At 12win, your privacy is not an obligation we fulfil reluctantly — it is a core commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold as a player on our platform.
Last Updated: 1 January 2026These highlights summarise the key principles of our Privacy Policy. They are provided for convenience and do not replace the full legal text below, which all players are encouraged to read in its entirety.
All personal data stored on 12win's servers is protected with AES-256 encryption at rest. All data transmitted between your device and the Platform uses TLS 1.3 protocol, the same standard employed by major financial institutions across Malaysia and globally.
12win does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information is used solely for the purposes described in this Policy. You are player, not a product.
You have the right to access, correct, or request deletion of your personal data held by 12win at any time. Subject to regulatory obligations, we will respond to verified data rights requests within 30 days of receipt.
We use cookies and similar tracking technologies solely to operate the Platform, maintain your session, and understand aggregate traffic patterns. We do not deploy advertising trackers or third-party behavioural profiling tools on12win.
Identity documents submitted during KYC verification — including copies of your MyKad, Passport, or Driver's Licence — are stored in isolated, access-controlled systems. Only authorised compliance personnel may access this data, subject to strict internal access controls.
12win's data processing practices are designed to comply with applicable data protection frameworks and anti-money laundering (AML) obligations. We retain certain data for the minimum periods required by law and delete it thereafter in accordance with our retention schedule.
This Privacy Policy ("Policy") is published by 12win ("the Company", "we", "us", "our"), the operator of the online betting and gaming platform accessible athttps://12win.cam ("the Platform"). It describes how we collect, use, store, share, and protect personal data relating to players, prospective players, and visitors to the Platform ("you", "your").
By accessing the Platform, creating an account, or submitting any personal information to us in any form, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein. If you do not agree with any part of this Policy, you should cease using the Platform immediately.
12win serves players primarily in Malaysia and takes the privacy of Malaysian users seriously. Our data processing practices take into account the requirements of applicable data protection legislation as well as the regulatory obligations of an internationally licensed online gaming operator. All transactions are conducted in Malaysian Ringgit (MYR) and our support team is available in English, Bahasa Melayu, and Chinese.
For the purposes of this Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion |
| "Data Controller" | 12win, which determines the purposes and means of processing personal data collected through the Platform |
| "Data Subject" | The individual to whom Personal Data relates — in this context, players and visitors to the Platform |
| "KYC Data" | Identity documents and associated data submitted by players as part of the identity verification process |
| "Cookies" | Small data files placed on a user's device by a web server for the purpose of maintaining session state or collecting usage analytics |
| "Third Party" | Any natural or legal person other than the Data Subject and12win, including payment processors, analytics providers, and regulatory bodies |
12win collects personal data that is necessary and proportionate to the operation of a licensed online gaming and sportsbook platform. The categories of personal data we collect include the following:
| Data Category | Specific Data Points |
|---|---|
| Registration Data | Full legal name, date of birth, residential address, email address, mobile phone number, username |
| Identity Documents (KYC) | Government-issued photo ID (MyKad, Passport, Driver's Licence), proof of address (utility bill, bank statement), selfie photograph |
| Financial Data | Deposit and withdrawal transaction records, preferred payment methods, e-wallet account references (Touch 'n Go, Boost, GrabPay), bank account references (Maybank, CIMB, Public Bank, Hong Leong Bank), cryptocurrency wallet addresses |
| Gameplay Data | Betting history, game sessions, wagered amounts, winings and losses, bonus claims and usage |
| Technical Data | IP address, device identifiers, browser type and version, operating system, session timestamps, geolocation data (country level) |
| Communications Data | Records of live chat, email, and WhatsApp interactions with our support team; complaint and dispute records |
| Responsible Gambling Data | Deposit limit settings, self-exclusion requests, cooling-off period activations, and related account restriction records |
12win collects personal data through the following channels and mechanisms:
12win processes personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we process your personal data are as follows:
12win processes personal data one or more of the following legal grounds, applied on a purpose-by-purpose basis:
12win does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited and controlled circumstances:
12win retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years after closure | Legal / AML obligation |
| KYC Identity Documents | Duration of account + 5 years after closure | Regulatory compliance |
| Financial Transaction Records | 7 years from transaction date | Legal / accounting obligation |
| Gameplay & Betting History | 5 years from last activity | Regulatory compliance |
| Support & Communications | 3 years from date of interaction | Legitimate interests / dispute resolution |
| Technical / Session Data | 13 months from collection | Legitimate interests / security |
| Marketing Consent Records | Until consent withdrawn + 3 years | Legal basis compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. In cases where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes without reference to any identifiable individual.
