Privacy Policy 12joker — Your Data Security is Our Priority

12joker ("we", "Platform" or "company") is fully committed to protecting the privacy of every individual who uses our online entertainment platform. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

This policy explains the types of personal information we collect, the purposes for collecting it, how we store and protect it, and your rights as a data owner. It applies to all your interactions with 12joker — whether via the website, mobile app, live chat, email or any other communication channel we operate.

If you have any questions about this Privacy Policy or how we handle your data, our team is ready to assist through the support channels available on this platform.

We only collect information that is strictly necessary to provide you with a high-quality service. The information collected is divided into two main categories:

Information you provide directly:

• Full name, date of birth, and identification card number (for KYC verification).
• Email address and mobile number provided during registration.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• Supporting documents such as copies of your identity card, bank statement or utility bill (when requested).
• Any information you share through live chat sessions or communications with our support team.

Information collected automatically:

• IP address, web browser type, operating system and device model used.
• Session data including pages visited, time spent on the platform and navigation patterns.
• Transaction data such as deposit amounts, wagering history and withdrawal activity.
• Geolocation information at the country or region level (not precise GPS location).
• Cookie data and device identifiers for security and improved user experience.

All information we collect is used for clear and legitimate purposes. We do not use your data for any other purpose without your consent.

12joker does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. However, there are limited circumstances where we may need to share certain information with external parties:

• Payment service providers — to securely process your deposits and withdrawals. These providers are bound by strict confidentiality agreements and PCI-DSS compliance standards.
• Game software providers — for technical purposes and game result verification. Only data required for technical functionality is shared.
• Legal authorities — when required by court order, law enforcement agency directive or valid regulatory requirement.
• Analytics services — aggregated and anonymised data is used to understand platform usage patterns for improvement purposes. This data cannot be traced back to any individual.

All third parties involved in processing your data are required to uphold the same strict security and confidentiality standards that we apply internally.

Your data security is more than a promise — it is an ongoing investment we make every day. The 12joker technical infrastructure is built on multiple layers of security, ensuring your data is protected at every level.

• 256-bit SSL Encryption protects all data transmitted between your device and our servers — the same standard used by leading banking institutions.
• Intrusion Detection System (IDS/IPS) monitors network traffic in real time and blocks any unauthorised access attempts.
• Two-factor authentication (2FA) available for all accounts and strongly recommended as an added layer of security.
• Regular security audits conducted by independent third parties to identify and address any system vulnerabilities.
• Internal Access Control ensures that only authorised staff can access players' personal data, and only to the extent necessary to perform their duties.
• Encrypted data backups stored across data centres in separate locations to ensure service continuity.

The 12joker platform uses cookies and similar tracking technologies to enhance user experience, maintain secure login sessions, and analyze overall platform performance.

There are three categories of cookies used:

• Essential Cookies — Required for core platform operations such as login session authentication and security. These cookies cannot be disabled as they are critical to platform functionality.
• Performance Cookies — Collects information about how you use the platform (pages visited, response times, error messages) to help us improve our services. All data is collected anonymously.
• Functional Cookies — Allows the platform to remember your preferences such as language and display settings to deliver a more personalised experience.

You may manage or block cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to use certain platform features.

Under Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding the personal data we hold:

• Right of Access — You have the right to request a copy of all personal data we hold about you.
• Right to Rectification — You may request that we correct any inaccurate or incomplete data.
• Right to Erasure — You may request deletion of your personal data under certain circumstances, subject to our legal obligations.
• Right to Restriction of Processing — In certain situations, you may request that we restrict how we process your data.
• Right to Object — You have the right to object to the processing of your data for direct marketing purposes.
• Right to Data Portability — You may request your data in a machine-readable format for transfer to another provider.

To exercise any of the above rights, please contact our support team via live chat. We will process your request within 30 business days.

12joker retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law, whichever is longer.

• Active account data — Retained for the duration of your active account and for a reasonable period after account closure.
• Financial transaction data — Retained for a minimum of 7 years in accordance with Malaysian legal and financial regulatory requirements.
• Support communication logs — Retained for 2 years from the date of last interaction.
• KYC Data — Retained for the duration of active account and up to 5 years after account closure in accordance with legal requirements.

Once the retention period expires and there is no legal requirement to retain the data, we will securely delete or destroy your personal data using approved methods.

12joker reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or service improvements. Any changes made will be posted on this page with a new "Last Updated" date.

For material changes that significantly affect how we use your personal data, we will provide clear notice via an in-platform notification or by email to the address registered on your account, at least 14 days before the changes take effect.

Continued use of the 12joker platform after changes take effect constitutes acceptance of the updated Privacy Policy. If you disagree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer team is ready to assist.

You may reach us via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the platform.
• Support Email: [email protected] (response within 1–2 business days).
• FAQ Section: Visit FAQ page for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data subject rights requests, the processing period is up to 30 business days.