Official Document
Your privacy is not merely a legal obligation to us — it is a moral responsibility we take seriously every day. This document clearly sets out what we collect, why we need it, how it is protected, and your full rights as a player 12play over your own personal data.
Privacy Commitment: 12play never sells, rents, or shares your personal data with any third party for marketing purposes. Your data is used solely for the purposes stated in this document and nothing beyond that.
This Privacy Policy is published by 12play, an online casino platform operating under the domain 12play.express. It explains how we — as the data controller — collect, store, process, use, and protect the personal information you provide to us or that we collect automatically when you use our platform.
This Policy applies to all users of the platform 12play, including visitors who browse the site without registering, active registered members, and former members whose accounts have been closed. It covers all interactions with our platform — including website usage, casino games, slots, live baccarat, EPL and Malaysia Super League sports betting, poker, jackpots, and all customer support services.
By registering for or using the platform 12play, you give your consent to the collection and processing of your personal data as described in this policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.
The following are the data categories that 12play collect from users and the purposes for doing so:
| Data Categories | Sample Information | How It Is Collected |
| Identification Data | Full name, date of birth, MyKad / passport number | Provided by the user during registration or the KYC process |
| Contact Data | Malaysian phone number, email address | Provided by the user during registration |
| Technical Data | IP address, device type, browser, operating system, session cookies | Automatically collected during platform use |
| Game Data | Betting records, wins, losses, round history, games played | Automatically generated during gameplay activity |
| Financial Data | Deposit records, withdrawal records, payment methods used (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay) | Generated during financial transactions |
| Communications Data | Customer support conversation records, emails sent to us, feedback | Recorded during interactions with the support team |
| Geolocation Data | Country, state (for Malaysian user eligibility verification) | Detected via IP address and system verification |
Every piece of data we collect has a clear and legitimate purpose. 12play uses your personal data solely for the following purposes:
12play does not use your data for third-party marketing, does not sell user profiles to advertisers, and does not make significant decisions affecting your rights through fully automated processes without human review.
12play does not sell, rent, or share your personal data with any party for marketing or commercial purposes. Data sharing only occurs in the following limited situations, and each case is governed by a strict data protection agreement:
Data security is a core investment 12play. Our dedicated security team ensures that the following layers of protection remain active and up to date at all times:
12play does not retain data for longer than necessary. The following are the retention period guidelines for each data category:
| Data Type | Retention Period | Reason |
| Active account registration data | For the duration of the active account | Required for account management |
| Gaming and wagering records | 5 years from the transaction date | Audit and legal compliance requirements |
| Financial transaction records | 7 years from the transaction date | AML and tax legal requirements |
| KYC verification documents | 5 years after account closure | AML compliance requirements |
| Customer support records | 3 years after ticket closure | Complaint reference and service improvement |
| Access and security logs | 12 months | Fraud detection and security investigations |
| Non-essential cookie data | Up to 12 months | Recognised platform usage analytics |
Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. Data that must be retained longer due to specific legal requirements will be stored in a restricted format with strictly limited access, and you will be notified where relevant.
As a user of the platform 12play, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights without imposing unreasonable barriers:
To exercise any of these rights, please contact the 12play via live chat, WhatsApp, or email at support@12play.express. We may need to verify your identity before processing requests involving sensitive data.
Platform 12play uses cookies and similar tracking technologies to ensure the platform functions correctly and to enhance your experience. The following are the types of cookies we use:
| Cookie Types | Purpose | Can It Be Disabled? |
| Required for core platform functions — session login, security, and account verification. Without these cookies, the platform will not work. | No — required for core operations | |
| Remembering your preferences such as language, last betting limits, favourite tables, and display settings. Enhances ease of use. | Yes — performance may be affected | |
| Collecting aggregated, non-identifiable usage data to help us understand how players use the platform and improve the overall experience. | Yes — can be disabled |
You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies will interfere with the platform's login functionality and security. 12play does not use third-party advertising cookies or cross-site tracking cookies.
Given that the platform 12play involves financial transactions via Malaysian eWallets and online banking, we pay particular attention to protecting your payment information.
Here is how we handle your payment data securely:
If you suspect any unauthorised payment activity on your account 12play , contact our support team immediately via live chat or WhatsApp. We will investigate and take prompt action to secure your account.
