12win Privacy Policy – Your Personal Data Protection

Introduction and Scope of Privacy Policy

Welcome to the Privacy Policy page 12win. We understand that entrusting your personal information to any online platform requires a great deal of confidence. That is why we take data protection extremely seriously — not merely to meet legal requirements, but to exceed them.

This Privacy Policy describes in detail how 12win collect, use, store, protect, and in certain circumstances share your personal information when you use our platform — whether through the website or mobile app. This applies to all registered members, website visitors, and any individual who interacts with 12win's services.

By registering or using the 12win platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform. This Privacy Policy is to be read together with Terms and Conditions us.

Types of Personal Data We Collect

12win only collects data that is strictly necessary to provide you with a safe, seamless, and high-quality service. The following are the categories of data we collect:

A. Data You Provide Directly

• Identity Information: Full name, date of birth, gender and identity card or passport number for KYC verification purposes.
• Contact Information: Email address, phone number, and residential address used for communications and account verification.
• Financial Information: Bank account details, e-wallet account numbers, and transaction records for deposits and withdrawals.
• KYC Documents: Copies of identity cards, passports, driving licences and proof-of-address documents such as utility bills or bank statements.
• Communication Preferences: Your language preferences, notification settings and marketing permissions you have provided.

B. Data Collected Automatically

• Technical Data: IP address, browser type, operating system, screen resolution, and device information.
• Activity Data: Pages visited, games played, bets placed, session duration and navigation patterns.
• Cookie Data: Session information, user preferences and analytics data collected through cookies and related tracking technologies.
• Location Data: General location information based on IP address for geo-compliance and fraud prevention purposes.

How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. 12win do not process your data for any unstated purpose without first obtaining your renewed consent. The primary purposes for data use are as follows:

• Service Provision: Creating and managing your account, processing deposits and withdrawals, settling bets and providing access to all games on the platform.
• Identity Verification (KYC): Verifying your age and identity to ensure compliance with legal requirements and to prevent underage use of the platform.
• Fraud Prevention: Monitoring account activity to detect and prevent fraud, money laundering, collusion and any activity that violates our terms of use.
• Customer Support: Processing enquiries, complaints and assistance requests submitted via live chat, email or other support channels.
• Responsible Gaming Monitoring: Identifying potentially harmful betting patterns and reaching out to you with appropriate support resources if necessary.
• Marketing Communications: Sending promotional offers, bonuses and platform updates — only if you have given consent to receive such communications.
• Platform Improvements: Analysing usage patterns in aggregate to improve the interface, performance and overall user experience.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities as required by law.

Data Sharing and Disclosure

12win do not sell or transfer your personal data to third parties for marketing purposes. However, there are certain situations where we need to share your data with trusted parties to ensure smooth service delivery:

• Payment Service Providers: Payment gateways and transaction processors that require your financial information to securely process deposits and withdrawals. All these providers are bound by strict confidentiality agreements.
• Game Service Providers: Gaming software companies that provide slots, live casino and other games may receive session data required for game operation. This data is limited and does not include financial information.
• Third-Party KYC Services: Integrated identity verification providers that help us efficiently and securely verify the documents and information you submit.
• Legal Authorities: Law enforcement agencies, regulatory bodies, or courts when we are required to do so by law, court order, or valid legal process.
• Professional Advisors: Lawyers, accountants and auditors bound by professional confidentiality obligations when providing advisory services to 12win.

In all data sharing scenarios, we ensure that recipient parties comply with data protection standards equal to or higher than our own. All data sharing agreements include binding security provisions.

Data Security Measures

The security of your personal data is the highest technical and organisational priority at 12win. We continuously invest in the latest security infrastructure to ensure your data is always protected:

• Data Encryption: All sensitive data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. This means that even if someone manages to intercept the data, it cannot be read.
• Layered Access Controls: A role-based access control (RBAC) system ensures that only authorised staff can access specific data strictly in accordance with their job responsibilities.
• Two-Factor Authentication: 12win's internal systems require two-factor authentication for all staff access to databases containing member information.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect threats, intrusion attempts and suspicious activity in real time.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Secure Data Backup: Data is regularly backed up to secure, separate locations to ensure service continuity under all circumstances.

Cookies, Tracking Technologies and Analytics

Platform 12win use cookies and similar tracking technologies to enhance user experience, ensure security, and collect analytics data that helps us improve our services.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, security, and navigation. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting information about how you use the platform — which pages are visited most frequently, load times and errors encountered — to help us improve performance.
• Functional Cookies: Storing your preferences such as language choice, display settings and login information (if you select "Remember Me") for a more convenient experience.
• Analytics Cookies: Helping us understand overall usage patterns through aggregated and anonymised data. This data is used solely for internal improvement purposes.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's help documentation.

Children's Data Protection

Platform 12win is an online betting service intended exclusively for individuals aged 18 and above. We do not knowingly collect, process or store any personal information from children under the age of 18.

Should we discover that personal information of an underage child has been collected without our knowledge, we will take the following immediate steps:

• Suspending the relevant account immediately while an investigation is conducted.
• Deleting all personal information related to that individual from our systems.
• Returning any deposited funds (subject to investigation and verification).
• Reporting the incident to the relevant authorities if required.

If you suspect that someone under the age of 18 has registered or is using the 12win platform, please notify our support team immediately so that appropriate action can be taken.

Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by 12win:

To exercise any of the above rights, please contact our Data Protection Officer by email at [email protected]. All requests will be verified first to ensure the security of your data before processing.

Data Retention Period

12win retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active and for a minimum of 5 years after account closure for AML and financial regulatory compliance purposes.
• Transaction Records: All deposit, withdrawal and wagering records are retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by the authorities.
• Communication Logs: Customer support conversation records are retained for 2 years for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be associated with you.

Changes to Privacy Policy

12win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the technologies we use. All changes will be published on this page with a clear effective date.

For material and significant changes, we will proactively notify you via your registered email or a prominent notice on our platform at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make a fully informed decision.

Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):