12huat Privacy Policy — Malaysia Member Personal Data Protection

12huat is an online casino and sports betting platform serving players in Malaysia. We understand that your trust is the foundation of this relationship, and protecting your personal data is not merely a legal obligation — it is a core value we uphold in every aspect of our operations.

This Privacy Policy explains in detail how 12huat collects, processes, stores, and protects your personal information when you register, log in, make a deposit, play, or interact with any part of our platform — whether through the official website, mobile app, or customer support channels.

We are committed to adhering to internationally recognised data protection principles, including:

• Transparency — we clearly inform you of what we collect and why.
• Limited purpose — data is collected solely for specified purposes and will not be used beyond those limits.
• Deletion when no longer required — data that has passed its retention period will be securely deleted.
• Technical security — all data is protected by encryption systems and multi-layered access controls.

If you have any questions about this policy, our data protection team is ready to assist you. Contact us via the official email address listed at the bottom of this page.

12huat only collects information necessary to provide you with a secure, compliant, and high-quality service. The types of information we collect are as follows:

A. Registration & Identity Information (KYC)

• Full name as shown on official identification.
• National ID number (MyKad) or passport for foreign nationals.
• Date of birth and gender.
• Active email address and Malaysia phone number.
• Current residential address.

B. Financial Information

• Bank account number registered for deposits and withdrawals.
• E-wallet information (such as Touch 'n Go eWallet, Boost, or GrabPay) linked to your account.
• Deposit and withdrawal transaction history within the 12huat platform.

C. Technical & Usage Information

• IP address and device geolocation data.
• Device type, operating system, and web browser version used.
• Login activity log including time, date, and access location.
• Betting records, game preferences, and play session history.

D. Verification Documents

• A copy of your identity card or passport for the KYC process.
• Bank statements or proof of address may be required for withdrawal verification.
• A selfie or facial photo for identity verification in specific cases.

Every piece of information we collect is used for a clear and lawful purpose. We do not process your data for purposes not stated in this policy without first obtaining your additional consent.

You may withdraw consent for promotional communications at any time by updating your account settings or contacting our support team. Withdrawal of consent will not affect data processing carried out prior to the date of withdrawal.

12huat does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. However, in the course of lawfully operating the platform, we may share your data with the following categories of third parties in limited circumstances:

• Payment service providers — such as local banks, FPX providers, DuitNow, and e-wallet operators to process your financial transactions. They only receive data necessary for payment processing and are bound by strict confidentiality obligations.
• Gaming software providers — technology companies that provide Slot Games, Live Casino, and Sports Betting platforms. They may receive game session data for technical purposes and fair play auditing.
• Compliance and regulatory bodies — authorized regulatory bodies that require specific information for the purposes of anti-money laundering (AML), counter-terrorism financing (CFT), or legal investigations.
• Cloud and hosting service providers — the server infrastructure used to store and process your data securely, subject to strict data processing agreements.
• Affiliated companies within the 12huat group — entities within the same group that provide operational support functions, subject to the same privacy policy.

12huat continually invests in the latest technical security infrastructure to ensure your personal data is always protected against unauthorized access, breaches, or misuse. The security measures we implement include:

• 256-bit SSL/TLS encryption on all communications between your device and 12huat's servers — all data transmitted across the network is unreadable to any third party.
• Data-at-rest encryption for all sensitive records stored in our databases, including KYC documents and financial information.
• Multi-level access control — only specific authorised personnel may access member personal data, and every access is automatically logged.
• Two-Factor Authentication (2FA) available to all member accounts — we encourage you to enable this feature in your account settings.
• 24/7 security monitoring through an automated threat detection system that identifies and responds to suspicious activity in real time.
• Regular security audits by independent third parties to ensure our security controls consistently meet the latest industry standards.
• Incident response plan that has been tested and prepared to address any data breach swiftly and in an orderly manner — including notification to affected parties within the stipulated timeframe.

While no security system can guarantee 100% protection, 12huat consistently works to minimise risk and respond swiftly if any incident occurs. You also play an important role — please keep your account password secure and enable 2FA for added protection.

The 12huat platform uses cookies and similar tracking technologies to enhance user experience, maintain secure login sessions, and understand platform usage patterns. Below are the types of cookies we use:

• Essential cookies (strictly necessary) — required for core platform functions such as maintaining your login session, storing language preference settings, and enabling the betting cart to function properly. These cookies cannot be disabled.
• Functional cookies — saves your personal preferences such as display format, favorite game types, and other account settings so you don't have to reconfigure them each time you log in.
• Analytics cookies — collects information on how you interact with the platform (pages visited, time spent, clicks) in a non-personally identifiable format, used solely for product improvement purposes.
• Security cookies — helps us identify and prevent fraudulent activity, including suspicious logins from unrecognized locations.

You can manage or disable certain cookies through your web browser settings. Please note that disabling essential cookies will affect the overall functionality of the platform, including the ability to log in and make transactions.

12huat does not retain your data longer than necessary for the stated purposes. Our data retention periods are as follows:

Once the retention period expires, data will be permanently deleted from all our systems using secure erasure methods that ensure the data cannot be recovered. For data stored in backup systems, deletion will be carried out within scheduled periodic backup-cleansing cycles.

As a 12huat member, you hold certain rights regarding your personal data. We respect these rights and provide straightforward channels for you to exercise them:

• Right of Access — you may request a copy of the personal data we hold about you at any time.
• Right to Rectification — if any information we hold about you is inaccurate or out of date, you have the right to request an immediate correction.
• Right to Erasure ("Right to be Forgotten") — you may request the deletion of your personal data, subject to legal retention obligations that override such requests.
• Right to Restriction of Processing — in certain circumstances, you may request that we restrict how we process your data while a dispute is pending resolution.
• Right to Data Portability — you may request your data in a structured, machine-readable format for transfer to another platform.
• Right to Object — you may object to the processing of your data for direct marketing purposes or analytics based on legitimate interests.

To exercise any of the above rights, please contact the 12huat support team via our official email. We will respond to your request within 30 business days. In complex cases, this period may be extended to 60 days with prior notice to you.

The 12huat platform is strictly for individuals who are of age 18 years and above only. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

During the registration process, each applicant is required to confirm that they have reached the age of 18. 12huat also conducts additional age checks through a KYC process requiring official identification documents. Where necessary, we may also request age verification based on recognised third-party data.

If we discover that personal data of underage minors has been collected unintentionally, we will:

• Immediately suspend the account in question.
• Delete all related data as soon as possible.
• Refund any funds involved through the appropriate channels.
• Take the necessary actions in accordance with applicable legal requirements.

If you suspect that a minor has registered or is using the 12huat platform, please contact us immediately so that appropriate action can be taken.

12huat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements in how we handle personal information.

When significant amendments are made, we will:

• Update the "Last Updated" date at the top of this page.
• Send email notifications to all active members.
• Display an in-platform notice for a minimum period of 14 days.

Continued use of the 12huat platform after any amendments take effect constitutes acceptance of the updated terms. If you disagree with any changes, you have the right to close your account by contacting our support team before the amendment's effective date.