Official Document ยท Malaysia PDPA Compliance

12 Play Privacy Policy โ€“ Protection of Your Personal Data

At 12 Play, your privacy is more than a legal obligation โ€” it is a core value we stand by. This Privacy Policy clearly explains how we collect, use, store, and protect the personal data of our members in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA).

Effective: 1 January 2026  |  Applies to all Malaysian members
Our Privacy Commitment
  • Full compliance with Malaysia's PDPA 2010
  • 256-bit SSL encryption for all data
  • No sale of data to third parties
  • Right to access and correct data
  • Two-factor authentication (2FA) available

How 12 Play Protects Your Privacy

Six key pillars of data protection we have put in place to safeguard every 12 Play member in Malaysia

๐Ÿ”

Industry-Grade Encryption

All data transmitted between your device and 12 Play's servers is protected by 256-bit SSL/TLS encryption โ€” the same standard used by leading banking institutions in Malaysia. Sensitive data such as payment information is stored in fully encrypted format.

๐Ÿ›๏ธ

Malaysia PDPA Compliance

12 Play fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data that is necessary, retain it for legitimate periods only, and give you full control over your own personal information.

๐Ÿšซ

No Sale of Personal Data

12 Play has never and will never sell, rent, or trade our members' personal data to any third party for marketing purposes. Your data belongs to you โ€” not to us.

๐Ÿ‘๏ธ

Data Collection Transparency

We are always transparent about what data we collect and why. There is no hidden data collection. Every type of data we store is described in this Privacy Policy with a clear and legally valid purpose.

โš™๏ธ

Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. Through your account settings or by contacting our team, you can manage your privacy with ease.

๐Ÿ›ก๏ธ

24/7 Security Monitoring

The 12 Play cybersecurity team monitors for suspicious activity around the clock. Any unauthorised attempts to access your data are automatically detected and blocked. You will be notified if any unusual activity is detected on your account.


๐Ÿ“‹1. Introduction & Scope of Privacy Policy

This Privacy Policy is published by 12 Play ("we", "the Company" or "the platform") and applies to all individuals who access or use the 12 Play platform, including our website and mobile applications. This Policy provides a comprehensive overview of our privacy practices regarding the collection, processing, storage and protection of your personal data.

By registering a 12 Play account or using any of our services, you consent to 12 Play processing your personal data as described in this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of our platform.

We are committed to ensuring that every aspect of your personal data processing is carried out in compliance with Malaysia Personal Data Protection Act 2010 (PDPA) and internationally recognised best practices in data protection.

This Privacy Policy should be read together with our Terms & Conditions 12 Play. Together, these two documents form the complete agreement governing your use of the platform and your data.

๐Ÿ“Š2. Types of Personal Data We Collect

12 Play only collects personal data that is strictly necessary to deliver our services safely and efficiently. The categories of data we collect are as follows:

Data Category Example Information Requirements
Identity Data Full name, date of birth, MyKad/passport number Mandatory (KYC)
Contact Data Malaysian phone number, email address Mandatory
Financial Data Payment methods (Touch 'n Go, GrabPay, DuitNow), MYR transaction records Mandatory
Technical Data IP address, device type, web browser, access logs Automatic
Activity Data Game history, bets, winnings, bonus usage Automatic
Communications Data Live chat records, support emails, complaints Where applicable

We do not collect sensitive data such as health information, political views, or religious beliefs unless you voluntarily share it while communicating with our support team.

๐Ÿ”3. How Personal Data Is Collected

12 Play collects your personal data through the following channels:

  • Account Registration: When you complete the registration form with your personal details, phone number, and email address
  • Verification Process (KYC): When you submit identity documents such as a copy of your MyKad or passport for identity verification purposes
  • Financial Transactions: Payment information is collected automatically when you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX
  • Platform Usage: Game activity data, login and logout records, sports betting activity (Malaysia Super League football, EPL, badminton) and live casino activity are collected automatically
  • Communications with Us: When you contact our support team via live chat, email, or WhatsApp
  • Cookies and Tracking Technologies: Technical data is collected automatically via cookies, pixels, and similar technologies when you browse our platform
We do not purchase or acquire personal data lists from third parties for direct marketing purposes without your prior consent.

๐ŸŽฏ4. Purpose of Personal Data Use

12 Play uses your personal data responsibly and only for legitimate purposes. The following are the primary purposes for which your data is used:

  • Account Management: Creating, verifying, and managing your member account on the 12 Play platform
  • Transaction Processing: Process MYR deposits via local payment methods and withdrawals to your e-wallet or bank account
  • Legal Compliance: Meet KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting requirements as mandated by Malaysian authorities
  • Platform Security: Detecting and preventing fraud, unauthorised access, multi-accounting, and system abuse
  • Customer Support: Effectively handle member enquiries, complaints, and support requests
  • Personalised Marketing: Sending information about relevant promotions, bonuses, and exclusive offers โ€” only if you have consented to receive marketing communications
  • Platform Improvement: Analysing usage patterns to improve the gaming experience, website performance, and overall service quality
  • Responsible Gaming: Monitoring betting patterns to identify members who may need responsible gaming support
Please Note: Your data will not be used for any purpose other than those stated above without your explicit consent.

๐Ÿค5. Data Sharing with Third Parties

12 Play does not sell, rent, or disclose your personal data to third parties except in the following limited circumstances:

  • Trusted Service Provider: Payment technology providers (Touch 'n Go, GrabPay, DuitNow, FPX), gaming software providers (Evolution Gaming, Pragmatic Play), and cloud services we use to operate the platform โ€” all bound by strict data protection agreements
  • Legal Requirements: When required by a court, Malaysian authority, or law enforcement agency through a lawful order
  • Fraud Prevention: Sharing necessary information with industry bodies or regulatory authorities to prevent fraud and money laundering
  • Business Transfer: In the event of a merger, acquisition, or sale of company assets, your data may be transferred as part of those assets โ€” you will be notified in advance

All third parties we engage are required to uphold data protection standards equal to or higher than our own. We do not permit third parties to use your data for their own marketing purposes.

