12play Privacy Policy – Malaysia User Data & Privacy Protection

1 Introduction

12play cares about your privacy. We understand that when you trust us with your personal information, that is a significant responsibility and we do not take it lightly.

This Privacy Policy explains in detail how 12play collects, processes, stores and protects your personal data when you use our platform — whether through the website at 12play.ml or via our mobile app.

This document is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards. We believe you have the right to know exactly what happens to your information — which is why we have written this policy in clear, easy-to-understand language.

2 Information We Collect

12play only collects information that is strictly necessary to provide you with a safe, legitimate and quality service. The following are the categories of data we collect:

A. Registration & Identity Information

• Full name as per identity card
• Date of birth (for age verification)
• Email address and phone number
• Residential address
• Identity document copies (KYC) when required

B. Financial Information

• Bank account number or e-wallet for withdrawal purposes
• Deposit and withdrawal transaction records
• Wagering history and gaming activity

C. Technical Information

• IP address and device information
• Browser type and operating system
• Access log and session data
• Cookies and platform usage data

3 How We Use Your Data

The data we collect is used exclusively for the following purposes:

We do not use your data for any purpose beyond those stated above without first obtaining your consent.

4 Legal Basis for Data Processing

The processing of your personal data by 12play is carried out on a solid legal basis in accordance with Malaysia's PDPA:

• Consent: You have given explicit consent during the registration process
• Contract Performance: Processing is necessary to provide the service you requested
• Legal Obligation: We are required to comply with anti-money laundering (AML) regulations and KYC requirements
• Legitimate Interest: To prevent fraud and ensure platform security

5 Data Sharing with Third Parties

12play does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in certain circumstances we may share your data with:

• Service Providers: Companies that help us operate the platform — such as cloud infrastructure providers, payment processors, and identity verification services — are all bound by strict confidentiality agreements
• Regulatory Authority: When required by Malaysian law or a valid court order
• Game Provider Partners: Minimum information required to provide access to third-party games on our platform
• Fraud Investigators: In cases involving suspected fraud or illegal activity investigations

6 Data Security

Protecting your data is one of 12play's highest priorities. We implement multiple layers of technical and organisational security to keep your information safe at all times:

• 256-bit SSL Encryption for all data transmitted between your browser and our servers
• Static data encryption for all sensitive information stored in our database
• Role-based access control — only authorised personnel can access user data
• 24/7 security monitoring with automated intrusion detection systems
• Regular security audits by independent and accredited third parties
• Two-factor authentication (2FA) for administrative and user account access

While we take all reasonable security measures, no system can be guaranteed 100% secure. In the event of a significant data breach, we will notify you within 72 hours as required by law.

7 Cookies and Tracking Technologies

12play uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login sessions and security. Cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform so we can continuously improve it.
• Functional Cookies: Saving your preferences such as language and display settings for your convenience.
• Analytics Cookies: Collecting general statistical data about platform usage without personally identifying you.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality of some parts of the platform.

8 Data Storage and Deletion

12play retains your personal data for as long as it is needed for the purposes stated in this policy, or for as long as your account remains active on our platform.

Our data retention guidelines:

• Active account data: Retained for as long as your account is active and for 5 years after account closure
• Financial transaction records: Retained for 7 years in accordance with Malaysian legal requirements
• Access and security logs: Retained for 2 years
• Customer support communication records: Retained for 3 years

Once the retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to you.

9 Your Rights Under the PDPA

As a 12play user, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of any inaccurate or incomplete data
• Right to Erasure: Request deletion of your data under certain conditions
• Right to Restriction of Processing: Request that we restrict the processing of your data in certain circumstances
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to the processing of your data for direct marketing purposes
• Right to Withdraw Consent: Withdraw your consent at any time without affecting the validity of prior processing

To exercise any of the above rights, please contact our support team. We will process your request within 14 business days. Identity verification may be required before we proceed.

10 Children's Privacy

The 12play platform is exclusively for users aged 18 and above. We do not knowingly collect, process or store personal data from individuals under the age of 18.

Should we discover that personal data belonging to a minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that data and close the associated account.

If you believe your child or someone under the age of 18 has registered on our platform, please contact us immediately at [email protected] so we can take appropriate action.

11 Links to Other Websites

The 12play platform may contain links to third-party websites or services — such as partner game providers. Please note that this Privacy Policy applies solely to the 12play platform.

We have no control over the content, privacy policies, or practices of third-party websites. We encourage you to read the privacy policy of every website you visit before providing any personal information.

12 Changes to the Privacy Policy

12play reserves the right to update or modify this Privacy Policy from time to time to reflect changes in law, industry practices or how we handle data. Any changes will be posted on this page with a new update date.

For significant changes that affect how we use your data, we will notify you via email or in-app notification before the changes take effect, giving you the opportunity to review and make an informed decision.

Continued use of the 12play platform after any changes to this Privacy Policy will be considered your acceptance of those changes.

13 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Live Chat: Via the chat icon on the12play platform — available 24/7
• Email: [email protected] — we will reply within 24 business hours
• FAQ: For general questions, check our FAQ page for quick answers

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection under the Ministry of Communications and Multimedia Malaysia.