Official Document – Updated 2026

Play12 Privacy Policy – How We Protect the Personal Data of Malaysian Players

At play12, your privacy is something we take seriously. This document transparently explains how we collect, use, store, and protect your personal information — and what rights you have as a player over that data.

Last updated: 1 January 2026  |  Version: 2.4  |  Effective immediately upon publication

256-bit SSL encryption. No data sales to third parties. Full access rights for every play12 member.

Register Now

Play12 Privacy Commitment – Key Summary

Six core principles that guide how play12 handles the personal data of all our members.

256-bit SSL Encryption

All data transmitted between your device and play12's servers is encrypted using 256-bit SSL — the same standard used by Maybank and CIMB for online banking. No third party can intercept or read your information in transit.

No Data Sales

Play12 does not sell, rent or share member personal data with any third party for marketing purposes. Your information belongs to you — it is not a commodity we trade in. This principle cannot be overridden by any other terms of use.

Clear Purpose for Collection

Every type of data play12 collects has a specific, clearly stated purpose — account management, payment processing, fraud prevention and service improvement. We do not collect data beyond what is necessary for those purposes.

Full Access Rights & Control

As a play12 member, you have the right to access your personal data, request corrections, ask for deletion, and withdraw consent for certain data processing activities. All requests are processed within 14 business days via support@play12.best.

Secure Data Storage

Play12 player data is stored on servers protected by layered access controls, 24/7 threat monitoring, and regular backups. Only staff with a legitimate operational need are permitted to access player data, and all access is logged for audit purposes.

Limited Retention Period

Play12 does not retain your personal data indefinitely. Retention periods are determined based on legitimate legal and operational requirements. Once data is no longer needed, it is deleted or anonymised in accordance with established procedures.

Contents
Section 1

Introduction

Platform play12 (play12.best) takes the responsibility of protecting player personal data seriously. This Privacy Policy explains how play12 collects, uses, discloses, and protects your personal information when you use our platform — covering account registration, deposits, gameplay, bonus claims, and communications with our support team.

By registering an account or using any play12 services, you agree to the data collection and usage practices described in this Privacy Policy. This document should be read alongside play12 Terms & Conditions which is the overarching agreement governing the use of the platform.

Our Core Commitments: play12 does not sell your personal data. We do not share your information with third-party advertisers. Your data is used solely to operate the platform, process your transactions and improve the overall play12 user experience.

Play12 operates in accordance with internationally recognised data protection principles — including data minimisation, limited and specific purpose, secure storage and clear access rights for every player. If you have any questions about this Privacy Policy, please contact us at support@play12.best.

Section 2

Personal Data Collected

Play12 collects several categories of personal data depending on the level of your interaction with the platform. The table below outlines the types of data collected and their sources:

Data Category Example Information How It Is Collected
Identity Data Full name, MyKad number, date of birth, gender Registration form & KYC verification
Contact Data Malaysian phone number, email address, mailing address Registration form & profile updates
Financial Data E-wallet account name (Touch 'n Go, GrabPay, DuitNow), deposit/withdrawal transaction records in MYR Payment Processing
Activity Data Betting history, games played, total winnings/losses, session duration Platform gaming systems
Technical Data IP address, browser type, operating system, device information, login logs Automated systems during platform use
Communication Data Live chat session content, support emails, feedback submitted Customer support channels
Cookie Data Website preferences, login sessions, usage analytics data Browser cookies (see Section 6)

Play12 does not collect sensitive data such as health information, political views, or religious beliefs. The data we collect is limited strictly to what is necessary to operate the platform and ensure compliance with applicable legal requirements.

