Privacy Policy

This Privacy Policy ("Policy") is issued by 12win8 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at 12win8.cam. This Policy describes how we collect, use, store, share, and protect personal information about individuals ("you", "the Player", "the User") who access or use our Platform, including through our website, mobile-optimised site, and any related services.

12win8 is committed to processing personal data in a manner that is lawful, fair, and transparent. We recognise the trust that players place in us when they share their personal information, and we take our data protection obligations seriously.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and 12win8. In the event of any conflict between this Policy and the Terms & Conditions on matters relating specifically to data privacy, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, or online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means 12win8, which determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third party that processes personal data on behalf of 12win8 in accordance with our written instructions.
• "Consent" means freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" (Know Your Customer) means the identity verification procedures used to confirm a player's identity, age, and eligibility.
• "Platform" means the 12win8 website, mobile-optimised site, and all associated services accessible at 12win8.cam.
• "Sensitive Data" means personal data that warrants additional protection, including identity document numbers, financial account details, and health-related information disclosed in connection with responsible gambling tools.

We collect the following categories of personal data from players and visitors to the Platform:

We do not intentionally collect special categories of sensitive personal data (such as racial origin, political opinions, religious beliefs, or biometric data) unless strictly required by law or regulation and only with your explicit consent where required.

We collect personal data through the following means:

• Direct registration: Information you provide when creating a 12win8 account, including your name, contact details, date of birth, and chosen payment methods.
• KYC verification: Identity documents and supporting materials submitted in response to our verification requests.
• Transactional activity: Data generated automatically when you make deposits or withdrawals via payment providers such as Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Boost, GrabPay, and cryptocurrency networks.
• Platform usage: Data collected automatically as you navigate and interact with the Platform, including via cookies and similar tracking technologies (see Section 8).
• Customer support interactions: Information you share when contacting our support team via live chat, email, or any other channel.
• Third-party sources: In limited circumstances, we may receive data from fraud-prevention agencies, identity verification services, or payment processors to supplement information you have provided directly.

12win8 processes personal data only where a lawful basis exists for doing so. The following legal bases apply to our processing activities:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account creation, payment processing, game provision, and withdrawal handling.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including Anti-Money Laundering (AML) regulations, Know Your Customer (KYC) requirements, and data protection legislation.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, conduct business analytics, and improve our products and services — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of personal data for direct marketing communications, where we have obtained your prior opt-in consent. You may withdraw this consent at any time by contacting our support team.

Your personal data is used by 12win8 for the following purposes:

1. Account management: Creating, maintaining, and administering your 12win8 account, including identity verification and age confirmation in line with our 21+ requirement.
2. Service delivery: Providing access to all Platform products and services, including live casino, sports betting, slots, and promotional offers.
3. Payment processing: Facilitating deposits and withdrawals through supported Malaysian and international payment channels, and reconciling financial transactions.
4. Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct — including through automated monitoring of account and betting patterns.
5. Regulatory compliance: Meeting our obligations under applicable gaming licences, AML frameworks, KYC requirements, and data protection laws.
6. Responsible gambling: Monitoring usage patterns to identify potential indicators of problem gambling, administering self-exclusion and deposit limit requests, and facilitating player welfare interventions where appropriate.
7. Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions.
8. Platform improvement: Analysing usage data in aggregated and anonymised form to improve the design, performance, and game selection of the Platform.
9. Marketing communications: Sending you promotional offers, bonus notifications, and product updates where you have provided marketing consent. You may opt out at any time.

12win8 does not sell, rent, or otherwise trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Payment service providers: Processing transactions via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency networks requires sharing relevant transactional data with those providers.
• KYC and identity verification providers: We engage specialist third-party services to assist with document verification and age confirmation. These providers act as data processors under our instructions.
• Fraud prevention and AML agencies: We may share data with fraud-screening and financial crime prevention services as required by our regulatory obligations.
• Game content providers: Certain game providers have access to gameplay session data necessary to deliver and audit their games on the Platform. Access is governed by data processing agreements.
• IT infrastructure and hosting providers: Our cloud hosting and infrastructure partners process data on our behalf within secure, contractually governed environments.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts where required by law or in response to a lawful request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to implement appropriate technical and organisational security measures and to process data only for the purposes specified in their agreements with 12win8.

