12ntc Privacy Policy – Personal Data Protection for Malaysia Players

12ntc operates an online casino entertainment platform in Malaysia via the domain 12ntc.best. We understand that your trust in us depends not only on game quality or withdrawal speed — but also on how we handle the personal information you entrust to us when using the platform.

This Privacy Policy was drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. It clearly sets out: what personal information we collect from you, why we need it, how we use it, who may access it, how long we retain it, and what choices and rights you have over your own data.

12ntc does not take this responsibility lightly. Every decision relating to player data is made with the player's best interests and safety as the priority — not purely commercial interests. If at any time you have questions or concerns about how we handle your data, do not hesitate to reach out to our privacy team at support@12ntc.best.

12ntc only collects data that is strictly necessary to provide platform services to you. No data is collected purely for commercial purposes without a clear operational use. The following are the categories of data we collect:

12ntc only collects what is strictly necessary. We do not request credit card copies, full bank account numbers, or other sensitive information irrelevant to platform operations. Payment data related to transactions is processed directly by authorised payment providers (such as TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX) — and is not stored on 12ntc's servers.

12ntc uses collected data only for legitimate and necessary purposes to operate the platform safely and efficiently. Each use of data has a clear legal basis:

• Account management: Enables you to register, log in, maintain your account, and securely access all features of the 12ntc platform.
• Transaction processing: Processing deposits and withdrawals through your chosen Malaysian payment methods accurately and promptly.
• Identity verification (KYC): Meeting legal compliance obligations including age verification, fraud prevention, and anti-money laundering measures.
• Platform security: Detecting and preventing unauthorised access, fraudulent activity, bonus abuse, and other harmful behaviour that could affect other players.
• Customer support: Enables the Malay-speaking 12ntc support team to assist you effectively when you reach out via live chat or email.
• Platform improvement: Analysing aggregated usage patterns (without identifying individuals) to improve performance, interface design, and the overall user experience at 12ntc.
• Service communications: Sending account-related notifications — such as transaction confirmations, security alerts, and important policy updates.
• Responsible gambling: Monitoring play patterns to identify players who may need responsible gambling support, in line with 12ntc's commitment to player wellbeing.

This is what Malaysian players ask about most, and the answer is straightforward: 12ntc does not sell, rent, or commercialise your personal data to any third party for marketing purposes. There are no exceptions to this principle.

However, there are limited situations where 12ntc needs to share data with certain parties in order to operate the platform lawfully and securely:

• Technical service providers: Companies that help us operate the platform — such as cloud service providers, payment processors (TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX), and security service providers. They may only use your data for purposes we specify and are bound by strict confidentiality agreements.
• Game providers: Companies such as Pragmatic Play, PG Soft, Evolution Gaming, and others may receive session data necessary to operate their games on the 12ntc platform. This data is kept to a minimum and does not include your personal financial information.
• Legal authorities: Where required by Malaysian law, a court order, or a directive from a legitimate enforcement authority, 12ntc will comply with such requests while making every effort to notify you, if permitted by law.
• Fraud prevention: In cases of suspected fraud or money laundering, relevant information may be shared with authorised financial crime prevention agencies.

Every data sharing by 12ntc is based on the minimum necessary — we only share data that is genuinely required for the stated purpose, and nothing beyond that.

12ntc does not retain your personal data indefinitely. We set reasonable retention periods based on operational needs and applicable legal obligations:

• Active account data: Retained for as long as your account remains active on the 12ntc platform. When an account is closed at your request, data will be deleted or anonymised within 90 days, unless there is a legal requirement to retain it for longer.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's accounting and tax legal requirements.
• KYC records (identity verification): Retained for 5 years after account closure, in accordance with Malaysia's anti-money laundering legislation.
• Security and technical logs: Retained for 12 months for security and incident investigation purposes.
• Customer support records: Retained for 2 years after the last interaction, to allow for the resolution of any disputes that may arise.

Once the retention period has expired, 12ntc will securely delete or anonymise that data using industry-standard procedures that ensure it cannot be recovered or re-identified.