๐Ÿ”’6. Data Security & Protection Measures

12 Play makes serious investments in cybersecurity infrastructure to protect our members' personal data. The security measures we have implemented include:

  • 256-bit SSL/TLS Encryption for all data in transit between your browser and our servers
  • AES-256 Encryption for sensitive data stored in our databases
  • Two-Factor Authentication (2FA) available for all member accounts as an added layer of security
  • 24/7 Security Monitoring by an experienced cybersecurity team
  • Regular Security Audits by an independent, accredited third party
  • Strict Access Controls โ€” only authorised personnel may access members' personal data, and only within the scope of their responsibilities
  • Secure Data Backup with redundant data centres to ensure data availability and integrity

While we take all reasonable precautions, no security system can be guaranteed to be 100% secure. In the event of a data breach affecting your information, we will notify you within 72 hours after the breach is detected, in line with industry best practices.

You also play an important role in keeping your data secure. Never share your 12 Play account password with anyone, and always log out after each session โ€” especially when using a shared or public device.

๐Ÿ—“๏ธ7. Data Retention Period

12 Play retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by Malaysian law. Our general data retention guidelines are as follows:

  • Active Account Data: Retained for as long as your account remains active on the 12 Play platform
  • Financial Transaction Records (in MYR): Retained for a minimum of 7 years in accordance with Malaysia's AML and tax legal requirements
  • KYC (Identity Verification) Records: Retained for a minimum of 5 years after account closure
  • Support Communication Logs: Retained for 2 years for reference and dispute resolution
  • Technical & Log Data: Retained for 90 days for security and troubleshooting purposes
  • Account Closed: Basic data is retained for 5 years after account closure for legal compliance purposes, then deleted or anonymised

Once the retention period has expired, your data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

โš–๏ธ8. Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

๐Ÿ‘๏ธ

Right to Access

You have the right to request a copy of all personal data we hold about you at any time.

โœ๏ธ

Right to Rectification

You may request the correction of any inaccurate or incomplete data held in our records.

๐Ÿ—‘๏ธ

Right to Erasure

You may request the deletion of your data, subject to our legal data retention obligations.

๐Ÿšซ

Right to Withdraw Consent

You may withdraw your consent to certain data processing activities at any time, including marketing communications.

๐Ÿ“ฆ

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

๐Ÿ“ฉ

Right to Lodge a Complaint

You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe we have violated the PDPA.

To exercise any of the above rights, please contact our privacy team at privacy@12play-play.com. We will respond to your request within 14 working days.

๐Ÿช9. Cookies & Tracking Technologies

The 12 Play platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The types of cookies we use include:

  • Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how you use the platform (pages visited, time spent) to help us improve our services.
  • Functional Cookies: Saves your preferences such as language, region, and display settings to deliver a more personalised experience.
  • Marketing Cookies: Used to display relevant promotions and advertisements. These cookies are only activated with your consent.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the 12 Play platform. For more information on managing cookies in your browser, refer to your browser's official documentation.

12 Play does not use third-party cookies for cross-site advertising purposes without your explicit consent.

๐Ÿ‘ถ10. Children's Privacy

The 12 Play platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have collected personal data from an individual under the age of 18, we will take immediate steps to:

  • Immediate closure of the account in question
  • Delete all associated personal data
  • Return any remaining account balance where applicable
  • Reporting cases to the relevant authorities where required

If you are a parent or guardian and believe your child has registered an account on 12 Play, please contact us immediately at support@12play-play.com and we will respond promptly.

๐Ÿ”—11. Links to Third-Party Platforms

The 12 Play platform may contain links to third-party websites or services from time to time. This Privacy Policy applies solely to the 12 Play platform and does not cover the privacy practices of any such third parties.

We are not responsible for the content, privacy policies, or practices of any third-party websites. We recommend reading the Privacy Policy of each website you visit separately before providing them with any of your personal data.

Please Note: Payment providers such as Touch 'n Go, GrabPay, and Maybank2u have their own Privacy Policies governing data processing when transactions occur on their platforms. Please review their policies separately.

๐Ÿ”„12. Amendments to the Privacy Policy

12 Play reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. The latest version of the Privacy Policy will always be available on this page.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Effective date" at the top of this page
  • Sending notifications to the email address registered to your account
  • Displaying clear notices within the 12 Play platform

Your continued use of the 12 Play platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your personal data.

๐Ÿ“ฉ13. Contact Our Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 12 Play, please contact our Data Protection Officer (DPO) through the following channels:

  • Privacy Email: privacy@12play-play.com โ€” dedicated to data and privacy-related enquiries
  • General Support Email: support@12play-play.com โ€” for general enquiries
  • Live Chat: Available 24/7 within the 12 Play platform for immediate assistance
  • WhatsApp: Contact us for a response within 5 minutes, any time of day

We are committed to responding to all privacy-related enquiries within 14 working days. For more serious complaints or those involving a potential PDPA breach, we will prioritise the matter and respond within 3 business days.

Our privacy team is available in Bahasa Melayu and Mandarin. We ensure every enquiry is handled with care and respect.

Privacy Assured ยท Secure Platform ยท Malaysia

Your Data Is Safe at 12 Play

Register for a 12 Play account today and enjoy a safe, fair and responsible gaming experience. Deposit easily with Touch 'n Go, GrabPay or DuitNow in MYR.

SSL 256-bit ยท PDPA Compliant ยท 18+ Only ยท Responsible Gaming

Bahasa Melayu