Privacy Policy —
12win88 Malaysia

This Privacy Policy ("Policy") is issued by 12win88 ("we", "us", "the Company", "the Platform") and applies to all personal data collected from players, visitors, and users who interact with our online casino and sports betting services accessible at https://12win88.cam and all associated sub-domains and mobile-optimised versions.

12win88 is committed to protecting the privacy and security of all individuals whose personal data we process. We operate in accordance with applicable data protection principles, including the obligation to process personal data lawfully, fairly, and transparently; to collect data only for specified and legitimate purposes; and to retain data no longer than necessary.

By registering a player account or continuing to use the 12win88 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or could be used to identify a natural person, directly or indirectly, including name, identification number, location data, email address, or online identifier.
• "Processing" means any operation performed on personal data, whether automated or manual, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means 12win88, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of 12win88, pursuant to a contractual arrangement and subject to our instructions.
• "KYC Data" means identity verification documents submitted by a player for the purpose of verifying their identity and age, including MyKad copies, passport scans, and selfie photographs.
• "Transactional Data" means records of deposits, withdrawals, wagers, bonus claims, and other financial interactions conducted through the 12win88 platform.
• "Cookies" means small text files stored on a player's device by a web browser for the purpose of retaining session information, preferences, and usage analytics.
• "Player" or "User" means any natural person who has registered or is in the process of registering an account on the 12win88 platform.

12win88 collects the minimum personal data necessary to provide our services, meet our legal obligations, and protect the integrity of the platform. The categories of personal data we collect are set out in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

12win88 collects personal data through the following means:

• Directly from you — when you complete account registration, submit KYC documents, make a deposit or withdrawal, claim a bonus, or communicate with our support team.
• Automatically — when you access the platform, our servers automatically record device and technical data including your IP address, browser type, and usage patterns. This data is collected via server logs, cookies, and similar tracking technologies.
• From third-party payment processors — when you transact using Malaysian payment methods such as Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay, we receive transaction confirmation data from these processors.
• From identity verification services — where we engage a third-party KYC provider to assist with document authentication, that provider may supply verification results to 12win88 in connection with your submitted documents.
• From fraud detection partners — we may receive risk signals and device fingerprinting data from fraud prevention services to protect the platform against account fraud and money laundering.

12win88 processes your personal data for the following specific and legitimate purposes:

1. Account Creation and Management: To register your player account, verify your identity and age (21+), maintain accurate account records, and enable you to log in and use the platform.
2. Transaction Processing: To process deposits and withdrawals via Malaysian banking and e-wallet channels, maintain accurate financial records, and generate statements and receipts.
3. KYC and Anti-Money Laundering Compliance: To comply with applicable anti-money-laundering (AML) and Know Your Customer (KYC) obligations, including verifying the source of funds where required.
4. Responsible Gambling: To implement and maintain self-exclusion, deposit limits, loss limits, and other responsible gambling controls; to identify patterns of behaviour consistent with problem gambling and to intervene appropriately.
5. Customer Support: To respond to enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance.
6. Fraud Prevention and Platform Security: To detect and prevent fraudulent account activity, multi-accounting, bonus abuse, collusion, and other prohibited conduct outlined in our Terms & Conditions.
7. Platform Improvement: To analyse aggregated usage data for the purpose of improving platform performance, user experience, game selection, and operational reliability.
8. Marketing Communications: Where you have consented, to send you promotional offers, bonus notifications, and platform updates. You may opt out of marketing communications at any time by contacting our support team.
9. Legal Compliance: To comply with applicable laws, regulations, and lawful requests from competent regulatory or law enforcement authorities.

12win88 processes personal data under one or more of the following legal bases, as applicable to each processing activity:

12win88 does not sell, rent, or trade your personal data. We may share personal data with third parties only in the following limited and controlled circumstances:

• Game Providers: Game software providers (including Pragmatic Play, PG Soft, Evolution Gaming, Habanero, and Spade Gaming) may receive session tokens and anonymised player identifiers necessary to deliver games. These providers do not receive your full personal profile.
• Payment Processors: When you deposit or withdraw via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Bitcoin, or USDT, transaction data is shared with the relevant processor solely to execute the payment.
• KYC and Identity Verification Providers: Third-party identity verification services may process your submitted documents on our behalf to confirm identity and age.
• Fraud Prevention and Security Partners: We share device and behavioural data with fraud detection platforms to protect the platform and our players.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory direction — without prior notice to you where legally prohibited from giving such notice.
• Professional Advisors: Legal, financial, and auditing advisors engaged by 12win88 may access personal data strictly as necessary for the provision of their professional services, subject to professional confidentiality obligations.

All third parties engaged by 12win88 as Data Processors are subject to contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared, and require them to maintain appropriate security standards.

12win88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

12win88 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the platform to function. These include session management cookies that keep you logged in and security cookies that detect malicious activity. These cannot be disabled.
• Performance Cookies: Used to collect anonymised analytics data about how players navigate the platform — page load times, error rates, and session flow. This data is used solely to improve platform performance.
• Functional Cookies: Used to remember your preferences, such as language settings and display configurations, to improve your experience on return visits.

12win88 does not use third-party advertising cookies or cross-site tracking technologies. You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the 12win88 platform.

12win88 implements a layered approach to data security, combining technical, organisational, and physical controls to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Transport Layer Security (TLS 1.2 and above) for all data transmitted between your browser and our servers;
• AES-256 encryption for personal data stored in our databases;
• Role-based access controls limiting staff access to personal data to authorised personnel only, on a need-to-know basis;
• Regular internal and third-party security audits and penetration testing;
• Multi-factor authentication for administrative system access;
• Intrusion detection and real-time security monitoring systems;
• Documented incident response procedures for data breach scenarios.

As an individual whose personal data is processed by 12win88, you hold the following rights with respect to that data. To exercise any of these rights, please contact our support team via live chat or email at [email protected].

We will respond to all verifiable data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days with prior notification to you. We may request proof of identity before processing a data rights request.

The 12win88 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover or have reasonable grounds to believe that we have collected personal data from a person under 21 without appropriate consent, we will take immediate steps to delete that data and close the associated account.

If you believe that 12win88 has inadvertently collected personal data from a minor, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

The 12win88 platform may contain references to third-party services — including payment processors such as Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — and game software providers. When you interact with these services, you will be subject to their own privacy policies and terms.

12win88 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any external services you interact with in connection with your use of the 12win88 platform.

12win88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the 12win88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend that you review this Policy periodically to stay informed of how we are protecting your information.

If you have any questions, concerns, or complaints about this Privacy Policy or the way in which 12win88 handles your personal data, please contact us through the following channels:

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or regulatory body applicable in your jurisdiction.

For responsible gambling concerns, please visit our Responsible Gambling page where you will find details of support tools, self-exclusion options, and relevant helpline information.