Section 3

How We Use Your Personal Data

Play12 uses your personal data for the following legitimate and clearly stated purposes:

  • Account management and identity verification — covering registration, login, KYC verification and account settings management. This forms the basis of the service agreement between you and play12.
  • Financial transaction processing — processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks, as well as withdrawal of winnings to your registered e-wallet in Malaysian Ringgit (MYR).
  • Fraud prevention and anti-money laundering — identifying and investigating suspicious activity, complying with anti-money laundering (AML) requirements, and fulfilling mandatory KYC procedures.
  • Providing gaming services — powering all games on play12 including slots, baccarat, blackjack, virtual sports, e-sports, and lottery, while ensuring the integrity and fairness of every game.
  • Customer support — enabling the play12 support team to assist you with enquiries, complaints and technical issues via live chat or email in Bahasa Melayu.
  • Responsible gambling — monitoring gameplay patterns to identify signs of problem gambling and taking proactive steps to protect player wellbeing in accordance with the responsible gambling policy us.
  • Service communications — sending important account-related notifications, lottery winning alerts, transaction confirmations, and updates to the Terms or Privacy Policy via email or platform notifications.
  • Platform enhancements — analysing usage data in aggregate and anonymised form to understand how players use play12, identify technical issues, and make better product development decisions.
  • Legal compliance — fulfilling the reporting and record-keeping requirements mandated by applicable laws and regulations, including lawful requests from competent authorities.

Direct Marketing: play12 will only send you marketing communications (such as promotional information and bonus offers) if you have given your explicit consent during registration or through your account settings. You may withdraw this consent at any time by updating your communication preferences in your account or by contacting support@play12.best.

Section 4

Data Sharing with Third Parties

Play12 does not sell or rent your personal data to any party. However, as part of normal platform operations, data may be shared with the following limited categories of third parties:

  • Payment service providers — e-wallet and online banking providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX that process your financial transactions. Only the data necessary to complete a transaction is shared, and all such providers are bound by strict confidentiality agreements.
  • Gaming software providers — companies such as Evolution Gaming, Pragmatic Play Live, Habanero and PG Soft that provide live dealer games and slots. Only the minimum data required to operate a game session is shared, including player ID and relevant betting records.
  • Technical service providers — companies providing play12 with cloud infrastructure, cybersecurity, platform analytics and technical support. All such providers are bound by strict data processing agreements and process data solely on behalf of play12.
  • Relevant authorities — play12 may be required to disclose personal data to government authorities, law enforcement agencies, or regulatory bodies when mandated by law, court order, or valid legal process. In such cases, play12 will disclose only the minimum information necessary.
  • Identity verification services — third-party providers that assist play12 in carrying out KYC verification and anti-money laundering (AML) checks. Any identity information shared is subject to strict confidentiality and data protection agreements.
play12 ensures that all third parties receiving players' personal data are bound by data protection obligations equivalent to, or stricter than, play12's own policy. Should any third-party provider fail to meet these obligations, play12 reserves the right to terminate the agreement immediately.
Section 5

Data Storage & Security Measures

The security of your personal data is a core technical and operational priority at play12. We implement multiple layers of protection to safeguard your information against unauthorised access, disclosure, alteration or destruction:

  • Encryption of data in transit — all communications between your browser or app and play12's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This covers logins, payment processing and all gaming activity.
  • Encryption of data at rest — sensitive data such as identity information and payment account details are encrypted at rest within the play12 database. Even in the event of unauthorised system access, stored data cannot be read without the encryption key.
  • Role-based access control — play12 staff may only access player data on a need-to-know basis in relation to their job responsibilities. Access to sensitive data is logged, monitored and periodically reviewed by the internal security team.
  • Continuous threat monitoring — play12's infrastructure is monitored 24/7 to detect suspicious activity, intrusion attempts and security anomalies. Automated alerts are triggered whenever unusual activity is detected in relation to a player's account.
  • Data backup and recovery — play12 player data is backed up regularly to separate, secure storage locations. Data recovery procedures are tested periodically to ensure continuity of service.

Data retention period: play12 retains personal data for as long as necessary for the original purpose of collection, or as required by law. Financial records are typically retained for 7 years for legal compliance purposes. Inactive account data may be anonymised or deleted after 3 years of inactivity, following notification to the player.

