12track Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction & Scope of the Privacy Policy

12track is an online Sports Betting and casino platform operating under the domain 12track.best, built specifically for Malaysian users. We understand that privacy is a sensitive and important matter for every player who entrusts us with their personal data while using this platform.

This Privacy Policy transparently explains how 12track collects, uses, stores, protects, and – where necessary – shares the personal data of our platform users. It also outlines your rights as a data subject under responsible privacy practices.

This policy applies to all your interactions with 12track, including account registration, use of the platform for EPL and Malaysia Super League football betting, baccarat and blackjack games in the Live Casino section, playing Gates of Olympus or Mahjong Ways slots, MLBB esports betting, and all financial transactions in MYR via supported Malaysian payment methods.

If you have any questions about this Privacy Policy or how 12track handles your personal data, please contact our team through the channels listed in the final section of this document. We are always ready to provide any clarification you may need.

2 Personal Data We Collect

12track collects only the data strictly necessary to deliver its platform services properly, keep your account secure, and comply with applicable legal requirements. Below are the categories of data collected by 12track:

2.1 Account Registration Data

• Full name as stated in your official identification document (MyKad or passport).
• Malaysian phone number that is active – used for account verification and important communications.
• Email address that is valid – used for account verification, transaction notifications, and service communications.
• Date of birth – required to verify that you meet the minimum age requirement of 18 years to use the 12track platform.
• Account password – stored in hashed form that cannot be read or reversed by any party, including the 12track team itself.

2.2 Identity Verification Data

• Copy of MyKad or passport – required for full identity verification before your first withdrawal is processed. These documents are stored securely and accessed only by authorised verification staff.
• Selfie with identity document – may be required in certain cases to verify that the account holder and the document owner are the same person.

2.3 Financial Transaction Data

• Deposit and withdrawal records, including amounts in Malaysian Ringgit (MYR), payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX), and the date and time of each transaction.
• Your e-wallet account number or bank details required to process withdrawals – stored in encrypted format.
• Complete transaction history records retained for AML (Anti-Money Laundering) legal compliance purposes.

2.4 Platform Usage Data

• Game and betting history including game type (football, baccarat, slots, esports), bet amounts, outcomes, and play times.
• IP address and device information used to access 12track – used for account security and fraud detection.
• Session data includes login time, session duration, and pages visited within the 12track platform.
• Your device's web browser and operating system information – used to optimise your platform user experience.

3 How We Use Your Data

12track uses the personal data collected solely for legitimate purposes that are clearly stated below. We do not use your data for any other purpose without your consent:

• Account Management: Processing registrations, verifying identity, and managing login and account security for your 12track account.
• Transaction Processing: Processing deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and processing your winnings withdrawals quickly and securely.
• Bonus & Cashback Management: Automatically calculates and credits your daily Live Casino cashback, weekly slots cashback, and any other promotional bonuses you are eligible for on 12track.
• Platform Security: Detecting and preventing fraud, money laundering, multiple account registrations, and other suspicious activity to protect all players on the 12track platform.
• Service Improvement: Analysing platform usage patterns in aggregate (not at an individual level) to improve the user experience, optimise the mobile platform, and surface the most relevant games for Malaysian players.
• Service Communications: Sending important notifications relating to your account, transactions, changes to terms, and security updates. These communications cannot be unsubscribed from, as they are essential to the security of your account.
• Marketing Communications: With your consent, we will send you information about 12track promotions, new bonuses, the latest EPL Sports Betting offers and special campaigns. You can opt out of marketing communications at any time through your account settings.
• Legal Compliance: Complying with applicable legal requirements, including AML laws, identity verification requirements, and any lawful directives from the relevant authorities.

12track never uses your personal data to make automated decisions that affect your rights as a player without human involvement in relevant cases. Any significant decisions such as account closures or balance freezes are always reviewed by the 12track human team before being carried out.

4 Data Sharing & Disclosure

12track does not sell, rent, or share players' personal data with third parties for marketing or commercial purposes under any circumstances. However, there are limited situations where 12track needs to share certain data with specific parties in order for its services to function properly:

4.1 Malaysian Payment Processors

To process deposits and withdrawals in Malaysian Ringgit, 12track is required to share minimal transaction data with the following licensed payment processors:

• DuitNow and FPX processors for bank transfers via Maybank2u, CIMB Clicks, and other Malaysian banks.
• Processors for Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay e-wallet transactions.

This data sharing is limited to information strictly necessary to process transactions and is subject to confidentiality agreements between 12track and the relevant payment processors.

4.2 Platform Technology Providers

Technology service providers that help operate the 12track platform — including cloud service providers, cybersecurity providers, and platform analytics companies — may access certain technical data within the scope of their work. All such providers are bound by strict data processing agreements and are not permitted to use that data for any other purpose.