12win8 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognise returning visitors, maintain session state, and collect usage analytics.

We use the following types of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and previously selected payment methods to improve your experience.
• Analytics cookies: Collect anonymised data about how visitors interact with the Platform, including pages visited, session duration, and navigation paths. This data helps us identify and resolve usability issues.
• Security and fraud-detection cookies: Help us identify suspicious access patterns and protect player accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in or use the Platform normally. For further detail on the specific cookies we deploy, please contact our support team.

We employ a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records;
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication required for all administrative access to internal systems;
• Continuous automated monitoring for suspicious access patterns and data anomalies;
• Regular penetration testing and independent security audits;
• Formal incident response procedures, including player notification obligations in the event of a confirmed data breach.

While we implement robust security measures, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, please contact our support team immediately.

We retain personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law or regulatory obligations. Key retention periods are as follows:

• Account and identity data: Retained for the lifetime of your active account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years following each transaction, as required by financial regulation and tax obligations.
• Customer support communications: Retained for three (3) years following the resolution of each interaction, or longer where the communication is relevant to an ongoing dispute or investigation.
• Technical and usage data: Typically retained for up to thirteen (13) months in identifiable form, after which data is aggregated or anonymised for analytical purposes.
• Responsible gambling records: Self-exclusion and deposit limit records are retained for the duration of any restriction and for at least five (5) years thereafter, to prevent circumvention.
• Marketing consent records: Retained until you withdraw consent, at which point your data is removed from active marketing lists within ten (10) business days.

When personal data is no longer required for the purposes for which it was collected, we will securely delete or anonymise it in accordance with our data destruction procedures.

You have the following rights in relation to your personal data held by 12win8. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to verified requests within a reasonable timeframe, typically within thirty (30) calendar days.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held in your account.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may request that we limit our processing of your data in certain circumstances, such as while a dispute is being resolved.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

As an international online gaming platform, 12win8 may transfer personal data to service providers and infrastructure partners located outside of Malaysia. Such transfers are made only where:

• The receiving country or territory provides an adequate level of data protection as determined by relevant regulatory standards;
• Appropriate safeguards are in place, such as standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms; or
• The transfer is necessary for the performance of the contract between you and 12win8, such as processing a cross-border payment transaction.

We require all international recipients of personal data to maintain security standards equivalent to those applied within our own systems. For more information about the specific safeguards in place for any particular international transfer, please contact us using the details in Section 15.

The 12win8 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to persons under the age of 21.

As part of our KYC verification process, all new registrants are required to confirm their date of birth and to submit government-issued identity documentation — including a Malaysian MyKad or passport — evidencing that they meet the minimum age requirement. Accounts that are found to belong to individuals under 21 will be closed immediately, and any funds associated with the account will be handled in accordance with our Terms & Conditions and applicable law.

If you believe that a minor has registered on the Platform or that we hold data relating to a minor, please contact us immediately at the details provided in Section 15. We will investigate and take appropriate action without delay.

21+  For players aged 21 and above only. Age verification is mandatory for all accounts.

We review this Privacy Policy periodically to ensure it remains accurate and up to date. The Company reserves the right to update or amend this Policy at any time. The date of the most recent revision is displayed at the top of this document.

When we make material changes to this Policy — particularly changes that affect how we collect, use, or share your personal data — we will:

• Notify registered members by email to the address associated with their account; and/or
• Display a prominent notice on the Platform for a reasonable period prior to the changes taking effect.

Your continued use of the Platform after any updated version of this Policy has been published constitutes your acknowledgement of the changes. If you do not agree to the updated Policy, you should discontinue use of the Platform and contact us to close your account.

If you have questions, concerns, or requests relating to this Privacy Policy or the way 12win8 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform. This is the fastest channel for privacy-related queries.
• Email (data privacy enquiries): [email protected] — please include "Privacy Request" in the subject line for faster routing.
• Languages supported: English, Bahasa Melayu, and Mandarin (中文).
• Response time: We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days.

For requests related to account security, self-exclusion, or responsible gambling, please visit our dedicated Responsible Gambling page. For the general terms governing your use of the Platform, refer to our Terms & Conditions.