Data security at 12ntc — it is real technical infrastructure we have invested in to protect every player. Key security measures employed by our platform:

• 256-bit SSL/TLS Encryption: All communications between your device and 12ntc's servers are protected with the same bank-grade encryption used by leading Malaysian financial institutions such as Maybank and CIMB.
• Two-Factor Authentication (2FA): An additional security layer available to all 12ntc accounts — we strongly encourage every player to enable this feature from their account settings.
• 24/7 security monitoring: Our automated system monitors all accounts around the clock for suspicious activity, including unusual login attempts, irregular transaction patterns, and signs of account misuse.
• Data segregation: Sensitive payment data is processed by authorised payment providers (TNG eWallet, DuitNow, GrabPay, and others) and is not stored directly on 12ntc's servers — reducing the risk of financial data exposure.
• Internal access controls: Access to player data within the 12ntc organisation is restricted to staff who require it to carry out their duties, and every instance of access is logged for audit purposes.
• Regular penetration testing: The 12ntc platform undergoes regular security testing by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.

Platform 12ntc uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. The following types of cookies are used:

• Essential cookies: Required for the platform to function — including login session cookies, security cookies, and language preference cookies. These cookies cannot be disabled without affecting core platform functionality.
• Performance cookies: Collects anonymous information about how users interact with the platform — the most frequently visited pages, time spent, and any error messages encountered. This data helps us improve the 12ntc platform over time.
• Functional cookies: Saving your preferences such as last bet size, favourite games, and display settings so you do not need to reconfigure them each time you use the platform.
• Security cookies: Help 12ntc identifies the device you use to log in, making it easier to detect unauthorised access attempts from unrecognised new devices.

You can manage cookie settings through your web browser. However, disabling essential cookies will affect your ability to log in and use the 12ntc in full. For the best experience, we recommend allowing 12ntc platform cookies.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the 12ntc, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@12ntc.best:

• Right to access: You have the right to request a copy of the personal data we hold about you. 12ntc will respond within 30 days of receiving a valid request.
• Right to rectification: If the data we hold about you is inaccurate or out of date, you have the right to request a correction. Most basic information can be updated directly from your 12ntc account settings.
• Right to erasure: Under certain circumstances, you may request that 12ntc delete your personal data. Such requests are subject to our legal obligations to retain certain data (such as financial transaction records) for periods prescribed by law.
• Right to withdraw consent: For data processing that relies on your consent (such as optional marketing communications), you may withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.
• Right to object: You may object to the processing of your personal data for specific purposes, subject to the legal basis on which that processing relies.
• Right to data portability: You may request your personal data in a machine-readable format for transfer, where this is technically practicable.

12ntc committed to responding to all valid requests promptly and within 30 days. No fees are charged for exercising these rights, except in cases of clearly excessive or repetitive requests, where a reasonable administrative charge may apply.

Platform 12ntc is intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. This is not merely a legal requirement — it is a moral commitment that 12ntc takes very seriously.

Measures that 12ntc take to protect minors:

• Age verification during account registration — applicants must confirm they are 18 years of age or older.
• Right to request age verification documents at any time where there is reasonable cause to suspect a player is underage.
• Immediate account suspension and investigation if there are reports or indications that the account holder is underage.
• If an underage individual's account is discovered, it will be closed immediately, all collected data will be securely deleted, and any deposits will be returned to the lawful guardian.

If you become aware that an underage individual has registered or is using the platform 12ntc, please contact us immediately at support@12ntc.best. We will take prompt action.

12ntc reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or relevant technological developments. Whenever the Privacy Policy is updated, the "Last Updated" date at the top of this page will be revised accordingly.

For material amendments — that is, changes that significantly affect how we use your personal data — 12ntc will provide advance notice via:

• In-platform notifications when you are logged in to your 12ntc account.
• Email to the address registered to your account.
• SMS notification to your registered phone number, for highly critical amendments.

Continued use of the platform 12ntc after the amendment's effective date constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

For any enquiries, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 12ntc, you may reach us through the following channels:

• Privacy email: support@12ntc.best — please include "Privacy Enquiry" in your email subject line so it is routed to the right team.
• Live chat: Available on the 12ntc platform 24 hours a day, 7 days a week. Our Malay-speaking support team is always on hand to help.

12ntc committed to responding to all privacy enquiries within 5 business days. For more formal data rights requests (such as data access or deletion requests), we will respond within 30 days of receiving a complete request.