12play21 Privacy Policy – Our Commitment to Protecting Your Personal Data

12play21 ("we", "platform") is an online casino and Sports Betting platform operator accessible at 12play21.bet. In providing our services to Malaysian players, we collect and process your personal data as part of our normal operations.

This Privacy Policy is drafted in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. It applies to all individuals who:

• Browsing or using the 12play21.bet website
• Register and maintain an active account on the 12play21 platform
• Contacting our customer support team
• Participating in 12play21 promotions or loyalty programmes

We encourage you to read this Privacy Policy in full. In the event of any conflict between a translation in another language and this Malay version, the Malay version shall prevail.

12play21 collects various categories of personal data depending on how you interact with our platform:

3.1 Data You Provide Directly

The majority of data we collect is provided directly by you when:

• Register a new account with 12play21
• Completing the identity verification (KYC) process
• Making deposits via Touch 'n Go, GrabPay, DuitNow or other available methods
• Contacting our customer support team
• Filling in feedback forms or surveys

3.2 Automatically Collected Data

When you use the 12play21 platform, our systems automatically record certain technical information, including your IP address, device and browser type, pages visited, session time and duration, and navigation patterns. This data is used solely for security purposes, technical troubleshooting and improving the user experience.

3.3 Data From Third-Party Sources

In certain cases, 12play21 may receive data from legitimate third-party sources such as KYC service providers, payment providers (for example, verification information from Touch 'n Go or GrabPay), and industry fraud prevention databases.

12play21 uses your personal data for the following purposes, each grounded in a distinct legal basis:

4.1 Contract Performance (Primary Basis)

• Creating and managing your member account at 12play21
• Processing your MYR deposits and withdrawals
• Delivering casino games, slots, Live Casino and Sports Betting
• Managing your bonuses, promotions and VIP programme

4.2 Legal Obligations

• Conduct KYC (Know Your Customer) checks for anti-money laundering compliance
• Verifying member age (18 years and above)
• Retaining financial transaction records as required by law
• Cooperating with relevant authorities when required by court order

4.3 Legitimate Interests of 12play21

• Detect and prevent fraud, money laundering, and platform abuse
• Maintain the security and integrity of 12play21's systems
• Improving products and services based on usage patterns

4.4 With Your Consent

• Sending promotional emails, bonus notifications and personalised offers
• Use gameplay data to provide personalized game recommendations

12play21 do not sell your personal data to any party. However, to operate our platform effectively, we may share necessary data with the following limited categories of third parties:

• Payment Service Providers — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u (FPX) and CIMB Clicks (FPX) to process your financial transactions.
• Game Providers — Evolution Gaming, PG Soft, Pragmatic Play, Playtech and other partners required to deliver games on the 12play21 platform, subject to strict confidentiality agreements.
• KYC Providers — A third-party identity verification service used to verify your MyKad documents and financial information.
• Legal Authorities — Law enforcement agencies, regulatory bodies or courts when required under Malaysian law.
• Technology Services — Cloud infrastructure and hosting providers that process data on behalf of 12play21 under strict data processing agreements.

All third parties that receive data from 12play21 are required to protect that data to a standard no lower than the one we uphold ourselves.

12play21 implements a comprehensive suite of technical and organizational security measures to protect your personal data:

While we take all reasonable precautions, no security system can be guaranteed 100% breach-proof. We strongly encourage you to do your part by using a strong password and enabling two-factor authentication (2FA) on your 12play21 account.

12play21 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected or to meet our legal obligations. Below are our data retention guidelines:

• Active Account Data — Retained for the duration your account remains active, plus 5 years after account closure.
• Financial Transaction Records — Retained for a minimum of 7 years to comply with Malaysia's tax and anti-money laundering laws.
• Security Logs — Retained for 12 months for threat detection and security incident investigation purposes.
• Support Communication Records — Retained for 2 years from the date of your last interaction.
• Marketing Data — Retained until you withdraw consent or request deletion.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to your identity.

As a 12play21 player whose personal data we process, you have the following rights under Malaysia's Personal Data Protection Act 2010:

To exercise any of the above rights, contact the 12play21 Privacy Officer at privacy@12play21.bet. We will process your request within 30 working days.

The 12play21 platform uses cookies and similar tracking technologies to enhance the user experience and platform security. The following types of cookies are used:

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect login functionality and account security at 12play21.

Some third-party service providers used by 12play21 — such as cloud infrastructure providers and international game providers — may store or process data outside Malaysia.

When international data transfers occur, 12play21 ensures adequate protection by:

• Selecting only providers that operate in countries with a level of data protection comparable to or higher than Malaysia's.
• Including standard data protection clauses in all contracts with international providers.
• Ensuring all data transfers use encrypted and secure channels.

12play21 strictly prohibits use of the platform by individuals under the age of 18. This platform is not designed for, and does not collect data from, children or minors.

Should we confirm that an account was registered by an underage individual, we will:

• Promptly closing the account in question
• Deleting all related data in accordance with applicable laws
• Reject any withdrawals associated with the account in question

12play21 has appointed a Privacy Officer responsible for ensuring ongoing compliance with PDPA 2010 and this Privacy Policy. For any inquiries, complaints, or requests relating to your personal data, please contact: