12play15 Privacy Policy

01 Introduction

12play15 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at 12play15.co and is committed to protecting the privacy of all individuals who access or register on the platform ("you", "the Player"). This Privacy Policy ("Policy") applies to all personal data collected through the 12play15 website, mobile platform, and any associated communications channels.

This Policy is intended to comply with applicable data protection principles, including those relevant to the international online gaming licensing framework under which 12play15 operates. By registering an account with 12play15 or using any service on the platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein.

If you do not agree with any part of this Policy, you should not register an account or continue to use the 12play15 platform.

02 Data We Collect

2.1 Registration Data

When you create a 12play15 account, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification purposes — minimum age 21);
• Residential address, including postcode and state within Malaysia;
• Email address and mobile phone number;
• Username and encrypted password credentials.

2.2 Identity Verification Data

To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, 12play15 may request copies of identity documents including your MyKad, passport, or driving licence, and proof of address such as a recent utility bill or bank statement. This documentation is handled via a secure encrypted upload interface and is reviewed only by authorised compliance personnel.

2.3 Financial Data

We collect records of all deposits and withdrawals made through your 12play15 account, including transaction amounts, dates, and the payment method used (e.g., Touch n Go eWallet, Boost, Maybank). Full payment credentials — including card numbers — are processed by PCI-DSS compliant third-party payment processors. 12play15 does not store complete card numbers on its own infrastructure.

2.4 Usage & Behavioural Data

We automatically collect technical data when you interact with the platform, including IP address, browser type and version, device type and operating system, session duration, pages visited, game titles accessed, and bet history. This data is used to operate the platform, detect fraud, and improve the user experience.

2.5 Communications Data

If you contact 12play15 support via live chat or email, records of those communications — including your name, contact details, and the content of the exchange — are retained for quality assurance, fraud investigation, and regulatory compliance purposes.

03 How We Use Your Data

12play15 uses the personal data we collect for the following purposes:

• Account creation and management: To register and maintain your player account, verify your identity and age, and process deposits and withdrawals;
• Platform operation: To deliver the services you request, including sportsbook betting, live casino games, and slot products;
• Regulatory compliance: To fulfil AML/KYC obligations, respond to lawful regulatory requests, and comply with the conditions of 12play15's international gaming licence;
• Fraud prevention and security: To detect and investigate suspicious activity, unauthorised account access, and abusive betting patterns;
• Responsible gaming: To identify and respond to potential problem gambling behaviour, apply player-requested limits, and enforce self-exclusions;
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions;
• Platform improvement: To analyse aggregate usage data and improve platform performance, game selection, and user interface design;
• Communications: To send transactional notifications (e.g., deposit confirmations, withdrawal status updates) and, where you have consented, promotional communications about offers and new platform features.

04 Legal Basis for Processing

12play15 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the player account agreement, including account registration, transaction processing, and game delivery;
• Legal obligation: Processing required to comply with applicable AML/KYC regulations, licensing conditions, and law enforcement requests;
• Legitimate interests: Processing for fraud prevention, platform security, and improving the quality of our services, where such interests are not overridden by your rights;
• Consent: Where you have explicitly consented to specific processing activities, such as receiving promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

We may share your personal data with the following categories of third parties, solely to the extent necessary to fulfil the purposes described in this Policy:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Visa payment gateway providers, strictly for the purpose of processing your transactions;
• Identity verification providers: Third-party KYC service providers engaged to verify identity documentation as part of our regulatory compliance obligations;
• Game software providers: Licensed game developers whose software is integrated into the 12play15 platform may receive limited technical data (such as session tokens) necessary to deliver their products;
• Regulatory and law enforcement authorities: Where required by law, regulation, court order, or under the conditions of 12play15's gaming licence;
• Fraud prevention agencies: Where there are reasonable grounds to suspect fraud, money laundering, or other criminal activity.

All third-party data processors engaged by 12play15 are bound by contractual data processing agreements that restrict the use of your data to the specified purpose and require them to maintain appropriate security standards.

06 Cookies & Tracking Technologies

12play15 uses cookies and similar tracking technologies to operate the platform and improve your experience. The categories of cookies used include:

• Essential cookies: Required for the platform to function, including session management, login state persistence, and security tokens. These cannot be disabled without disrupting platform functionality;
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate and use the platform, enabling 12play15 to identify and fix usability issues;
• Preference cookies: Store your platform settings and preferences, such as language selection and display options, to personalise your experience across sessions.

12play15 does not deploy third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Disabling essential cookies will impair platform functionality, including the ability to log in to your 12play15 account.

07 Data Retention

12play15 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account registration data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to satisfy AML regulatory retention requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC documentation: Retained for a minimum of five (5) years following the submission of verification documents or account closure, whichever is later;
• Support communication records: Retained for three (3) years from the date of the last interaction;
• Usage and behavioural data: Retained in anonymised or aggregated form for platform analytics; identifiable usage data is retained for no more than twenty-four (24) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

08 Your Rights

Subject to applicable data protection law and the legal retention obligations described in Section 7, you hold the following rights in relation to your personal data held by 12play15:

To exercise any of these rights, contact 12play15 support via live chat or in writing to [email protected]. We will respond within 30 days. Identity verification may be required before we can process your request.

09 Children's Privacy

If 12play15 becomes aware that personal data has been collected from a player who is under 21 years of age, that account will be closed immediately and any associated personal data will be deleted, subject to legal obligations relating to the investigation and reporting of underage gambling. If you believe a person under 21 has registered an account on the platform, please contact support immediately.

10 International Data Transfers

As 12play15 operates under an international gaming licence, certain data processing activities — including KYC verification and payment processing — may involve the transfer of personal data to service providers located outside Malaysia. Where such transfers occur, 12play15 ensures that appropriate data transfer safeguards are in place, including contractual clauses that require the recipient to maintain standards of data protection no less rigorous than those applied by 12play15 under this Policy.

11 Security Measures

12play15 implements the following technical and organisational measures to protect your personal data:

• All data transmitted between your browser and the 12play15 platform is encrypted using TLS (Transport Layer Security);
• Personal data at rest is encrypted using AES-256 or equivalent standards;
• Access to personal data is restricted to authorised 12play15 personnel on a need-to-know basis, enforced through role-based access controls;
• Payment credentials are handled exclusively by PCI-DSS certified payment processors — full card numbers are never stored on 12play15 servers;
• Regular security assessments and penetration tests are conducted to identify and remediate vulnerabilities in the platform infrastructure;
• In the event of a confirmed personal data breach affecting your information, 12play15 will notify you within 72 hours of becoming aware of the incident, in accordance with applicable notification obligations.

12 Policy Updates

12play15 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the platform not less than seven (7) days before the effective date of the change. Your continued use of the 12play15 platform following the effective date of any revision constitutes your acceptance of the updated Policy. The date at the top of this page reflects when the Policy was last revised.

13 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 12play15, please contact us via the live chat function available on the platform, or in writing to the address below. All privacy-related correspondence is handled in English and is acknowledged within two (2) business days.

Data enquiries: [email protected] (plain text — not a clickable link)