Privacy & Data Protection

12malaysia Privacy Policy — Your Data Security is Our Priority

At 12malaysia, we believe privacy is not merely a legal obligation — it is a fundamental right of every user. This document clearly explains how we manage your data, who can access it, and your rights as the owner of that data.

Last Updated: 1 January 2026
1

Introduction — Our Commitment to Your Privacy

This Privacy Policy explains how 12malaysia collects, uses, stores, discloses, and protects your personal information when you use our platform, whether through the website or mobile app. This document is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

As a platform serving users in Malaysia, 12malaysia takes every aspect of data management seriously. We understand that personal data is more than just numbers and text — it represents your identity, your life, and your trust in us. Every data-related decision is therefore made with care and responsibility.

By registering or using 12malaysia's services, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use and contact us to close your account.

This Privacy Policy applies to all users of the 12malaysia platform regardless of how you access our services — via web browser, iOS app, or Android app. The Bahasa Malaysia version is the official version.

2

Personal Data We Collect

12malaysia only collects data that is genuinely necessary to deliver a quality service to you. We do not engage in excessive data collection or retain information that has no relevance to your use of the platform.

Data Category Sample Information Status
Personal Identity Full name, date of birth, IC/passport number Required
Contact Information Email address, phone number Required
Financial Data Bank account number, card number, transaction records Required
KYC Documents Copy of ID card, verification selfie Required
Technical Data IP address, device type, web browser, OS Automatic
Usage Data Betting history, games accessed, session duration Automatic
Communication Preferences Language, notifications, promotion types Preferences

12malaysia does not collect or store your full credit/debit card numbers. Sensitive payment information is processed directly by PCI-DSS certified payment providers and is never stored on 12malaysia's servers.

3

How Your Data Is Used

Every piece of data we collect has a clear and legitimate purpose. 12malaysia uses your data for the following:

Core Service Operations:

  • Creating and managing your user account.
  • Processing deposits, withdrawals, and all financial transactions you request.
  • Verifying your identity through the KYC process to comply with anti-money laundering (AML) requirements.
  • Providing effective customer support when you reach out to us.
  • Sending important notifications related to your account, transactions, and security.

Security & Compliance:

  • Detecting and preventing fraud, account abuse, and illegal activity.
  • Complying with all applicable legal and regulatory requirements.
  • Maintaining audit records for accountability and investigation purposes where required.
  • Protecting the security of the platform and all its users.

User Experience Improvements:

  • Analyzing usage patterns to improve the platform's interface and features.
  • Personalising content, offers, and promotions based on your preferences (with consent).
  • Conducting internal research to better understand user needs.

Your data will not be used for third-party advertising, sold to advertisers, or used to build psychographic profiles without your explicit consent. This is our non-negotiable commitment.

4

Data Sharing & Disclosure to Third Parties

12malaysia does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, in the course of operating the platform, there are specific situations where we need to share information with certain parties:

Trusted Service Providers:

  • Payment provider — to process your deposits and withdrawals via FPX, TNG eWallet, Boost, and local banks.
  • KYC Provider — to verify your identity securely through a certified automated system.
  • Cloud infrastructure provider — servers and databases that store your data under strict security protections.
  • Analytics provider — to understand how the platform is used for improvement purposes (data is aggregated and non-identifiable).

All third-party providers working with 12malaysia are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes defined in those agreements.

Disclosure to Authorities:

12malaysia may disclose data to government authorities or law enforcement when required by Malaysian law, a valid court order, or to protect the rights, property, and safety of the platform and its users.

Every transfer of data to third-party providers is protected by a written agreement requiring them to comply with data protection standards equal to or higher than those we practise at 12malaysia.

5

Data Protection Security Measures

Protecting your data is not just a formality — it is an ongoing investment made by 12malaysia. Here are the security layers that safeguard your information at all times:

256-bit SSL/TLS Encryption
All data transmitted between your device and 12malaysia's servers is encrypted using TLS 1.3 protocol with AES-256-bit encryption — the same standard used by international banking institutions.
Encrypted Database
Personal data is stored in fully encrypted databases. Passwords are not stored in plain text — only cryptographic hashes that cannot be decrypted are kept in our systems.
24/7 Security Monitoring
A SIEM (Security Information and Event Management) system monitors all data access activity in real time. Any suspicious access is detected and blocked automatically within seconds.
Strict Access Control (Least Privilege)
12malaysia staff only have access to the data required for their specific roles. No one has full access to all user data — this is an internal control that cannot be bypassed.
Real-Time Data Backup
Data is backed up in real time to a secondary data centre at a separate geographic location. Our disaster recovery system ensures your data is never lost, even in a worst-case scenario.
Two-Factor Authentication (2FA)
Every login from a new device requires OTP verification via SMS. The 12malaysia mobile App also supports biometric authentication as an additional security layer for your account.