Data Breach Notification: In the event of a security breach that materially affects your personal data, play12 will notify you via your registered email within a reasonable timeframe and take appropriate remediation steps, including resetting account access and cooperating with the relevant authorities.

Section 6

Cookies & Tracking Technologies

The play12 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance and maintain the security of your login session. The following types of cookies are used:

Essential Cookies
Required for core platform functionality — login sessions, account security and transaction processing. Cannot be disabled.
Required
Analytics Cookies
Helps play12 understand how players use the platform — pages visited, time spent and errors encountered. Data is collected in aggregate and anonymised form.
Optional
Functional Cookies
Storing your preferences such as preferred language, display settings, and last game played for a more personalised experience.
Optional
Security Cookies
Used to identify and prevent fraudulent activity, monitor suspicious login attempts, and protect your account.
Required

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the play12 platform, including your ability to log in and carry out transactions.

Section 7

Your Rights Over Your Personal Data

As a play12 player, you have the following rights regarding your personal data. All of these rights can be exercised by contacting us at support@play12.best:

Right of Access

You have the right to request a copy of all personal data that play12 holds about you. We will provide a readable data report within 14 business days of receiving your request.

Right to Rectification

If any personal data held by play12 is inaccurate or out of date, you have the right to request a correction. We will update the relevant information once your identity has been verified.

Right to Erasure

You may request the deletion of your personal data when it is no longer needed or when you withdraw your consent. This right is subject to legal obligations to retain certain records (for example, financial records for 7 years).

Right to Restriction of Processing

In certain circumstances, such as during a complaint investigation, you have the right to request a restriction on the processing of your data. This means play12 may continue to store the data but will not use it for any other purpose while the investigation is ongoing.

Right to Object

You have the right to object to the processing of your data for specific purposes such as direct marketing. Once you object to direct marketing, play12 will immediately stop using your data for that purpose.

Right to Data Portability

You have the right to receive the personal data you have provided to play12 in a machine-readable format (such as CSV or JSON), allowing you to transfer it to another service provider if you wish.

To exercise any of the rights above, submit a written request to support@play12.best with the subject line "Data Privacy Rights Request", along with your account number and a copy of your identification document for verification purposes. play12 will process your request within 14 business days.

Section 8

Children's Data & Age Restrictions

The play12 platform is strictly intended for individuals aged 21 years and above. play12 does not knowingly collect, store or process the personal data of any individual under the age of 21.

Mandatory Age Verification: play12 performs age verification during the registration process and again during KYC verification before a player's first withdrawal is approved. Should play12 discover that personal data belonging to an individual under the age of 21 was collected inadvertently, immediate steps will be taken to delete that data and close the account in question.

If you believe that an individual under the age of 21 has registered a play12 account, please notify us immediately at support@play12.best. play12 takes the protection of minors seriously and will treat every such report as a high-priority matter.

Section 9

Links to Third-Party Websites

The play12 platform may contain links to third-party websites or services relevant to the gaming context, such as links to official football league websites for virtual sports statistics or to Malaysian e-wallet service providers.

Play12 Privacy Policy not applicable for those third-party websites or services. Each third-party website has its own privacy policy, and play12 is not responsible for the data collection or protection practices of those third parties. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information.

Section 10

International Data Transfers

In the course of providing gaming services that involve international providers such as Evolution Gaming and Pragmatic Play Live, some of your data may be processed on servers located outside Malaysia. play12 ensures that any such data transfers are protected by appropriate safeguards:

  • Binding data processing agreements with all international service providers, requiring them to protect your data to a standard equivalent to the play12 Privacy Policy.
  • Regular assessments of the data protection measures implemented by each international provider that receives play12 player data.
  • Strict limits on the type and volume of data shared — only the minimum data necessary for the specific service being provided will be transferred.
Section 11

Amendments to This Privacy Policy

Play12 reserves the right to amend this Privacy Policy at any time to reflect changes in our data protection practices, platform service updates, or new legal compliance requirements. The amendment procedure is as follows:

  • Material amendments — meaning changes that significantly affect your privacy rights — will be communicated via your registered email and through in-platform notifications on play12 at least 14 days before they take effect.
  • The "Last Updated" date at the top of this document will be revised whenever amendments are made, regardless of how minor the changes may be.
  • Continued use of the play12 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
  • If you do not agree with any amendments made, you have the right to close your account and request data deletion before the amendments come into effect.

