Your privacy matters to 12huat. This Policy explains what personal data we collect, why we collect it, how it is processed, and the rights you hold over your information as a user of the 12huat platform.
12huat (referred to herein as "we", "us", "our", or "the Platform") operates the online gaming platform accessible at https://12huat.cam. We are committed to safeguarding the privacy and personal data of all users who access, register with, or otherwise interact with the Platform.
This Privacy Policy ("Policy") describes the nature of personal data that 12huat collects, the purposes for which such data is processed, the parties with whom it may be shared, the security measures in place to protect it, and the rights exercisable by you as a data subject. It applies to all users of the Platform globally, with particular relevance to users based in Malaysia.
By registering an Account on 12huat or by otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Malaysian Users: While Malaysia's Personal Data Protection Act 2010 (PDPA) primarily governs data processing by commercial entities in Malaysia, 12huat voluntarily aligns its data practices with the principles of the PDPA and broader international privacy standards, including those derived from the General Data Protection Regulation (GDPR) framework, to ensure the highest standard of data protection for our Malaysian player base.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
12huat collects personal data across the following categories, depending on how you interact with the Platform:
The following table summarises the primary categories of personal data and their typical retention periods:
| Data Category | Examples | Typical Retention |
|---|---|---|
| Identity & KYC Documents | MyKad, passport copy, proof of address | 5 years post-account closure |
| Financial Transaction Records | Deposits, withdrawals, wager logs | 7 years (AML compliance) |
| Account Registration Data | Name, email, phone, date of birth | Duration of account + 5 years |
| Technical / Session Logs | IP address, device data, login history | 24 months from collection |
| Support Communications | Chat transcripts, complaint records | 3 years from last interaction |
| Marketing Preferences | Opt-in records, email consent | Until withdrawn or account closure |
12huat collects personal data through the following mechanisms:
12huat processes your personal data for the following purposes:
To create and maintain your Account, verify your identity and eligibility, process deposits and withdrawal requests, and deliver the gaming and betting services you have requested.
To comply with applicable anti-money laundering (AML) laws, counter-terrorism financing (CTF) obligations, and any other regulatory requirements applicable to our licensed operations. This includes verifying source of funds, conducting enhanced due diligence on high-value transactions, and reporting suspicious activity where required by law.
To detect, prevent, and investigate fraudulent activity, account abuse, bonus exploitation, money laundering, collusion, and any other activity that violates our Terms & Conditions. This includes automated monitoring of transaction patterns and gameplay data.
To monitor player behaviour for indicators of problem gambling, apply self-exclusion or cooling-off periods where requested, and enforce responsible gambling limits in accordance with our Responsible Gambling Policy. This includes profiling of gambling behaviour solely for player protection purposes.
To respond to enquiries, complaints, and support requests; to send transactional notifications (deposit confirmations, withdrawal processing updates, security alerts); and, where you have opted in, to send promotional communications about bonuses, offers, and platform updates.
To analyse aggregated usage data, measure platform performance, test new features, and improve the overall user experience for Malaysian players and other users of the Platform.
No Data Selling: 12huat does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is used exclusively to deliver and improve the 12huat service and to comply with applicable legal obligations.
Where international privacy standards require identification of a legal basis for processing, 12huat relies on the following grounds:
12huat may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:
Payment processors and financial institutions — including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB, Public Bank, Hong Leong Connect, and cryptocurrency networks — receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and data protection obligations.
Third-party KYC and AML screening services receive identification documents and transaction data to perform identity verification and anti-money laundering checks as required by our licensing obligations.
Cloud hosting providers, cybersecurity services, and platform technology partners may process data on our behalf under data processing agreements that bind them to 12huat's data protection standards.
12huat may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or regulatory directive. We will notify you of such disclosures to the extent permitted by law.
In the event of a merger, acquisition, or sale of all or part of 12huat's assets, personal data held by the Platform may be transferred to the successor entity, subject to equivalent data protection obligations.
No Unauthorised Disclosure: 12huat will never disclose your personal data to third parties for their own commercial marketing purposes, nor will we share data beyond what is strictly necessary for the purposes described in this Policy.
12huat uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the Platform when you visit. Cookies cannot install malware, access files on your device, or identify you personally unless you have provided personal data to the Platform.
You may manage your cookie preferences through your browser settings. Disabling certain cookies may limit some functionality of the Platform. For browsers commonly used by Malaysian players — including Chrome, Safari (mobile), and the Samsung Internet Browser — cookie management settings are typically found under "Privacy" or "Site Settings".
12huat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Retention periods are set in accordance with applicable law and the operational needs of the Platform.
