Privacy Policy 12play3 —
Your Personal Data Protection

1. Introduction

12play3 ("we", "Platform") takes user privacy protection very seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure and protection of personal information you provide or that we collect when you use the 12play3 platform — whether through our website, mobile app or any other channel we operate.

This document is written in Bahasa Melayu to ensure Malaysian users fully understand their rights. If you have any questions about how we handle your data, the 12play3 customer support team is available to assist at any time.

This policy applies to all registered users, website visitors and anyone who interacts with the 12play3 platform, regardless of their geographical location, as long as they use the services we offer.

2. Data We Collect

12play3 only collects data necessary to provide a safe, seamless and responsible service. The following are the categories of data we collect:

Data We Do Not Collect

12play3 does not store full credit or debit card numbers in our systems. All sensitive payment information is processed directly through integrated payment processors that comply with PCI-DSS standards.

3. How We Use Your Data

The personal data we collect is used solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your account on the 12play3 platform.
• KYC Compliance: Verifying your identity to meet anti-money laundering (AML) regulatory requirements and legal compliance.
• Transaction Processing: Processing deposits, withdrawals, and all financial activity in your account securely and accurately.
• Platform Security: Detecting and preventing fraud, unauthorized access, and platform abuse.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate assistance.
• Service Improvement: Analyzing usage data to improve user experience, platform performance, and content relevance.
• Marketing Communications: Sending promotional information and special offers — only if you have consented to receive them.

4. Data Sharing with Third Parties

12play3 does not sell or disclose your personal data to third parties for commercial purposes. However, in the following limited situations, data sharing may occur:

Trusted Service Providers

We work with selected third-party providers for platform operations, including payment processors, identity verification service providers, and customer support platforms. All providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Legal Requirements

12play3 may disclose your personal data when required by law, court order or direction from a legitimate regulatory authority. In such situations, we will notify you if permitted by law to do so.

Business Transfer

In the event of a merger, acquisition or sale of company assets, user data may be transferred as part of the business assets. You will be notified in advance and given the option to delete your account if you do not agree.

5. Data Security

Protecting your personal data is a responsibility we take with the utmost seriousness. 12play3 implements robust technical and organizational security measures to prevent unauthorized access, loss, destruction, or disclosure of data:

• 256-bit SSL Encryption: All communication between your browser and our servers is encrypted using the latest TLS protocol.
• Strict Access Control: Only staff with explicit authorization may access user data, and every access is recorded in an audit log.
• Two-Factor Authentication (2FA): Available to all user accounts as a recommended additional security layer.
• Regular Security Audits: The 12play3 platform undergoes regular penetration testing and independent security audits.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity and security threats.
• Data Backup: Data is regularly backed up to a separate secure location to ensure service continuity.

While we strive to provide the best protection, no online system can be guaranteed 100% secure. You also play an important role by using a strong password and not sharing your login credentials.

6. Cookies & Tracking Technologies

12play3 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage and delete cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of the 12play3 platform.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding the personal data we hold:

To exercise any of the above rights, contact the 12play3 customer support team via Live Chat within the platform. We will process your request within 14 business days.

8. Data Retention & Deletion

12play3 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Specific retention periods depend on the type of data:

• Identity & KYC Data: Retained for a minimum of 5 years after account closure, in accordance with Malaysia's AML legal requirements.
• Financial Transaction Records: Retained for 7 years in accordance with applicable accounting and tax legislation requirements.
• Platform Activity Log: Retained for 12 months for security and complaint resolution purposes.
• Support Communication Data: Retained for 3 years for reference and service quality improvement purposes.
• Cookie Data: Expiry varies by cookie type, ranging from the current session up to a maximum of 2 years.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to your identity.

9. Children's Data Protection

The 12play3 platform is intended for individuals aged 18 years and above only. We do not knowingly collect personal data from children or minors.

If we discover that personal data of someone under the age of 18 has been collected without our knowledge, we will promptly take steps to delete that data and close the relevant account. Parents or guardians who believe their child may have registered an account on our platform are encouraged to contact our support team immediately.

10. Links to Third-Party Sites

The 12play3 platform may contain links to third-party websites or services not operated by us, such as game providers and payment partners. This Privacy Policy does not apply to those third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit. 12play3 is not responsible for the privacy practices or content of third-party websites, even if links to those sites appear on our platform.

11. Privacy Policy Amendments

12play3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any material changes will be communicated to you via:

• Prominent notice on the platform home page at least 7 days before changes take effect.
• Email the address registered to your account for significant changes.
• In-account notification when you are logged in to the platform.

The "Last Updated" date at the top of this document will always reflect the latest version in effect. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the 12play3 platform — the fastest way to get help.
• Support Email: [email protected] — for written enquiries requiring documentation or further reference.
• FAQ Page: Visit FAQ page for answers to frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related inquiries within 5 business days. For urgent issues related to account security, please use live chat for an immediate response.