12bet Privacy Policy – Malaysian User Data Protection

1 Personal Information We Collect

12bet collects various categories of information depending on the type of interaction you have with our platform. This information is divided into two main categories:

Information You Provide Directly:

• Full name as stated in your identification document.
• Date of birth and national identity card number (MyKad) or passport number.
• Email address and mobile phone number.
• Current residential address.
• Bank account details and registered payment methods.
• KYC supporting documents such as ID card images and bank statements.
• Communication records with our customer support team.

Information Collected Automatically:

• IP address and general location based on IP.
• Device type, operating system, and web browser version.
• Platform activity records including games played and betting history.
• Login and logout session data.
• Complete financial transaction records.

2 How We Collect Your Information

Your personal information is collected through the following channels:

1. Registration Form — When you register a new account on the 12bet platform.
2. KYC Process — When you upload identity verification documents for compliance purposes.
3. Financial Transactions — When you make a deposit or withdrawal through the platform.
4. Platform Usage — Automatically while you browse and use the 12bet platform.
5. Support Communications — Through live chat sessions, email, or other written communication with our team.
6. Cookies and Similar Technologies — Through cookie files and tracking pixels as described in section 7.

3 How Your Personal Information Is Used

Every piece of data we collect is used for a clear and legitimate purpose. Below is a summary of how data is used at 12bet:

4 Sharing Information with Third Parties

12bet does not sell, rent, or disclose players' personal information to third parties for marketing or commercial purposes. However, there are limited situations where sharing information is necessary:

• Payment Service Providers — Information required to process deposits and withdrawals is shared with approved payment providers such as banks and card processors. All such providers are bound by strict confidentiality agreements.
• Game Providers — Minimum information required to operate certain games may be shared with third-party game providers integrated with the 12bet platform.
• Relevant Authorities — 12bet complies with all relevant legal and regulatory requirements. Information may be disclosed to authorities if required by court order or anti-money laundering (AML) regulations.
• Technical and Security Consultants — In specific situations requiring external technical expertise, limited access may be granted to consultants subject to confidentiality agreements.

5 Data Security Measures

Protecting player personal information is 12bet's highest technical priority. We continuously invest in security infrastructure to keep your data safe at all times.

Key security measures implemented by 12bet include:

• 256-bit SSL/TLS Encryption for all data in transit between your device and 12bet servers.
• Data encryption at rest (data-at-rest encryption) for all sensitive information stored in our database.
• Role-based access control (RBAC) ensuring only authorized personnel can access player data.
• 24/7 Security Monitoring with intrusion detection systems (IDS) and automated incident response.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Two-factor authentication (2FA) for all internal access to player data management systems.

6 Data Retention Period

12bet retains players' personal information for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law, whichever is longer.

• Active account data retained for as long as your account remains active on the 12bet platform.
• Closed account data retained for a minimum of 5 years after account closure to meet financial record-keeping and AML legal requirements.
• Transaction Records retained for a minimum of 7 years in accordance with international financial compliance standards.
• Customer support communication logs retained for 3 years for service quality and dispute resolution purposes.
• Cookie data stored according to the expiry period set for each cookie category, as described in section 7.

Once the retention period expires, data will be permanently deleted or anonymized in accordance with secure data disposal procedures.

7 Cookies and Tracking Technologies

The 12bet platform uses cookies and similar tracking technologies to enhance the user experience and analyze platform performance. There are four categories of cookies in use:

• Essential Cookies — Required for core platform functions such as login session authentication. These cookies cannot be disabled as they are essential to platform operation.
• Preference Cookies — Stores your preference settings such as language and selected interface to streamline your platform experience.
• Analytics Cookies — Used to understand how players use the platform for continuous improvement purposes. This data is aggregated and does not identify individuals.
• Functional Cookies — Enables advanced platform features to function properly, including live chat and in-browser notifications.

You can manage or disable non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of the platform.

8 Your Rights as a 12bet Player

As a 12bet player, you have the following data protection rights, which you may exercise at any time:

9 Children's Privacy and Age Restrictions

The 12bet platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal information from individuals below this age limit.

If we discover that personal information of a child or underage individual has been collected unintentionally, we will take immediate steps to:

• Closing the associated account.
• Deleting all collected personal information.
• Returning any deposited funds to their original source where possible.

10 Amendments to This Privacy Policy

12bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform improvements.

When significant amendments are made, we will:

• Publishing a new version with an updated effective date at the top of this document.
• Sending email notifications to all registered players informing them of key changes.
• Displaying an in-platform notice for at least 14 days after the changes take effect.

Continued use of the 12bet platform after amendments take effect will be deemed acceptance of the revised Privacy Policy.

11 How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to help.

You can reach us via:

• Live Chat — Available 24/7 directly within the 12bet platform or through our mobile app.
• Email — Send your privacy enquiries to [email protected] (display as text, do not click).

Data rights requests will be processed within 30 business days of receipt. For complex requests, we may require up to 60 days and will notify you of any extension.