Privacy Policy 12play — Your Data Is Fully Protected

When you register and use the 12play platform, we collect various types of information to ensure we can provide a safe, efficient service that complies with applicable legal requirements. The information we collect falls into two main categories:

Information You Provide Directly:

• Full legal name as shown on your official identification document
• Date of birth and gender for age verification purposes
• Full current residential address including postcode and state
• An active mobile phone number we can reach you on
• A valid and active email address
• Your bank account details or preferred payment method
• A copy of your identification document such as MyKad or Malaysian passport for the KYC process

Information Collected Automatically:

• IP address of the device used to access the platform
• Your web browser type and device operating system
• Activity log data including pages visited, session duration, and in-account actions
• Geographic location data based on IP address for security purposes
• Cookie and other tracking technology information as described in Section 5

The data we collect is used responsibly and only for purposes relevant to delivering 12play's services to you. Below is a summary of our data usage and the legal basis underpinning each:

You may withdraw consent to receive marketing communications at any time by contacting our support team or through your account settings. Withdrawing consent will not affect your eligibility to continue using the platform.

12play prioritises your privacy and will not sell or rent your personal data to any third party for marketing or commercial purposes. However, there are certain situations where we need to share some of your information with trusted parties:

• Payment service providers: Transaction information required to process your deposits and withdrawals is shared with licensed and regulated payment gateway providers.
• Game content providers: Minimum required data is shared with game providers to enable you to access and play their games on our platform.
• Regulatory authority: When required by law, court order, or directive from a relevant authority, we will disclose the necessary information to that party.
• Audit and compliance partners: An independent audit firm that helps us ensure compliance with fair gaming and anti-money laundering regulations.
• Technical service providers: Companies providing technical infrastructure such as server hosting, cybersecurity systems, and analytics — all bound by strict confidentiality agreements.

The security of your personal data is 12play's highest priority. We implement multiple layers of technical and organisational security measures specifically designed to protect your information from unauthorised access, loss, alteration, or unintended disclosure.

Key security measures we practise include:

• 256-bit SSL/TLS Encryption for all data communications between your browser and our servers
• Encryption of stored data using AES-256 algorithms for all sensitive information in our database
• Two-factor authentication (2FA) available on all member accounts to add an extra layer of protection
• Suspicious activity monitoring in real time by the 12play cybersecurity team
• Strict internal access controls — only staff who require access to perform their specific duties are permitted to view members' personal data
• Regular security audits by an independent third party to identify and address any system vulnerabilities

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. We encourage you to also take precautions such as using a strong, unique password and never sharing your login credentials with anyone.

12play uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and analyse usage patterns on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and ensuring secure navigation. These cookies cannot be disabled.
• Performance cookies: Collects information about how you use our platform — for example, the most frequently visited pages — to help us improve our services. All data is collected anonymously.
• Functionality cookies: Remembers your preferences and personal settings, such as your preferred language and display limits, to deliver a more personalised experience.
• Analytics cookies: Enables us to understand platform performance and identify areas for improvement through anonymised usage data.

As a 12play member, you have certain rights regarding your personal data. We respect and facilitate the exercise of these rights in accordance with sound data protection principles:

12play retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods vary by data type:

• Active account data: Retained for the duration of your active account plus a minimum of 5 years after account closure for regulatory compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and anti-money laundering legal requirements.
• KYC verification documents: Retained for the duration of the active account period and 5 years after account closure, or as required by regulators.
• Support communication logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Anonymised analytics data: May be retained indefinitely as it can no longer be linked to any specific individual.

Once the applicable retention period has ended, data will be securely deleted or fully anonymised in accordance with established security procedures.

The 12play platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate action to delete that information from our systems. The account in question will be closed immediately and all related transactions will be cancelled.

The 12play platform may contain links to third-party websites or services for informational convenience. Please note that this Privacy Policy applies to the 12play platform only only and does not cover the privacy practices of external websites you may visit through those links.

We are not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read and understand the privacy policy of every website you visit before providing any personal information to them.

12play reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data. Any changes made will take effect immediately upon publication on this website.

For amendments considered material or that significantly affect your privacy rights, we will provide appropriate notice via the email registered to your account or through an in-platform notification at least 14 days before those amendments take effect.

Your continued use of the 12play platform after any amendments to this Privacy Policy take effect will be deemed as your acceptance of those changes. We encourage you to review this page periodically to stay informed of how we protect your information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

You may also reach us via the Live Chat feature available on the 12play platform for general privacy inquiries. For formal data rights requests such as access, correction, or deletion, please use the email channel to facilitate proper processing and documentation.