12bets Privacy Policy – Malaysia Player Data Protection

1Introduction

This Privacy Policy ("Policy") describes how 12bets collects, uses, stores, and protects your personal information when you use our platform at 12bets.bar, the 12bets mobile app, or any services we provide.

We understand that your trust must be earned, not simply requested. That is why we are committed to being fully transparent about how your personal data is handled. By using the 12bets platform, you agree to the practices described in this Policy.

If you have any questions after reading this document, our support team is available via live chat in the app or by email at [email protected].

2Information We Collect

12bets collects information from you in several different situations. Here is a comprehensive overview:

Information you provide directly:

• Full name as shown on a valid identity document
• Date of birth for age verification
• Email address and mobile phone number
• Current residential address
• KYC documents — copies of MyKad, passport, or relevant documents
• Bank account or e-wallet details for deposit and withdrawal purposes

Information collected automatically:

• IP address and approximate location based on IP
• Device type, operating system, and browser version
• Login and logout records, including date and time
• Game activity history, deposits, and withdrawals
• Gaming session data including bets placed and game results
• Cookie and related tracking technology data (see Section 6)

3How We Use Your Data

The data we collect is used for specific and legitimate purposes. We do not use your data beyond the scope stated here:

4Data Sharing with Third Parties

12bets does not sell, rent, or transfer your personal data to third parties for marketing purposes. However, there are certain situations where we need to share your data with carefully selected third parties:

• Payment service providers: To securely process your deposits and withdrawals via FPX, e-wallets, and other supported payment methods.
• Licensed gaming software providers: Minimal gaming session data is shared for the operation of games provided by our partners.
• Identity verification service providers: For KYC processes that comply with industry standards and regulatory requirements.
• Regulatory authorities and law enforcement: When required by law, court order, or our licensing compliance obligations.
• Analytics companies: Non-identifiable data may be shared for the purpose of platform usage analysis and service improvement.

All third parties we work with are required to sign strict data confidentiality agreements and adhere to data protection standards equivalent to our own.

5Data Security

Protecting your personal data is our technical and operational priority. 12bets implements comprehensive, multi-layered security measures:

• Encryption of data in transit: All communications are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Encryption of data at rest: Sensitive data such as payment information and KYC documents are encrypted when stored in our database.
• Strict access controls: Only authorised staff who require access to carry out their permitted duties are allowed to view member personal data.
• Regular security audits: Our systems undergo regular security audits by independent third parties to identify and address any vulnerabilities.
• 24/7 monitoring: Automated threat detection monitors our infrastructure around the clock for suspicious activity.
• Incident response plan: 12bets has clear protocols in place to handle any data breaches that may occur, including notifying affected parties within the stipulated timeframe.

6Cookies and Tracking Technology

12bets uses cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better experience for you. Below are the categories of cookies we use:

You can manage cookie settings through your web browser. Please note that blocking essential cookies may affect platform functionality.

7Your Rights

As a 12bets user, you have important rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We will process your request within 30 business days. Requests may be subject to identity verification beforehand.

8Data Retention Period

12bets retains your personal data for as long as it is needed for the purposes stated in this Policy, or for as long as your account remains active. Below are the data retention period guidelines:

• Active account data: Retained for the duration of the active account and for a minimum of 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with financial and tax legal requirements.
• KYC documents: Retained for 5 years from the date of verification or account closure.
• Customer support communication logs: Retained for 2 years from the date of last interaction.
• Log and analytics data: Retained for 12 months in identifiable form, after which it is anonymised or deleted.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to a specific individual.

9International Data Transfers

In the operation of the 12bets platform, your personal data may be processed or stored on servers located outside Malaysia. When such transfers occur, we ensure:

• The recipient country or entity maintains a level of data protection equivalent to or higher than Malaysian standards.
• Appropriate data transfer agreements have been signed to protect your rights at all times.
• Encryption is applied during the transfer process to ensure data integrity.

If you would like more details about the specific mechanisms used for data transfers, you can contact us through the channels listed in Section 12.

10Children's Privacy

12bets services are intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we discover that personal data of a person under the age of 18 has been collected without proper verification, we will take immediate action to delete that data and close the associated account. Parents or guardians who suspect their child has registered an account at 12bets may contact us immediately for follow-up.

11Changes to the Privacy Policy

12bets reserves the right to update this Privacy Policy from time to time in response to changes in law, technology, or our operational practices. The "Updated" date at the top of this page reflects the latest version.

For material changes — meaning changes that significantly affect how we use your data — we will notify you via in-app notification or email at least 14 days before the changes take effect. Continued use of the 12bets platform after the effective date will be considered your acceptance of those changes.

12Contact Us

For any enquiries, complaints, or requests relating to this Privacy Policy or the handling of your personal data, please contact our team through the following official channels:

We are committed to responding to all privacy-related inquiries within 14 business days. For formal data rights requests, the response period is up to 30 business days as required by law.