Privacy Policy 12spin —
Your Data, Our Responsibility

12spin ("we", "Platform") is committed to protecting the privacy of every user who registers and uses our services. This Privacy Policy explains in detail how we manage your personal data — from the moment you first visit our website to the permanent closure of your account.

This policy applies to all information we collect through the 12spin, mobile app, email communications, Live Chat, and any other interaction channels between you and our platform. It also applies to data we receive from our trusted business partners in certain contexts.

We comply with Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection standards. If you have any concerns about how we handle your data, please contact our privacy team via the details provided in the final section of this document.

We only collect data that is strictly necessary to provide you with quality service. Below are the categories of data we collect and the reasons for collecting them:

We do not collect data unrelated to platform operations. Sensitive information such as passwords is stored in hashed form and cannot be viewed by any 12spin staff member. 12spin in its original form.

The data we collect is used solely for legitimate and transparent purposes. 12spin uses your personal data for the following purposes:

• Account management: Create, verify, and maintain your user account securely
• Transaction processing: Process deposits, withdrawals, and all financial transactions accurately and securely
• Identity verification (KYC): Comply with anti-money laundering (AML) and fraud prevention legal requirements
• Customer support: Help you resolve issues, answer enquiries, and improve your overall experience
• Platform security: Detect and prevent unauthorised access, fraud, and suspicious activity
• Product enhancement: Analyse usage patterns to improve platform features and the gaming experience
• Marketing communications: Send you offers, promotions, and updates — only where you have given your consent
• Legal compliance: Comply with reporting and record-keeping requirements set out under Malaysian law

We will not use your data for any purpose other than those stated above without first obtaining your additional consent.

12spin does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We only share your data in limited and controlled circumstances as follows:

• Trusted service providers: Payment processors, gaming software providers, and cloud service providers that help us operate the platform — all bound by strict confidentiality agreements
• Legal requirements: When required by a court, law enforcement agency, or Malaysian regulatory body with lawful jurisdiction
• Fraud prevention: To industry bodies or other platforms in cases of confirmed fraud, to protect a healthy online gambling ecosystem
• Business transfers: In the event of a merger, acquisition, or asset sale where user data may be transferred to a successor entity — you will be notified in advance

Every third-party partner we work with undergoes a rigorous security assessment. They are only permitted to process your data under our instructions and for specified purposes. They are not allowed to use your data for their own benefit.

Protecting your personal data is more than a legal obligation for 12spin — it is our moral responsibility to every user who trusts our platform. We continuously invest in security infrastructure to ensure your data remains safe at all times.

The technical security measures we implement include:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers
• Data encryption at rest for all user records and financial information
• Two-factor authentication (2FA) available to all user accounts
• Real-time threat monitoring operates an intrusion detection system (IDS) running 24/7
• Penetration testing regularly by certified independent security experts
• Role-based access control — staff can only access the data required for their specific role
• Encrypted data backups stored in redundant data centres across separate locations

While no system can be guaranteed 100% secure against all threats, 12spin continuously updates our security measures in line with the latest technological developments. Should any security breach affecting your data occur, we will notify you within 72 hours via your registered email.

12spin uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three main categories of cookies:

• Essential Cookies: Required for core platform functions such as login, gaming sessions, and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how you use the platform — which pages you visit, how long you spend on them, and any errors encountered. This data is used in aggregate and anonymised form to improve platform performance.
• Functional Cookies: Remember your preferences such as language, display theme, and account settings so you do not have to reconfigure them each time you log in.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and your experience on the platform 12spin. For more information on managing cookies, refer to your browser's documentation.

Under Malaysia's Personal Data Protection Act 2010 and the 12spin, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our privacy team via Live Chat or email. We will process your request within 14 business days. In complex cases, this period may be extended to 30 days, and we will notify you if this occurs.

12spin retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations.

• Active account data: Retained for the duration your account remains active and in use
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysian tax and financial regulations
• Support communication logs: Retained for 2 years after the date of last interaction
• KYC and identity verification data: Retained for 5 years after account closure for AML compliance purposes
• Marketing data: Deleted within 30 days after you unsubscribe from marketing communications

Once the designated retention period has elapsed, your data will be securely deleted or anonymised so it can no longer be linked to you personally. You may request account closure and data deletion at any time through your account settings or by contacting our support team.

Platform 12spin is intended for users aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Parents or guardians who become aware that their minor has registered an account at 12spin should contact our support team immediately so that appropriate action can be taken without delay.

We encourage parents to use appropriate parental control software and to speak with their children about online safety to prevent unauthorised access to gambling platforms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our privacy team is ready to assist you.

We are committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe. Your satisfaction and trust are our top priority. For more information about your rights under Malaysian law, you may also refer to the Department of Personal Data Protection Malaysia.