12win uses cookies and similar technologies to operate the Platform effectively and understand how it is used. Cookies are small text files placed on your device by the Platform's web server when you visit the site.
The categories of cookies used on 12win are as follows:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in and use key Platform features. Disabling analytics cookies does not affect your ability to use the Platform.
12win implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:
Notwithstanding these measures, no internet-based system can be guaranteed to be entirely secure. Players are responsible for maintaining the confidentiality of their account credentials and for ensuring that their own devices are adequately protected against malware and unauthorised access.
In the course of providing its services, 12win may transfer personal data to, or process personal data in, jurisdictions outside of Malaysia. Such transfers may occur, for example, in connection with the use of cloud infrastructure providers, identity verification services, or internationally certified game studios.
Where personal data is transferred to other countries, 12win ensures that appropriate safeguards are in place to protect that data to a standard equivalent to those applying within Malaysia. These safeguards may include contractual obligations imposed on the recipient via data processing agreements, or reliance on recognised data protection frameworks applicable to the recipient jurisdiction.
By using the12win Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Malaysia as described in this section.
As a player on12win, you hold a number of rights in relation to your personal data. These rights may be subject to limitations in certain circumstances — for example, where we are required by law to retain data, or where exercising a right would adversely affect the rights of others.
You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
You may request correction of inaccurate or incomplete personal data held about you.
You may request deletion of your personal data, subject to legal retention obligations applicable to gambling operators.
You may request that we restrict processing of your data in certain circumstances, such as pending a correction request.
You may request a copy of data you have provided to us in a structured, machine-readable format where technically feasible.
You may object to processing based on our legitimate interests at any time by contacting our support team.
To exercise any of the above rights, please contact 12win's support team via live chat or email at [email protected]. We will respond to all verified data rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case you will be notified.
The 12win Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Account registration explicitly requires users to confirm that they meet this age requirement.
Where 12win discovers or is notified that an account has been created by an individual under the age of 21, all associated personal data will be deleted promptly, the account will be permanently closed, and any funds deposited will be returned to the source account pending investigation. This applies regardless of whether a false age declaration was made at registration.
If you have reason to believe that an underage individual has created an account on 12win, please notify us immediately via our support channels.
The 12win Platform may contain references to third-party services — such as payment processors — in the course of normal operations. Where interaction with a third-party service is required (for example, to complete a deposit via Touch 'n Go eWallet, GrabPay, DuitNow/FPX, or a Malaysian banking portal), you will be redirected to that third party's own platform.
12win is not responsible for the privacy practices of any third-party platform. Any personal data you provide directly to a third-party service is governed by that service's own privacy policy. We encourage you to review the privacy documentation of any third-party service you use in connection with your12win account.
12win reserves the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with an updated "Last Updated" date. Where amendments are material, 12win will make reasonable efforts to notify registered players via their registered email address or via a notification displayed upon Platform login.
Continued use of the Platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should cease using the Platform and may request account closure by contacting our support team.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 12win, please contact us through the following channels:
For matters relating to your rights under this Policy, we aim to acknowledge your request within 48 hours and provide a full response within 30 days. For matters related to how your data is used in connection with our Terms, please refer to our Terms & Conditions.
Your personal data is protected by AES-256 encryption, strict access controls, and a firm no-dataselling policy. When you play on 12win, you can focus on the game — not on where your information ends up. Fast MYR payouts, local Malaysian payment methods, and transparent terms. That's the 12win difference.
🔞 For players aged 21 and above only. Please gamble responsibly. See our Responsible Gambling page for support tools and resources.