Privacy Policy 12Malaysia — Member Personal Data Protection We Take Seriously

This Privacy Policy describes how 12Malaysia (referred to as "we", "the platform", or "12Malaysia") collects, uses, discloses, stores, and protects your personal information when you register for and use our services at 12malaysia.best.

12Malaysia takes your privacy seriously. We are committed to managing your personal data responsibly and in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia. By registering or continuing to use the 12Malaysia platform, you agree to the collection and use of your information as described in this Privacy Policy.

This policy applies to all 12Malaysia members across Malaysia — whether you play Live Casino, bet on Malaysia Super League or EPL football matches, play badminton, e-sports, baccarat, Virtual Sports, lottery, or use any other service on our platform.

12Malaysia collects personal information that is necessary to provide our services, ensure security, and meet our legal obligations. The types of data we collect are as follows:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, political affiliations, or religious beliefs.

12Malaysia uses collected personal data solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and managing your member account; processing registrations and logins; and ensuring account security.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks); processing withdrawal requests; and maintaining transaction records.
• Service Provision: Gives you access to all games and services on 12Malaysia, including Live Casino, Sports Betting, Baccarat, lottery, and more.
• Identity Verification (KYC): Fulfilling legal identity verification and anti-money laundering obligations in accordance with Malaysian regulatory requirements.
• Service Communications: Sending important information about your account, service updates, security notifications, and responses to customer support enquiries.
• Marketing (with Consent): Sending promotions, bonuses, special offers, and information about new games at 12Malaysia — only where you have given consent, which you may withdraw at any time.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, account misuse, money laundering, and other security threats.
• Platform Improvement: Analysing usage patterns to enhance the user experience, improve platform features, and develop new services relevant to Malaysian players.

12Malaysia does not sell, rent, or trade with members' personal data. However, there are limited situations in which we may share your data with specific third parties:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions (such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX providers) may receive the transaction information necessary to complete your payment. They are bound by their own privacy policies and may not use your data for any other purpose.
• Technology Service Providers: Third-party companies providing technical infrastructure, cloud services, or analytics may have access to your data in their capacity as data processors. They are bound by strict confidentiality agreements.
• Authorities & Regulatory Bodies: We may be required to disclose your data to Malaysian government agencies, law enforcement, courts, or regulatory bodies when mandated by law or court order.
• Business Transfer: In the event of a company merger, acquisition, or asset transfer, user data may be transferred — in such cases, we will notify you in advance.

12Malaysia continuously invests in security infrastructure to keep your personal data protected at all times. The security measures we have in place include:

• Encryption in Transit: All data transmitted between your browser and 12Malaysia's servers is encrypted using the latest TLS (Transport Layer Security) protocol with 256-bit encryption keys.
• Encryption at Rest: Sensitive data stored in our databases — including passwords (stored as irreversible one-way hashes), financial information, and KYC documents — is encrypted to industry standards.
• Strict Access Controls: Only authorised 12Malaysia staff with a legitimate business need may access members' personal data. All access is logged and periodically audited.
• 24/7 Monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts, or anomalies that may indicate a potential security threat.
• Regular Security Testing: 12Malaysia conducts regular penetration testing and security audits by independent security experts to identify and address vulnerabilities.

While we take all reasonable precautions, no security system can be guaranteed to be 100% secure. If you suspect your account has been accessed without authorisation, please contact the 12Malaysia support team immediately at support@12malaysia.best.

Cookies are small text files stored on your device when you visit a website. 12Malaysia uses cookies for various purposes to enhance your experience.

You can control and manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the 12Malaysia platform. Essential cookies cannot be disabled as they are required for the platform's core operations.

As a 12Malaysia member, you have the following rights regarding your personal data under Malaysia's PDPA 2010:

To exercise any of the rights above, please contact us by email at support@12malaysia.best with the subject line "Personal Data Rights Request". We will respond within 30 business days. In cases where we are unable to fulfil your request, we will clearly explain the reasons why.

12Malaysia retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law:

• Active Account Data: Retained for the duration your account is active, plus 7 years after account closure for audit and financial record purposes in accordance with the requirements of the Inland Revenue Board of Malaysia.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering.
• KYC (Identity Verification) Data: Retained for 5 years after account closure in accordance with Malaysia's AML/CTF compliance requirements.
• Customer Support Communication Logs: Retained for 3 years for reference and service improvement purposes.
• Technical & Access Log Data: Retained for 12 months for security purposes and technical troubleshooting.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you.

The 12Malaysia platform is strictly for individuals aged 18 years of age and above. We do not knowingly collect or store personal data from individuals under the age of 18.

Should we discover that personal data belonging to a minor (under 18 years of age) has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the relevant account.

The 12Malaysia platform may contain links to third-party websites or services in certain contexts (such as links to official sports rules for reference). This Privacy Policy does not cover the privacy practices of those third-party websites or services.

We encourage you to read the privacy policy of every website you visit. 12Malaysia is not responsible for the content or privacy practices of any third-party websites you may access via links on our platform.

12Malaysia reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform updates. When we make material changes:

• The latest version will be published on this page with an updated "Last Updated" date at the top.
• For significant amendments, we will notify you by email or via an in-platform notification at least 14 days before the changes take effect.
• Continued use of the 12Malaysia platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to revisit this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or 12Malaysia's handling of your personal data, please do not hesitate to contact us:

We are committed to resolving any privacy concerns you may have promptly, transparently, and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Personal Data Protection Department in accordance with the provisions of PDPA 2010.