Privacy Policy play12 — Malaysia Member Personal Data Protection

This Privacy Policy explains how play12 ("we", "our platform") collects, uses, discloses, and protects your personal information when you use the play12.win website and related services. By registering or using the play12 platform, you agree to the practices described in this Privacy Policy.

We take your privacy seriously. This policy is written in plain language so you truly understand what happens with your information — not just a legal document packed with confusing technical jargon.

01 Information We Collect

Play12 only collects information that is strictly necessary to provide a safe, fair, and quality service. This information is divided into three main categories:

Information You Provide Directly:

• Full name as it appears on your official identification document
• Active email address for account communications
• Phone number for two-factor verification
• Date of birth for age verification (18 years and above)
• Current residential address
• KYC documents — MyKad, passport, or other valid identification documents
• Bank account or e-wallet details for processing deposits and withdrawals

Information Collected Automatically:

• IP address and device information (operating system, browser type)
• Gaming activity data — games played, session duration, wagering amounts
• Deposit and withdrawal transaction logs
• Cookie and website usage data
• General geolocation information based on IP address

Data Category	Example	Primary Purpose
Identity	Name, IC, date of birth	KYC verification & legal compliance
Contact	Email, phone number	Account communications & customer support
Financial	Bank account, transaction records	Deposit & withdrawal processing
Technical	IP, device, login	Account security & fraud detection
Usage	Gaming sessions, betting	Responsible Gaming & Platform Improvements

02 How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. We do not use your data for any undisclosed purpose without obtaining your prior consent.

• Account Management — registering and verifying your identity, managing login, and ensuring account security.
• Transaction Processing — processing deposits, withdrawals, and financial records accurately and securely.
• Legal Compliance — meeting KYC (Know Your Customer), anti-money laundering (AML), and other applicable regulatory requirements.
• Platform Security — detecting and preventing fraud, suspicious activity, and system abuse.
• Customer Support — enabling our support team to handle inquiries and complaints efficiently.
• Responsible Gaming — monitoring gameplay patterns to identify signs of at-risk behavior and provide appropriate support.
• Service Improvement — analyzing anonymized usage data to improve platform functionality and experience.
• Marketing Communications — sending promotions, exclusive offers, and updates — only to members who have consented to receive such communications.

03 Information Sharing

Play12 does not sell, rent, or trade your personal information to third parties. However, there are limited situations where we need to share information with certain parties to enable services to run smoothly:

• Payment Processors — payment service providers such as DuitNow, FPX, Touch 'n Go, GrabPay, and Boost receive the transaction information needed to process your deposits and withdrawals. They are subject to their own privacy policies and security standards.
• Game Providers — game software providers may receive the minimum technical data required to ensure games function correctly.
• Legal Authority — we will disclose information to the relevant authorities when required by law, court order, or valid legal process.
• KYC Verification Services — third-party providers assisting with identity verification and AML compliance, subject to strict data protection agreements.

All third parties we work with are required to uphold data protection standards equal to or higher than our own. We do not permit them to use your data for any purpose other than those specified.

04 Data Security

The security of your information is our top technical and operational priority. play12 implements multiple layers of protection to keep your data safe from unauthorized access, disclosure, alteration, or destruction.

• 256-bit SSL Encryption — all communications between your browser and the play12 servers are fully encrypted.
• Two-Factor Authentication (2FA) — an additional security layer to protect access to your account.
• 24/7 Monitoring — continuous security monitoring systems to detect unusual activity.
• Internal Access Controls — only staff who require access to specific information are permitted to do so, based on the need-to-know principle.
• Periodic Security Audits — independent security assessments are conducted periodically to identify and address vulnerabilities.
• Secure Data Backup — data is securely backed up and stored in data centres reinforced with physical and digital protection.

05 Cookies & Tracking Technologies

Play12 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — required for core platform functions such as login and session security. These cookies cannot be disabled.
• Functional Cookies — remembering your preferences such as language and display settings to improve ease of use.
• Analytics Cookies — collecting anonymized usage data to help us understand how the site is used and make improvements.
• Performance Cookies — keeping the platform fast and responsive by optimizing content delivery.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect platform functionality. For more information, please refer to your browser's documentation.

06 Data Storage & Transfer

Your personal information is stored on secure servers. play12 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this Privacy Policy.

Specific retention periods:

• Active account data — retained for the lifetime of your account.
• Financial transaction records — retained for at least 7 years in accordance with Malaysian financial compliance requirements.
• Support communication logs — retained for 3 years after the last interaction.
• Closed account data — the minimum data required for legal compliance is retained for the mandated period; other data is deleted or anonymised.

Where data needs to be transferred to another jurisdiction, we ensure such transfers are carried out with appropriate safeguards and in compliance with applicable data protection laws.

07 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which we fully respect:

• Right of Access — you may request a copy of the personal information we hold about you.
• Right to Rectification — you may request the correction of inaccurate, outdated, or incomplete data.
• Right to Restrict Processing — in certain circumstances, you may request that we restrict how we process your data.
• Right to Object — you may object to the processing of your data for direct marketing purposes at any time.
• Right to Erasure — you may request deletion of your data under certain conditions, subject to legal retention requirements.
• Right to Data Portability — you may request your data in a machine-readable format for transfer to another service.

To exercise any of the above rights, contact the play12 support team via 24/7 live chat. We will process your request within 30 working days. In complex cases, this period may be extended up to 60 days with prior notice to you.

08 Children's Data

Play12 is a digital entertainment platform restricted to users aged 18 years and above only. We do not intentionally collect or process personal information from individuals under the age of 18.

If we become aware that personal information has been collected from anyone under the age of 18, we will take immediate action to delete that information and close the associated account. If you believe we may have collected information from a minor, please contact us immediately.

09 Third-Party Links

The play12 platform may contain references to game providers or payment processors that operate under their own privacy policies. play12 is not responsible for the privacy practices of any third party. We encourage you to read the privacy policy of any third-party service you use.

10 Privacy Policy Amendment

Play12 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business operations. Any material changes will be communicated to members via their registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date at the top of this document will always reflect the latest version of our Privacy Policy. Your continued use of the play12 platform after any amendment is published constitutes acceptance of the updated terms.