Updated: January 2026

12Win Casino Privacy Policy – Personal Data Protection for Malaysian Players

Your privacy is our priority. This policy clearly explains what data we collect, why it is needed, how it is used, and how you can manage your personal data with the 12win casino platform.

This Privacy Policy describes the privacy practices of 12win casino ("Platform", "we"). By registering or using the platform, you agree to the collection and use of data as described in this document. Please read it carefully before providing any personal information.

1Introduction

12win casino takes our responsibility to protect every player's privacy seriously. We operate with full transparency — you have the right to know what data we hold, why it is needed and what happens to it.

This Privacy Policy is drafted in accordance with international data protection principles and aims to comply with applicable legal requirements. It covers all services we provide through the 12win casino website and mobile app.

We only collect data that is genuinely necessary to provide you with better service, comply with legal requirements and ensure platform security. We do not collect data excessively or for purposes not stated here.

2Data We Collect

We collect various types of data depending on how you interact with the platform. Below are the main categories of data we collect:

2.1 Data You Provide Directly

  • Registration information: Full name, date of birth, phone number, email address, and username
  • Identity verification (KYC) information: Copy of identity card (MyKad), selfie verification photo, and proof of address
  • Financial information: Bank account details, digital wallet numbers and payment method information used
  • Communications: Messages and conversations with our customer support team

2.2 Data Collected Automatically

  • Usage data: Game records, betting history, session duration, deposit and withdrawal transactions
  • Device and technical data: IP address, browser type, operating system, device type and screen resolution
  • Location data: General geographic location based on IP address (country and region)
  • Cookie data: Session information, language preferences, and website usage analytics data
Data Category Example Primary Purpose
Identity Name, date of birth, MyKad KYC verification, account security
Contact Email, phone Communications, 2FA verification
Financial Bank account, digital wallet Deposit & withdrawal processing
Usage Game records, transaction history Customer support, AML
Technical IP, device, browser Security, fraud prevention

3How Your Data Is Used

Every piece of data we collect is used for a specific and legitimate purpose. We do not use your data for anything unrelated to the services we provide.

  • Service provision: Managing your account, processing deposits and withdrawals, enabling access to games, and maintaining accurate transaction records
  • Identity verification: Carrying out mandatory KYC processes to comply with anti-money laundering (AML) and know-your-customer (KYC) requirements
  • Platform security: Detecting and preventing fraud, unauthorized access, system abuse, and activities that violate our terms of service
  • Service communications: Sending important notices about your account, service changes, security updates, and transaction information
  • Customer support: Responding to inquiries and resolving issues reported through our support channels
  • Responsible gaming: Monitoring gameplay patterns to identify potential risks and send responsible gaming information when necessary
  • Legal compliance: Complying with legal obligations, directives from competent authorities, and regulatory reporting requirements
  • Platform improvements: Analyzing usage data in aggregate and anonymized form to improve the user experience and platform reliability
We do not use your personal data for third-party marketing purposes or sell it to advertisers. Marketing communications from the platform itself are only sent if you have given your consent, and you may unsubscribe at any time.

4Data Storage & Security

4.1 Security Measures

We implement multiple layers of technical and organisational safeguards to protect your personal data from unauthorised access, loss or accidental disclosure:

  • Data encryption in transit: All data transmitted between your device and our servers is secured with 256-bit TLS/SSL protocol
  • Data encryption at rest: Sensitive data including financial information and KYC documents is stored in encrypted format on our servers
  • Access controls: Access to your personal data is restricted to employees who genuinely need it for legitimate work purposes
  • Continuous monitoring: Our systems are monitored 24/7 to detect any suspicious activity or attempted security breaches
  • Two-factor authentication: Your account is protected with 2FA options for an additional layer of security

4.2 Retention Period

We retain your personal data for as long as your account is active or as needed to fulfill the purposes stated in this policy. After an account is closed, we may need to keep certain records for a period required by law — typically between 5 and 7 years — for legal compliance, dispute resolution, and reporting obligations.

Data that is no longer needed will be securely deleted or anonymised so that it can no longer be linked to you personally.

5Data Sharing with Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. However, there are certain circumstances in which we may need to share your data:

  • Approved service providers: Companies that help us operate the platform, such as payment service providers (FPX, DuitNow, digital wallets), cloud service providers, analytics companies, and technical support vendors. All these providers are bound by strict confidentiality agreements.
  • Legal authorities: Law enforcement agencies, regulatory bodies or courts when required by law or a valid court order
  • Fraud prevention: Industry fraud prevention bodies or services to verify identity and prevent illegal activity
  • Business transfers: If the platform undergoes a merger, acquisition or asset sale, data may be transferred as part of that transaction, subject to equivalent privacy protections
All third parties we work with are required to comply with data protection standards equal to or higher than our own. We do not permit service providers to use your data for their own purposes.

6Cookies & Tracking Technologies

The 12win casino website and app use cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly.

Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as login, secure sessions and language preferences. These cookies cannot be disabled.
  • Performance cookies: Collecting information about how you use the platform to help us understand and improve its performance. Data is collected in aggregate and anonymized form.
  • Functional cookies: Saving your preferences such as your chosen language and display settings so you do not need to reconfigure them each time.
  • Security cookies: Helping us identify and prevent security risks such as suspicious login attempts.

You can manage cookies through your browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, check your browser's help documentation.

7Your Rights Regarding Personal Data

We recognize and respect your rights over your personal data. You have the following rights, which you may exercise at any time:

Right of Access

Request a copy of the personal data we hold about you in a readable format.

Right to Rectification

Request correction of inaccurate or incomplete data in your account.

Right to Erasure

Request deletion of your data under certain circumstances, subject to legal obligations.

Right to Object

Object to the processing of your data for specific purposes, including direct marketing.

Right to Portability

Receive your data in a structured format that can be transferred to another provider.

Right to Restriction

Request a restriction on the processing of your data while a dispute or review is in progress.

To exercise any of the above rights, contact our customer support team via live chat. We will process your request within 30 business days. In some cases, we may need to verify your identity before processing the request.

8Children's Data Protection

12win casino services are exclusively for adult users aged 18 years and above. We do not intentionally collect, store or process personal data from individuals under the age of 18.

If we find that personal data has been collected from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. The platform uses age verification processes during registration and KYC to prevent access by underage individuals.

Parents and guardians who become aware that their underage child has registered an account are requested to contact our customer support immediately so that appropriate action can be taken without delay.

9Cross-Border Data Transfers

In running global platform operations, your personal data may be transferred to, stored in or processed in countries outside Malaysia. This typically occurs when we use cloud services or international technology providers.

In all cases of cross-border data transfers, we ensure that a level of data protection equivalent to the standards of this policy is maintained through:

  • Legally binding data processing agreements with vendors outside Malaysia
  • Standard contractual clauses approved for international data transfers
  • Selection of service providers that comply with internationally recognized data protection standards

10Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When material changes are made, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending a notice to your registered email for significant changes
  • Displaying a clear notice on the platform's home page for a set period following the changes

We encourage you to review this Privacy Policy periodically. Continued use of the platform after any updates are published constitutes your acceptance of the latest version of this policy.

11Contact Us About Privacy

If you have any questions, concerns or complaints regarding how we handle your personal data, we strongly encourage you to contact us directly.

Live Chat

Reach us via in-platform 24/7 live chat for the fastest response.

Support Email

[email protected] — for more detailed privacy and data protection enquiries.

We are committed to responding to all privacy-related enquiries within 7 business days. For requests that require more in-depth review, we will notify you of a more accurate timeframe.

Why Your Data Is Safe With Us

Privacy protection is more than a policy on paper — it is a daily practice we uphold across every aspect of our platform's operations.

256-bit SSL Encryption

All data transmitted between you and the platform is protected by the same encryption used by banking institutions worldwide — no third party can intercept your data.

Two-Factor Authentication

An extra layer of security for your account — even if someone knows your password, they still need a second verification code to gain access.

No Data Sales

Your personal data is never sold, rented or shared with advertisers or marketing companies. Your data is only used for the purposes stated in this policy.

24/7 Security Monitoring

Our systems are monitored around the clock to detect any threats, unauthorized access attempts, or suspicious activity before they can affect your account.

Full Control in Your Hands

Access, correct, download or delete your data via account settings or by contacting support. Your privacy rights are fully recognised and respected.

KYC & AML Compliance

Our KYC process is designed to protect you and keep the platform free from illegal activity. Your documents are stored securely and used solely for legitimate purposes.

Play with Confidence at 12Win Casino

Your data is protected. Your gameplay is secure. Join a community of Malaysian players enjoying quality entertainment with complete peace of mind.

256-bit Encryption No data sales Your full control
Bahasa Melayu