Data Protection · User Rights · Transparency
This Privacy Policy explains how 12malay collects, uses, stores, discloses, and protects personal information in connection with your use of the 12malay platform and its services. By registering an account or using 12malay in any capacity, you acknowledge that you have read and understood this Privacy Policy.
Your Privacy at a Glance
All personal data transmitted to 12malay is protected by 256-bit SSL encryption. Stored data is secured using industry-standard access controls and encryption at rest.
12malay does not sell your personal data to third parties. Data is shared only with service providers essential to platform operations and regulatory compliance, under binding confidentiality obligations.
You have the right to access, correct, and request deletion of your personal data held by 12malay, subject to legal retention obligations. Submit requests via the in-account live chat or support email.
Identity documents collected during KYC verification are used solely for age verification, fraud prevention, and regulatory compliance. They are not used for marketing purposes.
12malay uses cookies and session analytics to improve platform performance and user experience. No behavioural data is sold or shared with advertising networks outside the platform.
Promotional communications are opt-in. You may update your marketing preferences at any time from your account settings or by contacting 12malay support. Opting out does not affect transactional communications.
Table of Contents
1.1 This Privacy Policy ("Policy") applies to all personal data processed by 12malay in connection with the operation of the 12malay platform accessible at 12malay.co ("Platform") and the delivery of its gaming and sports betting services ("Services") to registered users in Malaysia and other permitted jurisdictions.
1.2 This Policy is incorporated into and must be read alongside the 12malay Terms & Conditions. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.
1.3 By registering an Account with 12malay, you confirm that you are at least 21 years of age and that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy.
2.1 For the purposes of applicable data protection legislation, 12malay is the data controller in respect of personal data collected and processed through the Platform. All data processing activities by 12malay are conducted in accordance with the requirements of the jurisdiction in which 12malay holds its operating licence and, where applicable, the Malaysian Personal Data Protection Act 2010 ("PDPA") to the extent that its provisions apply to data processed in connection with Malaysian users.
2.2 Any queries regarding the processing of your personal data may be directed to the 12malay Data Protection contact via the support channel at [email protected] (plain text; not a clickable link).
12malay collects the following categories of personal data in connection with your use of the Platform:
4.1 Directly from you: Registration forms, KYC document uploads, deposit and withdrawal requests, support interactions, and marketing preference settings.
4.2 Automatically: Through cookies, session tracking, and server logs when you access or interact with the Platform. See Section 10 (Cookies & Tracking) for further detail.
4.3 From third parties: Identity verification service providers used to confirm the authenticity of KYC documents; payment processors used to facilitate MYR transactions; fraud detection services; and, where required by law, data provided by regulatory authorities.
12malay processes your personal data for the following purposes:
6.1 Contractual necessity: Processing required to fulfil the Terms & Conditions Agreement between you and 12malay, including account management, transaction processing, and service delivery.
6.2 Legal obligation: Processing required to comply with applicable laws and the conditions of 12malay's operating licence, including KYC, anti-money laundering (AML), and responsible gaming requirements.
6.3 Legitimate interests: Processing for fraud detection and prevention, platform security, and analytical purposes, where these interests are not overridden by your privacy rights.
6.4 Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
7.1 12malay does not sell, rent, or trade your personal data to third parties for their own commercial purposes.
7.2 Personal data may be shared with the following categories of third-party service providers, who are contractually required to process data only on 12malay's instructions and in accordance with applicable data protection law:
7.3 12malay may also disclose personal data where required by applicable law, court order, regulatory authority, or as necessary to protect the rights and interests of 12malay, its users, or the public.
8.1 Some of 12malay's third-party service providers may process personal data in jurisdictions outside Malaysia. Where such transfers occur, 12malay ensures that appropriate safeguards are in place, which may include standard contractual clauses, binding corporate rules, or adequacy decisions by competent data protection authorities.
8.2 By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions other than Malaysia, and you consent to such transfers where they are necessary for the delivery of the Services.
9.1 12malay retains your personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory, and licence obligations.
9.2 Account registration data, KYC documents, and transaction records are retained for a minimum of five (5) years from the date of Account closure or last transaction, in accordance with standard AML and gaming regulatory retention requirements.
9.3 Marketing preference data and communications history are retained for the duration of your Account's active status and for a reasonable period thereafter to evidence consent and opt-out records.
9.4 Technical and analytical data (including anonymised session data) may be retained for up to two (2) years for platform improvement purposes.
9.5 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with 12malay's internal data disposal procedures.
10.1 12malay uses cookies and similar tracking technologies to operate the Platform and improve user experience. The following categories of cookies are used:
10.2 12malay does not use third-party advertising or retargeting cookies. Analytical data collected through the Platform is not shared with external advertising networks.
10.3 Most web browsers allow you to manage cookie settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including the secure 12malay login function.
Subject to applicable law and 12malay's regulatory obligations, you have the following rights in respect of your personal data:
To exercise any of these rights, contact the 12malay support team via the in-account live chat or by email at [email protected]. 12malay will respond to verified requests within 30 days.
12.1 The 12malay Platform is strictly for adults aged 21 years and above. 12malay does not knowingly collect personal data from persons under 21. If 12malay becomes aware that an Account has been registered by a person under the minimum age, the Account will be immediately suspended, all pending transactions voided, and the personal data associated with the Account deleted (except to the extent required for regulatory record-keeping).
12.2 If you believe that a minor has registered an Account on 12malay, please report this immediately via the support live chat or email.
13.1 12malay implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
13.2 While 12malay takes reasonable technical precautions, no data transmission over the internet is completely secure. You play a role in protecting your Account by using a strong, unique password and enabling 2FA on your 12malay login.
14.1 12malay reserves the right to amend this Privacy Policy at any time. Material changes will be communicated via email to your registered address and/or via a prominent notice on the Platform. The revised Policy will take effect on the date specified in the update notice.
14.2 Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept a revised Policy, you must cease using the Platform and contact support to close your Account.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 12malay, please contact us via:
We aim to respond to all privacy-related enquiries within 30 calendar days of receipt.
Your data is protected. Your games are certified fair. Join Malaysian players on the platform built for them — all in MYR, all 21+ verified.
Create Your Account