Platform 12play is exclusively for individuals aged 18 years of age and above. We take the protection of minors seriously and maintain a zero-tolerance policy against underage use of the platform.
Steps we take to prevent underage access:
12play does not knowingly collect any personal data from individuals under the age of 18. If you believe a minor has registered on our platform, please contact us immediately at support@12play.express and we will take prompt action.
12play reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. Any changes will always move in the direction of stronger data protection, not weaker.
For any material amendments to this Privacy Policy:
Continued use of the platform 12play after notice of changes has been given will be considered your acceptance of the amended policy. If you do not agree with the amendments, you have the right to close your account and withdraw your balance before the changes take effect.
For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data by 12play, please reach out to us through the following channels:
Our team is committed to responding to all privacy-related inquiries within 48 hours business days. For formal requests such as data access, correction, or deletion, please include your account number and a copy of your identification document to expedite the verification process.
Last updated date of this document: 1 January 2026. This document supersedes all previous versions of the Privacy Policy 12play published prior to that date.
Your Data Flow
Transparency is at the heart of our privacy commitment. Here is a clear overview of your data's journey from the moment you register through each gaming session.
Your data is transmitted over encrypted SSL connections and stored with AES-256 encryption.
Identity verified securely. Documents are encrypted and stored separately from game records.
Transactions are processed through an encrypted gateway. Your eWallet PIN and password never pass through our systems.
Game records are stored securely. Game providers receive only the minimum technical data necessary.
Winnings are sent to your eWallet within 15 minutes. Transaction records are retained for compliance purposes.
Every stage is protected by SSL & AES-256 encryption — your data stays secure at every step.
Your Rights
You are more than just a user — you are the owner of your own data. Here are the rights you can exercise at any time.
You have the right to know what data we hold about you, where it is stored, how long it is retained, and who can access it. Request a full data report at any time through our support team.
Inaccurate data can affect your account. You have the right to request correction of any incorrect information in our records — we will process it within 7 business days.
When you close your account, you may request deletion of your personal data. Please note that certain data must be retained by law — we will explain what can and cannot be deleted.
Request your data in a machine-readable format (JSON or CSV) if you wish to keep your own records or transfer to another platform. Requests are processed within 30 days.
You may object to the use of your data for specific purposes such as analytics or profiling. We will consider your objection and either provide an explanation or cease the relevant processing.
Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to it.
Security Commitment
These are not just promises on paper — they are the real technical and operational measures we implement every day to protect your data.
All data stored on servers 12play is protected with AES-256 encryption — the same standard used by Malaysia's leading banks to safeguard their customers' financial data. Even if our servers were physically compromised, your data would remain unreadable without the encryption key.
Personal data, game records, and financial information are stored in separate systems with strict access controls. No single staff member can access all data categories at once — this minimises internal risk and protects your privacy even from threats within the organisation.
12play operates on a business model that does not rely on selling user data. We do not sell player profiles, betting habits, or any personal information to advertisers, data brokers, or any third party for commercial purposes.
An independent security firm conducts penetration testing on the infrastructure 12play on a regular basis to identify and remediate any vulnerabilities before they can be exploited. Test reports are reviewed and acted upon by our security team.
We only collect data that is genuinely necessary to operate our services. There is no "collect now, find a use later" approach — every data point we collect has a clear justification that is documented in this policy.
In the event of any data breach that may affect your information, 12play is committed to notifying you within 72 hours from the date we become aware of the incident — well ahead of standard industry requirements.
Frequently Asked Questions
Have questions about how we handle your data? Quick answers are right here.
This Privacy Policy should be read alongside the Terms & Conditions 12play which contains further details on your rights and responsibilities as a platform user. Together, these two documents form the complete framework governing the relationship between you and 12play — from how you can use the platform to how we protect your interests. We encourage you to read both documents in full before registering, and to revisit them periodically to stay up to date with the applicable terms.
Read Full Terms & ConditionsPersonal data protection and responsible gambling are two sides of the same coin at 12play. Your game data is used not only for account security, but also to help us identify patterns that may indicate a gambling problem — so we can offer appropriate support at the right time. All such data is handled in strict confidence and is never used against your interests. Deposit limits, session time limits, and self-exclusion tools are accessible in your account at any time. This platform is for users aged 18 and above only.
Learn More About Responsible Gaming