We encourage you to review this Privacy Policy page periodically to stay informed about how play12 handles your personal data.

Section 12

Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or the way play12 handles your personal data, please contact us through the following channels:

Privacy Email
support@play12.best — use the subject line "Data Privacy Enquiry" for faster handling. Responses within 2 business days for general enquiries, 14 days for formal data rights requests.
Live Chat 24/7
For general data privacy enquiries requiring a prompt response, the play12 support team is available via live chat in Bahasa Melayu at any time.

Play12 is committed to handling all privacy-related enquiries and complaints seriously and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

FAQ – play12 Privacy Policy

No. play12 never sells, rents or shares players' personal data with advertisers or any third party for marketing purposes. This is a core principle of our Privacy Policy and is non-negotiable. Your data is only shared with parties directly involved in delivering play12 services — such as e-wallet providers to process your transactions or game software providers to operate game sessions — and all such sharing is subject to strict confidentiality agreements. Should play12 ever consider changing this policy, you will be informed and given the right to object before any changes take effect.

To request access to or deletion of your personal data at play12, send an email to support@play12.best with the subject line "Data Privacy Rights Request". In your email, specify the type of request (access, correction, deletion, or other), include your play12 account number, and attach a copy of your MyKad or other valid identification document for identity verification purposes. play12 will process your request within 14 business days from the date your identity verification is completed. Please note that certain data, such as financial records, may be required to be retained for a specified period as mandated by law, even after account closure.

When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay or FPX, play12 shares only the minimum information required to process the transaction — typically the transaction ID, the amount in MYR and an account reference. This information is shared securely via encrypted API. play12 does not receive or store your e-wallet password or PIN — you authorise payments directly through your own e-wallet platform. All e-wallet providers that play12 works with are recognised Malaysian platforms with their own privacy and security policies.

Yes. You can unsubscribe from play12 marketing and promotional emails at any time in two ways. First, click the "Unsubscribe" link at the bottom of any marketing email we send — your request will be processed automatically within 24 hours. Second, log in to your play12 account, go to "Account Settings" or "Communication Preferences", and disable the marketing communications option. Please note that opting out of marketing emails will not stop important transactional emails such as deposit confirmations, winning notifications, and account security alerts — these are required for the safe operation of your account and cannot be disabled.

When your play12 account is closed at your own request, play12 will initiate the process of anonymising or deleting your personal data that is no longer required. However, certain data must be retained for a specified period based on legal requirements — for example, financial and transaction records are typically kept for 7 years for anti-money laundering compliance and accounting purposes. Data retained after account closure will be accessed on a restricted basis, only by staff with a legitimate legal or operational need, and will not be used for marketing purposes or shared with third parties for marketing.
View All FAQs →

Related play12 Policy Documents

Please also read our other policy documents to fully understand your rights and responsibilities as a play12 player.

Terms & Conditions

The complete rules governing use of the play12 platform — covering accounts, deposits, withdrawals, bonuses and prohibited conduct.

Read Terms & Conditions →
Responsible Gaming

Guides, self-control tools and support resources to keep your play12 experience safe and enjoyable.

Read Our Responsible Gaming Policy →
About Us

The play12 story — who we are, why this platform was built, and our commitment to Malaysian players since 2019.

Learn More →

Your Data Is Safe at Play12 – Register with Confidence Today

Over 150,000 Malaysian players trust play12 for safe slots, baccarat, blackjack, lottery and e-sports gaming. Deposit via Touch 'n Go, GrabPay or DuitNow in under 3 minutes.

Register for Free Now Log In

This platform is intended for users aged 21 and above. Please gamble responsibly.

Bahasa Melayu