At 12win, your privacy is not merely a legal obligation â it is a responsibility we take seriously every day. This document clearly explains how we collect, use, protect, and manage your personal data.
Six core principles that shape how we manage every member's personal data
All data transmitted between your device and the 12win is protected with 256-bit SSL encryption â the same standard used by Malaysia's leading financial institutions. Your account information, payment details, and activity history cannot be intercepted by any third party.
12win has never and will never sell, rent, or commercialise your personal data to any third party. The information you provide is used solely for platform operations and service improvements directly related to your experience.
We only collect data that is strictly necessary to provide our services. No excess information is requested without a clear purpose. This "minimum necessary data" principle is applied at every level of our operations 12win from day one.
This Privacy Policy is written in plain, easy-to-understand language â not confusing legal jargon. You have every right to know exactly what data we hold, how it is used, and how long it is kept. There is nothing hidden about the way 12win manage your information.
You may request access to your personal data, ask for corrections to inaccurate information, or apply for data deletion at any time. 12win respects your rights as a data owner and will process every request within a reasonable timeframe.
Your transaction details â including deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay â are stored in a fully isolated environment with strict layered access controls. No 12win can access your full bank account number or digital wallet details.
This document outlines the privacy practices of 12win and how we handle your personal data. By using our platform, you agree to the terms set out in this Privacy Policy. This document applies in conjunction with Terms & Conditions our platform.
12win (referred to as "we", "our platform", or "12win" in this document) operates the website https://12win-vip.com and all related services under the 12win brand. We are committed to protecting the privacy of every member and user who interacts with our platform.
This Privacy Policy explains what types of personal data we collect from you, why we collect it, how we store and protect it, who it may be shared with, and what rights you have over your own personal data.
This Privacy Policy applies to all users of the 12win residing in Malaysia, including those who use the platform for Malaysia Super League and EPL Sports Betting, cricket betting, e-sports, Live Casino table games, slots, poker, and all other services we offer.
By registering an account or continuing to use the 12win after the effective date of this policy, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy.
12win collects your personal data from several different sources. Below is a full breakdown of the types of data we collect and how it is obtained:
Data You Provide Directly:
Automatically Collected Data:
12win does not collect credit card numbers directly. All payment transactions are processed through third-party payment gateways that comply with PCI-DSS security standards, meaning your credit card details never touch our servers.
The personal data we collect from you is used solely for the following purposes. We will not use your data for any other purpose without first obtaining your consent:
| Purpose of Use | Data Used | Legal Basis |
|---|---|---|
| Account Management & Identity Verification | Name, phone number, email, MyKad | Contract performance |
| Deposit & Withdrawal Processing | Banking information, digital wallets, transaction records | Contract performance |
| Platform Service Provision | Activity data, betting history | Contract performance |
| Fraud Detection & Security | IP address, technical data, activity patterns | Legitimate interest |
| Responsible Gaming | Activity patterns, betting data | Legal obligations |
| Customer Support Communications | Email, phone number, conversation records | Legitimate interest |
| Product Improvement & Analytics | Anonymised usage data | Legitimate interest |
| Marketing Communications (with consent) | Email, phone number | Consent |
12win will not use your personal data to make automated decisions that have a significant impact on you without human review. Any automated decisions regarding your account made by our systems are always subject to manual review by our team upon your request.
12win does not sell or rent your personal data to any third party. However, in certain limited circumstances, we may need to share some of your data with the following parties:
All third parties that receive any data from 12win are bound by data processing agreements that require them to protect that information to an equivalent or higher standard than we apply ourselves. They are prohibited from using your data for their own purposes.
12win continuously invests in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we have in place are as follows:
While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every cyber threat. In the event of a data breach that may affect you, we will notify you within a reasonable timeframe in accordance with applicable legal requirements.
12win uses cookies and similar tracking technologies to ensure our platform functions properly and to deliver a better user experience. Below is an explanation of the types of cookies we use:
You can manage cookie settings through your web browser preferences. Please note, however, that disabling certain cookies may affect the functionality of the 12win. For guidance on managing cookies in popular browsers, you may refer to the official documentation for Firefox, Chrome, Safari, or Edge.
12win retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable law. The following is a general guide on retention periods for different data categories:
Once the applicable retention period has expired, your data will be securely deleted using methods that ensure it cannot be recovered by any party.
As a user of the 12win, you have the following rights regarding your personal data. We respect and facilitate the exercise of all these rights:
You have the right to request a copy of all personal data we hold about you. We will provide the report within 14 business days of receiving your request.
If the personal data we hold about you is inaccurate or outdated, you have the right to request immediate correction at no charge.
You may request the deletion of your personal data under certain circumstances, subject to the legal retention obligations set out in Section 7.
You have the right to object to the processing of your data for specific purposes, particularly for marketing communications you no longer wish to receive.
You have the right to receive your personal data in a machine-readable format (JSON or CSV) for transfer to another service if desired.
You can opt out of marketing communications from us at any time by clicking the unsubscribe link in any email or by contacting our support team.
To exercise any of the rights above, please contact our privacy team at support@12win-vip.com by clearly stating the right you wish to exercise along with your account information. We will verify your identity before processing any request, to protect your privacy from unauthorised third-party access.
In the course of its operations, 12win may store or process some of your data on servers located outside Malaysia. This may occur in the context of using cloud infrastructure services or international gaming software providers.
When your personal data is transferred outside Malaysia, we ensure it receives equivalent protection to data stored locally through the following mechanisms:
You may request further information about the protection mechanisms we use for cross-border data transfers by contacting us at support@12win-vip.com.
12win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or the expansion of our services. Here is how we manage such amendments:
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:
We are committed to responding to every privacy-related enquiry seriously and in a timely manner. Your privacy matters to us not only because the law requires it, but because it is the foundation of the trust you place in 12win.
In today's digital age, personal information is incredibly valuable. From phone numbers to financial transaction records, every piece of data you share with a platform carries implications that must be clearly understood. At 12win, we understand the significant trust you place in us when you register an account and begin using our platform. That trust is not something we take lightly, and it shapes every decision we make in managing user data.
When you register an account 12win and making your first deposit via DuitNow or Touch 'n Go eWallet, you are entrusting us with highly sensitive information. When you place a bet on a JDT match in the Malaysia Super League or an Arsenal match in the EPL, a record of that activity is stored in our systems. When you contact our support team to resolve an issue, that conversation is saved for quality purposes. All of this is your personal data, and we have a clear responsibility to handle it with full integrity.
Many Malaysian users are unaware that their personal data rights are protected under Malaysia's Personal Data Protection Act 2010 (PDPA). This Act sets out principles that all organisations processing the personal data of Malaysians must comply with. 12win operates in accordance with these principles â meaning you have the legal right to know what data we hold about you, to request corrections to inaccurate data, and to withdraw consent for data processing under certain circumstances.
One common concern among new users is the security of online financial transactions. This is a very reasonable concern, especially given the rise of online fraud in Malaysia in recent years. At 12win, every deposit transaction via Maybank2u, CIMB Clicks, GrabPay, or Boost is protected by multiple distinct security layers. First, a 256-bit SSL connection ensures data travels securely between your device and our servers. Second, the payment gateways we use comply with PCI-DSS standards, meaning your payment details are never stored directly in the 12win. Additionally, any unusual transactions will be automatically flagged by our fraud monitoring system for further review.
We also want to be fully transparent about how we use your activity data. When you use the 12win â whether for football betting, poker, slots, or live casino â our system records your usage patterns. This data is used for two key purposes. First, it helps us improve your platform experience â if we find that most users have difficulty locating certain markets, or that a particular page takes too long to load, we can use that data to address the issue. Second, activity data is used by our responsible gaming system to identify usage patterns that may indicate a gambling problem, so we can offer assistance to members who may need it.
Regarding marketing communications, 12win will only contact you with promotions and offer updates if you have given consent to do so. If at any point you no longer wish to receive promotional emails or messages from us, you can easily unsubscribe via the link at the bottom of any email, or by contacting our support team. We respect your decision and will process unsubscribe requests within 24 hours.
In closing, this Privacy Policy is a living document and will continue to be updated as needed to reflect changes in how we operate or in applicable laws. We encourage you to review it from time to time. If you have any questions about how we handle your personal data, our team is always available via live chat or email. Your trust is the most valuable asset entrusted to 12win, and we will continue to work to earn that trust every day.
Have a question or request about your personal data? We're here to help.
With 256-bit SSL protection, a no data-selling policy, and a support team always on hand, you can enjoy football betting, live casino, and all your favourite games at 12win with complete confidence. Sign up today and experience the difference.
At 12win, data protection and responsible gaming are two core pillars of our operations. We provide a range of tools to help you play in a controlled and enjoyable way.
Set daily or weekly deposit limits in your account settings to keep your entertainment spending in check.
Enable session time alerts so you stay aware of how long you've been active on the platform in each session.
Use the cooling-off feature, available from 24 hours up to 30 days, if you feel you need a break from activity on the platform.
This platform is strictly for adults aged 18 and above. Age verification is enabled for all new registrations.
Play for fun, not to solve financial problems. Learn more at Responsible Gaming.