How 12play21 collects, uses, stores, and protects your personal data. Your privacy matters — this document explains exactly what happens to your information when you use our Platform.
This Privacy Policy ("Policy") describes how 12play21 ("12play21," "we," "us," "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "your") who access or use the 12play21 online gaming platform located at https://12play21.net ("Platform"). This Policy forms part of the 12play21 Terms & Conditions and should be read alongside them.
12play21 takes its data protection obligations seriously. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection legislation and the requirements of the international gaming authority licensing framework under which 12play21 operates.
By registering an account or continuing to use the 12play21 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.
1.1 The data controller responsible for personal data processed in connection with the 12play21 Platform is 12play21, operated under the international gaming authority licensing framework referenced in our Terms & Conditions.
1.2 This Policy applies to all personal data collected through the Platform, including via account registration, gameplay, financial transactions, customer support interactions, and marketing communications. It applies to players located in Malaysia and all other jurisdictions where the Platform is accessible.
1.3 All references to "personal data" in this Policy mean any information that identifies or can reasonably be used to identify a natural person, directly or indirectly.
2.1 Registration Data: When you create a 12play21 account, we collect your chosen username, email address, date of birth, country of residence, and the password you set (stored in hashed, irreversible form — never in plain text).
2.2 Identity Verification Data: To comply with our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under the applicable licensing framework, we may collect copies of government-issued identity documents (such as your Malaysian National Identity Card or passport), proof of address documents, and in some cases, source of funds documentation.
2.3 Financial Data: We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (e.g., e-wallet account numbers masked for security, bank account details), and transaction timestamps. Full financial account numbers and card details are not stored by 12play21 — such data is processed directly by our licensed payment service providers.
2.4 Gameplay Data: We record your betting history, game session data, wager amounts, wins and losses, game titles accessed, and promotional eligibility records. This data is necessary for account integrity, bonus verification, and regulatory compliance.
2.5 Technical Data: We automatically collect IP address, browser type and version, operating system, device identifiers, referring URL, session duration, and page interaction data when you access the 12play21 Platform.
2.6 Communications Data: If you contact 12play21 customer support via live chat, email, or any other channel, we retain records of that correspondence including the content of messages and any attachments provided.
2.7 Responsible Gaming Data: Where you set deposit limits, activate cooling-off periods, or request self-exclusion, we record these instructions and their activation dates as part of our player protection obligations.
12play21 uses the personal data described above for the following purposes:
4.1 Contract Performance: The majority of data processing at 12play21 is necessary for the performance of the contract between you and 12play21 — specifically, to operate your account and provide the gaming services you have requested.
4.2 Legal Obligation: KYC, AML, age verification, and certain reporting activities are carried out to fulfil 12play21's legal and regulatory obligations under its licensing framework.
4.3 Legitimate Interests: Fraud detection, security monitoring, and Platform analytics are conducted on the basis of 12play21's legitimate interests in operating a secure, fair, and commercially viable gaming platform.
4.4 Consent: Direct marketing communications are sent only where you have given explicit consent, or where the applicable legal framework permits such communications to existing customers on an opt-out basis.
5.1 12play21 does not sell your personal data to third parties. We disclose personal data only in the following circumstances:
5.2 In the event of a merger, acquisition, or sale of substantially all of 12play21's assets, player data may be transferred as part of that transaction. Affected players will be notified in advance where practicable.
6.1 The 12play21 Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your login session, remember your preferences, and analyse Platform performance.
6.2 Categories of cookies used by 12play21 include:
6.3 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the 12play21 Platform, though some features may be affected.
7.1 12play21 retains personal data for as long as necessary to fulfil the purposes set out in this Policy and to comply with applicable legal, regulatory, and licensing obligations.
7.2 Active player account data is retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements under the applicable licensing framework.
7.3 Customer support correspondence is retained for a minimum of two (2) years from the date of the last interaction. Transaction records are retained for a minimum of five (5) years from the date of the transaction.
7.4 Where personal data is no longer required for any purpose, it will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
8.1 12play21 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data held. These measures include:
8.2 In the event of a data breach that is likely to result in a risk to your rights and freedoms, 12play21 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.
9.1 Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by 12play21:
9.2 To exercise any of the above rights, please contact the 12play21 Data Privacy team via the contact details in Section 14. 12play21 will respond to all verified requests within thirty (30) days of receipt.
9.3 Please note that certain rights may be limited where 12play21 is required to retain data by law or for the exercise or defence of legal claims.
10.1 With your consent, 12play21 may send you promotional communications about new games, bonuses, promotions, and platform updates via email or in-platform notifications.
10.2 You may opt out of marketing communications at any time by updating your communication preferences in your 12play21 account settings, or by contacting customer support. Transactional communications (account security alerts, deposit confirmations, etc.) are not subject to opt-out as they are necessary for the performance of your account contract.
10.3 Where you have activated a responsible gaming self-exclusion or cooling-off period, marketing communications will be suspended for the duration of that period regardless of your stated communication preferences.
11.1 The 12play21 Platform is strictly intended for adults who are 21 years of age or older. 12play21 does not knowingly collect personal data from individuals under the age of 21.
11.2 Where 12play21 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all funds held in that account dealt with in accordance with our terms and applicable regulatory requirements, and the personal data deleted without undue delay.
12.1 In providing the 12play21 Platform to players across Malaysia and other jurisdictions, personal data may be transferred to and processed in countries outside your country of residence. This may occur in connection with the operation of our servers, the provision of services by third-party providers, or our regulatory reporting obligations.
12.2 Where personal data is transferred internationally, 12play21 takes steps to ensure that adequate safeguards are in place to protect your personal data, including the use of contractual clauses approved by applicable regulatory authorities and selection of third-party processors subject to equivalent data protection standards.
13.1 12play21 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated to registered players via email or an in-platform notification not less than fourteen (14) days before the changes take effect.
13.2 The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the 12play21 Platform following the effective date of a revised Policy constitutes your acknowledgement of the changes.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way 12play21 handles your personal data, please contact us through the following channels:
Please mark your enquiry with the subject "Data Privacy" to ensure it is directed to the appropriate team. 12play21 aims to acknowledge all privacy-related enquiries within 72 hours and to resolve them within 30 days of receipt.
Industry-standard security, clear data practices, and 24/7 support. Log in and experience 12play21 Malaysia's most trusted online casino platform.