While we take all reasonable steps to protect your data, no system is 100% immune to cyber threats. You also play an important role — never share your password, enable 2FA, and report any suspicious activity to us immediately.

6

Use of Cookies & Tracking Technologies

The 12malaysia platform uses cookies and similar technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for the platform to function — including maintaining your login session and securing transactions. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how pages are used to help us improve the platform. All data is aggregated and does not identify individuals.
  • Functional Cookies: Remembering your preferences such as language and display settings to provide a more personalised experience.
  • Analytics Cookies: Helping us understand website traffic and general user behaviour for product improvement purposes.

You can manage cookie settings through your browser settings. However, disabling essential cookies may affect the functionality of the 12malaysia platform.

7

Data Retention Period

12malaysia does not store your data indefinitely. We maintain a clear retention policy for each data category:

  • Active account data: Retained for as long as your account is active on the 12malaysia platform.
  • Financial transaction records: Retained for 7 years to comply with Malaysian accounting and anti-money laundering legal requirements.
  • KYC documents: Retained for 5 years after account closure in line with PDPA and AML requirements.
  • Technical and security logs: Retained for 12 months for security investigation purposes if required.
  • Customer support communication data: Retained for 3 years to allow historical reference should you contact us again.
  • Marketing data (with consent): Retained until you withdraw consent or close your account, whichever comes first.

Upon expiry of the retention period, data will be securely deleted or aggregated into a form that cannot identify any individual.

8

Your Rights as a Data Owner

Under Malaysia's PDPA and the privacy principles we uphold, you have several important rights regarding your personal data held by 12malaysia:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If you find that any of your data is inaccurate or outdated, you have the right to request a correction through your account settings or customer support.

Right to Erasure

Under certain circumstances, you may request the deletion of your data. This right is subject to mandatory legal retention requirements we are obliged to comply with.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing at any time, without needing to provide a reason.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service provider should you wish to do so.

Withdraw Consent

For processing that relies on your consent, you may withdraw that consent at any time through your account settings.

9

Children's Privacy & Age Restrictions

The 12malaysia platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we discover that data has been collected from minors without our knowledge, that data will be deleted immediately and the account in question will be closed. If you believe your child has registered without permission, please contact our support team right away.

The KYC process carried out by 12malaysia includes strict age verification. Valid identity documents are required for all accounts, making registration by underage individuals extremely difficult to go undetected.

10

Privacy Policy Amendment

12malaysia reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technology we use. Any significant changes will be communicated to you via:

  • Clear in-app notifications within 12malaysia when you log in.
  • Emailed to the address registered to your account at least 14 days before the changes take effect.
  • A notice at the top of this page with a clear update date.

Continued use of the platform after the effective update date indicates your acceptance of the updated policy. You are encouraged to review this page periodically.

11

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights as stated in this Privacy Policy, the 12malaysia privacy team is here to help:

  • Live Chat: The fastest way — available 24/7 directly within the 12malaysia app and website, with an average response time of under 3 minutes.
  • Privacy Email: [email protected] — dedicated to privacy and data protection enquiries.
  • General Support Email: [email protected]

All data access or deletion requests will be responded to within 14 business days. For more complex cases, we will notify you within 3 business days regarding the expected timeline.

You may also refer to FAQ page us for quick answers to common questions about privacy, account security, and personal data management.

12malaysia's Privacy Commitment to You

Six core principles that underpin every privacy-related decision made by 12malaysia.

Highest-Level Encryption

256-bit SSL for all data in transit and AES-256 encryption for stored data — the same standard used by leading banks worldwide.

No Data Sales

Your data is never sold, lent, or traded to advertisers or third parties for their own commercial purposes. This is our absolute promise.

Control Is in Your Hands

You can access, amend, download, or request deletion of your data at any time via your account settings or by contacting us.

Malaysia PDPA Compliance

Every aspect of our data management is designed to meet or exceed the requirements of Malaysia's Personal Data Protection Act 2010.

Servers in Southeast Asia

Your data is stored in data centres located within the Southeast Asia region — not transferred to servers in distant countries with different privacy laws.

Full Transparency

We tell you exactly what data we collect, why we collect it, and how long we keep it. There is no "fine print" designed to mislead.

Your Data is Safe at 12malaysia

Register with confidence — our platform is built with privacy and security at its core. Over 500,000 members have trusted 12malaysia to keep their data safe.

Current Security Status
256-bit SSL Active
Active 24/7 Monitoring
KYC & PDPA Compliance
Real-Time Backup
Contact the Privacy Team

Have questions about your data privacy? We're here to help 24/7.

In-app Live Chat (24/7)
View FAQ
Bahasa Melayu