Upon closure of your Account, 12huat will retain your personal data for a minimum period of five (5) years for identity and KYC records, and seven (7) years for financial transaction records, in compliance with applicable AML and financial record-keeping obligations. Technical session logs and analytics data are retained for a maximum of 24 months.
Where data is retained beyond the period of active Account use, it will be maintained in a restricted access environment and used solely for the purposes of legal compliance, fraud investigation, or dispute resolution. At the expiry of applicable retention periods, data will be securely deleted or irreversibly anonymised.
12huat implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:
Notwithstanding the above measures, no method of data transmission or storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 12huat will notify affected users in accordance with applicable legal requirements.
Subject to applicable law and certain limitations, you have the following rights in respect of the personal data that 12huat holds about you. To exercise any of these rights, please contact us as described in Section 15 below.
Request a copy of the personal data 12huat holds about you, together with information about how it is processed (commonly known as a Subject Access Request).
Request correction of any inaccurate or incomplete personal data held by 12huat. You may also update certain Account details directly via your Account settings.
Request deletion of your personal data where it is no longer necessary for the purposes collected, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
Request that processing of your data be restricted in certain circumstances — for example, while the accuracy of data is disputed or where you have objected to processing based on legitimate interests.
Receive a structured, machine-readable copy of personal data you have provided to 12huat, where technically feasible, for transfer to another service provider.
Object to processing carried out on the basis of legitimate interests, or to direct marketing communications at any time. Marketing opt-out requests will be honoured within 5 business days.
12huat will respond to all valid data rights requests within 30 calendar days. Where a request is complex or numerous, the response period may be extended by a further 30 days, of which you will be notified. We may need to verify your identity before processing a rights request to ensure data is not disclosed to an unauthorised person.
As an internationally operating platform, 12huat may process or store your personal data in jurisdictions outside of Malaysia. Where data is transferred to countries that do not provide a level of data protection equivalent to that offered in Malaysia, 12huat will implement appropriate safeguards to protect your data, including contractual clauses binding data recipients to privacy obligations consistent with this Policy.
Transfers to payment service providers — including those facilitating cryptocurrency transactions via blockchain networks — are inherent to the delivery of our services and are subject to the respective providers' published privacy policies and applicable financial data protection regulations.
The 12huat Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of our KYC process, and any Account found to be held by a person under the age of 21 will be immediately closed and all associated funds forfeited.
If 12huat becomes aware that personal data has been collected from an individual below the minimum age, it will delete such data promptly. If you believe that a minor has registered an Account on the Platform, please contact us immediately at the details provided in Section 15.
Underage Gambling: 12huat operates a zero-tolerance policy toward underage gambling. All registration data is screened for age compliance. Any deliberate misrepresentation of age during registration will result in permanent Account closure and reporting to relevant authorities where required by law.
12huat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. Where amendments are material, we will notify registered Account holders via email or a prominent Platform notification at least 7 calendar days prior to the revised Policy taking effect.
The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.
The current version of this Policy is always accessible at https://12huat.cam/privacy-policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 12huat, please contact us through the following channels:
When submitting a data rights request, please provide your full name, registered Account email address, and a clear description of your request. 12huat may require proof of identity before processing any request that results in the disclosure or modification of personal data.
We are here to help. 12huat's support team handles all privacy queries with care and confidentiality. If you feel your data rights have not been adequately addressed, you retain the right to escalate your concern to the applicable licensing authority or relevant supervisory body in your jurisdiction.
Six core commitments that define how 12huat handles your personal information as a Malaysian online gaming platform.
All data transmitted between your browser and 12huat is protected by 256-bit SSL/TLS encryption — the same standard used by leading Malaysian banks. Sensitive stored data is encrypted at rest using AES-256.
Your personal data is never sold, rented, or traded to third parties for their own commercial use. Data is shared only where strictly required for service delivery, payment processing, or legal compliance.
Access, correct, delete, or export your personal data at any time. All data rights requests are acknowledged within 5 business days and fulfilled within 30 calendar days in accordance with international privacy standards.
12huat applies data minimisation principles — we collect only what is genuinely necessary for account management, KYC compliance, and service delivery. No superfluous data collection takes place.
Clear data retention schedules govern how long each category of personal data is held. Financial transaction records are retained for 7 years for AML compliance; all other data is deleted or anonymised at expiry.
Whilst serving Malaysian players, 12huat voluntarily aligns its data practices with GDPR and PDPA principles — including lawful basis documentation, consent management, and data subject rights frameworks.
Over 850,000 Malaysian players trust 12huat with their data, their deposits, and their gaming experience. Your privacy is protected by design — not as an afterthought. For players aged 21 and above only.