12Joker Privacy Policy – Our Commitment to Your Data Security

1. Introduction

This Privacy Policy ("Policy") is published by 12Joker and describes how we collect, use, disclose, store, and protect your personal information when you use our platform, website, and services at https://12joker.click and all associated domains.

We are committed to protecting your privacy and complying with Malaysia's Personal Data Protection Act 2010 (PDPA 2010), as well as applicable international data protection standards. This Policy forms part of 12Joker's Terms & Conditions and should be read together with that document.

The term "personal information" in this document refers to any information that can be used to identify you, directly or indirectly, as an individual — including your name, phone number, email address, IP address, device information and financial information.

2. Types of Personal Data We Collect

12Joker collects various types of personal information depending on how you interact with our platform. Below is a full breakdown of each category of data we collect:

2.1 Registration & Identity Information

• Full name as it appears on your official identification document
• Identity card number (MyKad) or passport number for KYC verification purposes
• Date of birth to verify the minimum age requirement of 18 years
• An active Malaysian phone number
• Email address (if provided)
• The username you chose at registration

2.2 Financial & Transaction Information

• Records of all deposits made via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX
• Records of all withdrawals and winnings
• Payment method details (e-wallet account number, banking information) required to process transactions
• Complete transaction history including the date, time and value of every transaction

2.3 Gaming Activity Data

• Records of all games played — slots, live casino, Sports Betting, e-sports
• Wager amounts, winnings and losses for each gaming session
• Time spent in each game or category
• Bonus claim records and rollover status
• Play patterns used for responsible gambling detection purposes

2.4 Technical & Device Data

• IP address and approximate IP-based location
• Device type, operating system and web browser version
• Unique device identifier (Device ID)
• Access logs including the date, time and actions performed within the account
• Cookie data and other tracking technologies (see Section 9)

2.5 Communications with 12Joker

• Live Chat conversation records with the customer support team
• Emails sent to or received from 12Joker
• Feedback, complaints and requests submitted to us

3. How We Collect Data

12Joker collects your personal information through various channels, and we want you to understand each of them clearly:

3.1 Directly from You

Information you voluntarily provide to us, including during the account registration process, when making deposits or withdrawals, when filling in forms or contacting customer support, and when updating your account profile.

3.2 Automatically During Platform Use

When you use the 12Joker platform, our systems automatically record certain activities for security, fraud detection, and service improvement purposes — including access logs, device technical data, and in-platform navigation patterns.

3.3 From Payment Providers

When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, the respective payment provider may share the necessary transaction verification information with 12Joker to process your deposit or withdrawal. Data shared is limited strictly to what is required to complete the transaction.

3.4 From Public Sources for Identity Verification

During the identity verification (KYC) process, 12Joker may cross-check the information you provide against publicly available sources or recognised third-party databases for fraud prevention and regulatory compliance purposes. This is done solely to protect the security of your account.

4. Purposes for Using Your Personal Data

12Joker uses collected personal information solely for legitimate and necessary purposes. Below is a full breakdown of the purposes for which data is used, along with the legal basis supporting each:

5. Data Sharing & Disclosure

12Joker understands that your trust depends on how we handle data sharing. We maintain strict policies governing who can access your data and under what circumstances.

5.1 Parties That May Receive Your Data

As part of its platform operations, 12Joker may share your personal data with the following categories of third parties, strictly for the purposes stated:

• Payment Service Providers: Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX banks — only the information required to process your transactions
• Game Providers: Gaming software providers such as Pragmatic Play, Microgaming and NetEnt — solely for the purpose of operating games within our platform
• Identity Verification Service Providers: Recognised third-party KYC companies for verifying member identity and age
• Cloud Service Providers: IT infrastructure providers that store and process data on our behalf under strict data processing agreements
• Legal Authorities: Law enforcement agencies, courts, or regulatory bodies where required by applicable Malaysian law

5.2 Conditions for Sharing Data with Third Parties

Every third party that receives personal data from 12Joker members must sign a data processing agreement binding them to:

• Using data solely for purposes designated by 12Joker
• Implement technical and organisational security measures in line with 12Joker's standards
• Not to sell, distribute or disclose data to any other party without 12Joker's written consent
• Notify 12Joker immediately in the event of a data breach
• Returning or destroying data upon termination of the service contract

5.3 What We Do NOT Do with Your Data

• We do NOT sell your personal data to any party under any circumstances
• We do NOT share your data with third-party advertisers
• We do NOT grant group companies access to your data for cross-marketing purposes
• We do NOT use your data to make automated decisions that significantly affect you without human review

6. Data Security Measures

12Joker invests seriously in security infrastructure to ensure your personal data is protected at all times. Below is an overview of the key security measures we have in place:

6.1 Technical Security

• Data Encryption in Transit: All communications between your device and 12Joker's servers are protected by TLS 1.3 with a 256-bit SSL certificate
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256 algorithm
• Two-Factor Authentication (2FA): Available to all member accounts and mandatory for high-value financial transactions
• 24/7 Security Monitoring: Automated monitoring systems detect and alert our security team to any suspicious activity in real time
• Penetration Testing: We conduct regular security assessments by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited

6.2 Organisational Security

• Access to members' personal data is governed by a "need-to-know" principle — only staff who require the data to perform their duties are granted access
• All staff who handle members' personal data receive regular data protection training
• Legally binding confidentiality agreements are signed by all staff and contractors
• Clear incident response procedures are in place and tested on a regular basis

6.3 Response to a Data Breach

In the event of a data breach that may affect your personal information, 12Joker is committed to:

• Notifying the relevant authorities within the timeframe required by applicable law
• Directly notifying affected members via email or in-platform notification within a reasonable timeframe
• Taking immediate steps to contain and mitigate the impact of a breach
• Providing information on steps you can take to protect yourself

7. Data Retention Period

12Joker does not retain your personal data for longer than necessary. Data retention periods are determined based on legal requirements, legitimate business needs and your interests as a member:

7.1 Active Account Data

For as long as your 12Joker account remains active, we retain all data necessary to provide you with the platform's services. This includes profile information, transaction records and gaming records.

7.2 Data Following Account Closure

Upon account closure, we retain your data for the following periods to meet legal requirements:

• Financial and transaction records: 7 years in line with Malaysian Tax Act requirements and AML standards
• Identity verification (KYC) records: 5 years after account closure
• Gaming records: 5 years
• Customer support communication logs: 3 years
• Technical data and access logs: 2 years

7.3 Data Deletion

Once the specified retention period has expired, 12Joker will securely destroy or anonymise your data using methods that ensure it cannot be recovered or accessed again. You may request the deletion of data not subject to mandatory retention requirements by contacting our privacy team.

8. Your Rights under PDPA 2010

As an individual whose personal data is processed by 12Joker, you have certain rights under the Personal Data Protection Act 2010 (PDPA 2010). We respect and facilitate the exercise of all these rights:

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. 12Joker uses cookies and similar tracking technologies to keep the platform running properly and to deliver a better experience for you.

9.2 Types of Cookies We Use

• Required Cookies (Always Active): Cookies required for core platform functionality — such as maintaining your login session and remembering your language preference. Without these cookies, the platform will not function properly.
• Performance Cookies: Helps us understand how members use the platform by collecting anonymous statistical data — such as which pages are visited most frequently and where technical issues occur.
• Functional Cookies: Allows the platform to remember your preferences (such as display resolution or notification settings) to deliver a more personalised experience.
• Security Cookies: Used for security verification purposes, to prevent fraud and to ensure that only you can access your account.

9.3 Managing Your Cookie Preferences

You can manage and control cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the 12Joker platform. Cookies required for security and core functionality cannot be disabled, as they are essential to the security of your account.

10. Protection of Children's Data

The 12Joker platform is intended for individuals aged 18 and above only. We do not knowingly collect or process any personal information from individuals under the age of 18.

Should we discover that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information from our records and close the associated account. If you believe we may hold information relating to a child under 18, please contact us immediately at support@12joker.click.

11. Cross-Border Data Transfers

In the course of its operations, 12Joker may need to transfer members' personal data to other countries — primarily for cloud storage services, international game providers and technical support. Any such data transfer is carried out in compliance with Malaysia's PDPA 2010 and only to countries or recipients that provide a comparable level of data protection.

The safeguards we apply to international data transfers include binding data processing agreements with all recipients, the use of internationally recognised standard contractual clauses, and ongoing assessments of our service providers' data protection practices.

12. Amendments to the Privacy Policy

12Joker reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. We are committed to keeping you informed of any material changes:

• Material changes will be communicated via in-platform notification or email at least 30 days before the changes take effect
• The date of the latest update is always displayed at the top of this document
• Previous versions of this Privacy Policy are available upon request by emailing support@12joker.click
• Your continued use of the 12Joker platform after the effective date of any amendment constitutes your acceptance of the revised policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Our Data Protection Officer

12Joker has appointed a Data Protection Officer responsible for ensuring our compliance with the PDPA 2010 and handling all privacy-related enquiries from members. If you have any questions, concerns, or wish to exercise any of your privacy rights, please contact us:

• Email: support@12joker.click — please include "Privacy Enquiry" in the email subject line
• Live Chat: Available 24/7 within the platform — select the "Privacy & Data" category

We are committed to responding to all privacy-related enquiries within 2 business days and resolving formal requests within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.