4.3 Legal Requirements

12track may be required to disclose players' personal data to the relevant authorities where there is a legitimate legal obligation to do so, including court orders, financial crime investigations, or AML compliance requirements. In such cases, 12track will disclose only the minimum data strictly necessary and will endeavour to notify the player concerned, where permitted by law.

4.4 Data We Do NOT Share

• Your detailed game and betting history – not shared with anyone except upon your own legitimate request.
• Personal financial information – not shared beyond what is necessary for transaction processing.
• Personal data for third-party advertising purposes – 12track does not use player data to sell advertising space.
• Account information to other individuals – even family members or friends. 12track does not disclose account information to any third party without your explicit consent.

5 Security & Data Protection

12track continuously invests in security infrastructure to ensure that players' personal data and financial information are always protected to the highest standard. The following are the key security measures implemented on the 12track platform:

• 256-bit SSL Encryption: All communications between your browser or app and 12track's servers are encrypted using TLS protocol with a 256-bit key length. This means that even if someone were to intercept the communication, they would be unable to read its contents.
• Hashed Password Storage: Your 12track account password is never stored in plain text. It is secured using a strong one-way hashing algorithm – meaning even 12track's own team cannot access your password.
• Two-Factor Authentication (2FA): 12track players can enable two-factor authentication for an added layer of security. Every login from a new device or location will require verification via a code sent to your registered Malaysian phone number.
• 24/7 Security Monitoring: The 12track security team monitors the platform continuously 24 hours a day, 7 days a week to detect suspicious activity, unauthorised access attempts and any security threats that may arise.
• Regular Security Audits: The 12track platform undergoes regular independent security audits to identify and address any potential vulnerabilities in the system before they can be exploited.
• Internal Access Controls: Access to players' personal data within the 12track system is restricted to staff with a legitimate need only, with audit logs recording every access for accountability purposes.

While 12track implements comprehensive security measures, you also play an important role in protecting your account. Please ensure your 12track password is strong and unique (not reused across other accounts), never share your login credentials with anyone, and report to 12track's support team immediately if you suspect any unauthorised access to your account.

6 Cookies & Tracking Technologies

12track uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit a website. They do not contain personal information that can be used to identify you directly.

You can manage cookies through your web browser settings. However, disabling certain cookies — particularly session and security cookies — may affect the functionality of the 12track platform and your playing experience. Cookies required for security cannot be disabled without compromising the security of your account.

7 Your Rights as a Data Subject

As a 12track platform user, you have certain rights regarding your personal data. 12track respects and facilitates the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data we hold about you. 12track will provide your personal data report within 14 business days of receiving a valid request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update most personal information directly through your 12track account settings, or contact the support team for corrections that cannot be made independently.
• Right to Deletion: Under certain circumstances, you have the right to request deletion of your personal data from 12track's systems. However, this right has its limits — we may need to retain certain data to fulfil legal obligations (such as financial transaction records for AML compliance) even after your account is closed.
• Right to Restriction of Processing: You may request that 12track restrict how we process your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. 12track will cease processing your data for that purpose immediately upon receiving your objection.
• Right to Data Portability: You have the right to receive the personal data you have provided to 12track in a structured, machine-readable format for use elsewhere, where it is technically practicable to do so.

To exercise any of the rights above, please contact the 12track privacy team by email at support@12track.best with the subject line "Privacy Rights Request", or via the in-platform live chat. We will verify your identity before processing any privacy-related request to ensure your data is not disclosed to unauthorised parties.

8 Data Retention & Deletion

12track retains players' personal data only for as long as necessary for the purposes set out in this policy, or to comply with applicable legal requirements. The following are 12track's data retention guidelines:

Once data is no longer required in accordance with the schedules above, 12track will securely delete or anonymise it using methods that ensure the data cannot be recovered. Data deletion is carried out under established procedures that are audited on a regular basis.

If you close your 12track account, we will begin the process of deleting your active data within 30 days. However, financial transaction records and identity verification documents will be retained for the period required by law even after account closure.

9 Amendments to This Privacy Policy

12track reserves the right to update or amend this Privacy Policy from time to time to reflect changes in how we handle data, technological developments, or new legal requirements. Any amendments will take effect upon publication of the updated version on the 12track platform.

For material or significant amendments – meaning changes that substantially affect how we use your data – 12track will notify you by email to your registered address or via a prominent in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the 12track platform.

For minor amendments such as spelling corrections, language clarifications, or contact information updates, no notice will be sent, but the update date at the top of this document will be revised to reflect the change. We encourage you to review this Privacy Policy periodically to stay informed of 12track's current practices.

If you do not agree with any material changes to this Privacy Policy, you have the right to close your 12track account and request deletion of your personal data in accordance with the procedures set out in sections 7 and 8 of this document.

10 Contact Us About Privacy

If you have any questions, concerns or complaints regarding how 12track handles your personal data, or wish to exercise any of the privacy rights outlined in this document, please contact us through the following channels: