Play12 is fully committed to protecting the privacy and personal data of every member. This document clearly explains how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Updated: 1 January 2026Six core pillars that form the foundation of play12's personal data protection policy — designed specifically to give you complete confidence while playing.
All data transmitted between your device and play12 servers is protected by industry-standard 256-bit SSL encryption. No third party can intercept or read your sensitive information while in transit.
Your personal data is stored on servers protected with additional encryption at the storage level. Access to this database is strictly limited to authorised personnel only.
Identity verification (KYC) documents such as MyKad copies are processed through secure channels and stored with dedicated encryption. These documents are accessed exclusively by fully accountable verification personnel.
Play12 has never and will never sell, rent, or disclose your personal data to any advertiser or third-party company for marketing purposes without your explicit consent.
You may request access to, correction of, or deletion of your personal data at any time. play12 respects your rights as a data owner and will process every request within a reasonable timeframe.
All data handling practices at play12 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously update our internal procedures in line with applicable changes in legislation.
Play12 collects your personal information through several transparently defined channels. Every data collection process is carried out based on legitimate operational requirements and with your best interests in mind. We do not collect any data beyond what is necessary to provide our services.
Data collection occurs when you register a new account, complete the KYC verification process, make financial transactions such as deposits and withdrawals, contact our customer support team, and while actively using the play12 platform and app.
You provide consent for this data collection when you register and accept play12's Terms and Conditions. You may withdraw this consent at any time, though doing so may affect our ability to provide you with the full service.
In addition to information you provide directly, the play12 system also automatically collects technical data such as IP addresses, device types, operating systems, and platform usage patterns. This technical data is used solely for security and service improvement purposes.
Below is a comprehensive overview of the categories of personal data collected by play12 and the specific purposes for their collection:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity Data | Full name, MyKad number, date of birth, gender | Identity verification & KYC |
| Contact Data | Email address, phone number, residential address | Communication & Account Verification |
| Financial Data | Bank account number, bank name, digital wallet | Deposit & withdrawal processing |
| Technical Data | IP address, browser type, operating system, device ID | Security & fraud prevention |
| Usage Data | Game records, betting history, login patterns | Service improvement & support |
| Communication Data | Support conversation records, feedback, complaints | Customer service quality improvement |
Play12 does not collect sensitive data such as health information, religious beliefs, or political affiliations unless specifically required by applicable law or regulation. All financial data you provide is processed by PCI-DSS certified payment providers and is not stored directly in the play12 database.
Play12 uses your personal data based on clear, lawful, and transparent purposes. We do not use your data for any purpose not stated in this privacy policy without first obtaining your consent.
Play12 does not use your personal data to build psychographic profiles, make automated decisions that negatively affect you, or for any third-party marketing purpose without your consent.
Play12 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share certain information with trusted parties to enable our platform to operate smoothly.
Every third party working with play12 is bound by a data protection agreement requiring them to handle your information to a security standard equal to or higher than play12's own. We conduct regular reviews of all partners to ensure ongoing compliance.
Play12 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or accidental disclosure. Data security is not merely a compliance requirement — it is a core value in our operational culture.
All data communications use TLS 1.3 protocol with AES-256 encryption, meeting the latest NIST standards.
Two-factor authentication (2FA) is available and strongly encouraged for all accounts as an additional layer of protection.
A cyber threat monitoring system operates around the clock to detect and respond to suspicious activity.
Data is backed up periodically to a separate location with its own encryption to ensure continuous availability.
While we implement all reasonable security measures, no online system can guarantee absolute security. We encourage you to take responsibility for your own account security by using a strong password and never sharing your login credentials with anyone.
Play12 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law in Malaysia. Once data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures.
| Data Type | Retention Period | Retention Basis |
|---|---|---|
| Active account data | Duration of active account + 7 years | Legal & audit requirements |
| Financial Transaction Records | 7 years after transaction | AMLA compliance & tax reporting |
| KYC Documents | 5 years after account closure | AML compliance requirements |
| Customer support records | 3 years after case closure | Service improvement |
| Technical log data | 90 days | Security & debugging |
| Non-essential cookie data | Up to 12 months | Experience enhancement |
Once your account is closed at your own request, play12 will initiate the anonymisation of your personal data within 30 days, except for records required to be retained by law. Data retained for compliance purposes will not be used for any marketing or other operational activities.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which you may exercise at any time by contacting the play12 privacy team:
Request a copy of all personal data we hold about you in an easily readable format.
Request prompt correction of any inaccurate or incomplete data we hold about you.
Request deletion of your personal data when it is no longer required, subject to our legal obligations.
Object to the processing of your data for specific purposes, such as direct marketing you have not consented to.
Request play12 to restrict how we use your data in certain circumstances permitted by law.
Receive your data in a structured, machine-readable format for transfer to another service provider.
Play12 will process all data rights requests within 30 days calendar days from the date the request is received. In complex cases, this period may be extended by up to 60 days with notification to you. Requests can be submitted via our live chat support or by email to the privacy team.
The play12 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand platform usage patterns on an aggregate basis. Cookies are small text files stored on your device when you browse our platform.
You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the overall functionality of the play12 platform and you may not be able to access all available features.
The play12 platform may contain links to third-party websites or services that operate independently of play12. These include payment providers, game providers, and support services integrated within our platform.
Play12's Privacy Policy applies solely to the play12 platform itself. play12 is not responsible for the privacy practices or content of third-party websites that may be accessible through our platform. We encourage you to read the privacy policy of each third-party service you use separately.
All third-party game providers integrated into the play12 platform undergo a rigorous security review and privacy compliance process before being permitted to operate within the play12 ecosystem. We ensure consistent data protection standards across all our technology partners.
If you have any questions, concerns, or complaints regarding how play12 handles your personal data, our Data Protection Officer (DPO) team is available to assist you at all times.
You can reach the play12 privacy team through the following channels:
If you are not satisfied with play12's response to your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia (PDPD), which is the authority governing the PDPA 2010 in this country. play12 will cooperate fully with any investigation conducted by the relevant authorities.
Play12 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or service improvements. Any material changes will be communicated to you via your registered email or in-platform notification at least 14 days before the changes take effect.
With a transparent privacy policy, industry-standard encryption, and a full commitment to data protection, play12 is the best choice for a safe and responsible online entertainment experience in Malaysia. Register today and enjoy gaming with complete peace of mind.