party identity verification providers process KYC documents on our behalf under strict data processing agreements.
• Fraud Prevention & Security Services: Specialist providers who assist with IP analysis, device fingerprinting, and fraud detection, processing data under contractual controls.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or the conditions of our licensing authority, we may disclose Personal Data to competent authorities.
• IT Infrastructure & Cloud Providers: Hosting, database, and cloud infrastructure providers who process data as Data Processors under binding agreements with appropriate security standards.

All third-party Data Processors are engaged under written agreements that impose data protection obligations equivalent to those applicable to 12malaysia.

Data Retention

12malaysia retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures.

Data Security

12malaysia implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields (including password hashes and financial identifiers) at rest.
• Role-based access controls ensuring that only authorised personnel can access Personal Data, and only to the extent required for their specific role.
• Multi-factor authentication for all internal system access by 12malaysia staff.
• Regular security assessments, penetration testing, and vulnerability scanning.
• Incident response procedures with defined escalation paths and notification timelines in the event of a personal data breach.

Cookies & Tracking Technologies

12malaysia uses cookies, web beacons, pixel tags, and similar technologies to operate the Platform effectively and to improve your experience. The categories of cookies we use are as follows:

You can manage and control cookie settings through your browser preferences at any time. Disabling strictly necessary cookies may impair Platform functionality. For analytical and marketing cookies, you may withdraw consent without affecting your ability to use the Platform.

Your Rights as a Data Subject

Subject to applicable law and certain exemptions, you have the following rights in relation to your Personal Data held by 12malaysia:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Where possible, you can update basic profile information directly within your Account dashboard.
• Right to Erasure: In certain circumstances, you may request deletion of your Personal Data. Note that this right is subject to our legal retention obligations under AML and licensing regulations, which may prevent full erasure.
• Right to Restriction: You may request that we restrict processing of your Personal Data in specified circumstances — for example, while a correction request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract and conducted by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, and you have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected] (plain text — not a clickable link). We will respond to all verified requests within 30 days.

International Data Transfers

12malaysia operates internationally and may transfer Personal Data to, or store data on, servers or systems located outside Malaysia. Where such international transfers occur, we ensure that appropriate safeguards are in place, including:

• Contractual clauses with recipients that impose data protection standards consistent with this Policy.
• Transfers only to countries or recipients that offer an adequate level of data protection as assessed by us or recognised under applicable standards.
• Encryption and security controls applied consistently regardless of storage location.

By using the Platform, you acknowledge that your Personal Data may be processed outside Malaysia as described above.

Protection of Minors

The 12malaysia Platform is strictly for persons aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21.

As part of our registration and KYC process, we verify the age of all Account holders. Any Account found to belong to a person under 21 will be immediately suspended, any balance returned, and all associated Personal Data deleted or anonymised in accordance with our data minimisation obligations.

If you have reason to believe that a minor has registered an Account on 12malaysia, please contact us immediately at [email protected] (plain text — not a clickable link).

Policy Amendments

12malaysia reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Material changes will be communicated to registered Players via a prominent notice on the Platform and, where contact preferences permit, by email to the address registered on your Account. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically. If you disagree with any amended terms, you must cease using the Platform and may request Account closure by contacting our support team.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the 12malaysia Data Protection team through the following channels:

• Live Chat: Available 24/7 on the Platform. Average response under 5 minutes. Agents available in English, Bahasa Melayu, and Chinese.
• Support Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line.
• Response Timeframe: We will acknowledge receipt of all data-related enquiries within 5 business days and provide a substantive response within 30 calendar days.