Personal Data Protection

12spin Privacy Policy – Your Personal Data Protection

At 12spin, your privacy is not merely a legal obligation — it is a responsibility we take seriously every day. This document transparently explains how we collect, use, store, and protect your personal data while you use our platform.

Updated: 1 January 2026  |  Version 2.4

Our Commitment to Your Privacy

Six core principles that shape 12spin's approach to protecting the personal data of all members

High-Level Encryption

All data transmitted between your device and 12spin servers is protected by 256-bit SSL encryption. Sensitive information such as passwords is stored using a one-way hashing algorithm that cannot be reversed by anyone, including our own technical team.

Data Not Sold to Third Parties

12spin does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. Your data is only shared with service partners necessary for platform operations and is subject to strict confidentiality agreements.

Full Control in Your Hands

You have the right to access, correct, download, or request the deletion of your personal data at any time. Our support team is ready to assist you in exercising these rights within 30 working days from the date the request is received.

Malaysia PDPA Compliance

The 12spin Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all our data handling practices are aligned with the applicable local legal requirements governing online platform operations in Malaysia.

Immediate Notification in the Event of a Breach

In the event of any security incident involving member personal data, 12spin is committed to notifying affected members within a reasonable timeframe via email or app notification. We will also report serious incidents to the relevant authorities.

Regular Security Audits

The 12spin systems and infrastructure undergo periodic independent security audits conducted by qualified cybersecurity experts. Audit findings are used to continuously improve our security practices and ensure your data is always protected to the highest standards.

01Introduction

Welcome to the 12spin Privacy Policy. This document constitutes a binding agreement between you as a Member or user of our platform and 12spin as the controller of your personal data. By registering an account, logging in, or using any 12spin service, you consent to the data collection and processing practices described in this document.

12spin takes your privacy seriously. We understand that your personal data belongs to you, and we are committed to using it only for legitimate, transparent, and beneficial purposes as a user of our platform. Every decision related to data handling is made with the interests and safety of our members as the top priority.

This Privacy Policy applies to all 12spin platforms including the official website at 12spin.vu, the 12spin iOS and Android mobile app, and all related services provided under the 12spin brand. Please read this document carefully and contact us if you have any questions.

Important Note: This Privacy Policy should be read together with Terms and Conditions and the Responsible Gaming 12spin. All these documents together form the complete agreement between you and 12spin.

02Data We Collect

12spin collects various categories of personal data from members and users of our platform. This data is collected directly from you, automatically as you use the platform, or through legitimate third parties. Below is a detailed description of each category:

Data Categories Example Information Collection Methods
Identification Data Full name, MyKad/passport number, date of birth, gender Account registration & KYC
Contact Data Email address, phone number, residential address Account registration
Financial Data Bank account number, account holder name, transaction records Deposits & withdrawals
Technical Data IP address, device type, operating system, web browser Automatically during use
Activity Data Game history, betting records, bonus preferences Automatically during gameplay
Communication Data Support chat records, emails sent to us Customer support interactions

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, political views, or religious beliefs unless specifically required by applicable law.

03How We Use Your Data

The personal data we collect is used for the following purposes, all of which are lawful under applicable data protection legislation:

  • Account Management: To create, verify, and manage your Member account, including the required KYC and identity verification processes.
  • Transaction Processing: To process deposits, withdrawals, and any other financial transactions you carry out on our platform securely and accurately.
  • Service Provision: To give you access to all games, platform features, bonuses, and promotions you are entitled to as a 12spin member.
  • Service Communications: To send important notifications relating to your account, security, transactions, or changes to our Privacy Policy and Terms & Conditions.
  • Marketing Communications: To send information about promotions, bonus offers, and new features — only to members who have consented to receive marketing communications. You may withdraw this consent at any time.
  • Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, or platform abuse through behavioural pattern analysis and transaction data.
  • Legal Compliance: To comply with legal obligations, regulatory authority requirements, and court orders applicable to the operations of the 12spin platform.
  • Platform Improvements: To analyse usage patterns in aggregate and anonymised form to improve our platform's design, performance, and user experience.

Marketing Consent: We will not send you any marketing communications without your prior consent. During registration, you will be given the option to accept or decline marketing communications. This preference can be changed at any time through your account settings or by contacting our support team.

04Disclosure to Third Parties

12spin does not sell your personal data. However, in operating our platform, we need to share certain data with trusted third parties in the following circumstances:

  • Payment Service Provider: Information required to process your transactions is shared with payment service providers such as FPX, DuitNow, and supported e-wallet providers. All such providers are bound by strict confidentiality agreements and PCI-DSS compliance.
  • Game Provider: Technical data required to deliver a seamless gaming experience is shared with independently registered and audited game software providers.
  • KYC Service Provider: Identity information is shared with licensed third-party identity verification platforms to ensure a secure and efficient KYC process.
  • Legal Authority: We may be required to disclose your data to government authorities, law enforcement agencies, or courts upon a lawful request under applicable law.
  • Business Transfer: In the event of a merger, acquisition, or sale of 12spin assets, member personal data may be transferred to the new entity, provided that entity maintains an equivalent or higher standard of data protection.

All third parties receiving personal data from 12spin are required to comply with data protection requirements equivalent to our own standards. We conduct periodic reviews of all service partners to ensure ongoing compliance.

05Cookies & Tracking Technologies

12spin uses cookies and similar tracking technologies to enhance the user experience and analyse our platform's performance. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification, bonus basket management, and account security. These cookies cannot be disabled.
  • Performance Cookies: To collect information about how you use the platform (pages visited, time spent, errors encountered) to help us improve our services. This data is collected in aggregate and does not identify you individually.
  • Functional Cookies: To save your preferences such as language, display settings, and game choices so you do not need to reconfigure them each time you log in.
  • Marketing Cookies: Used to display relevant content and offers based on your interests and activity on the platform, only with your consent.

You can manage your cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the 12spin platform.

The 12spin mobile app uses device identifiers similar to cookies for the same purposes. You can manage these permissions through the privacy settings on your iOS or Android device.

06Data Storage & Retention Period

All 12spin member personal data is stored on secure, protected servers located in data centres that comply with international industry security standards. We apply strict access controls to ensure that only authorised personnel can access member personal data.

Data retention periods depend on the category and purpose of collection:

  • Active Account Data: Retained for the duration your account is active and for the additional period required after account closure to fulfil legal obligations.
  • Financial Transaction Records: Retained for a minimum of 7 years after the transaction date to comply with applicable anti-money laundering (AML) and tax requirements.
  • KYC Documents: Retained for a minimum of 5 years after the business relationship is terminated or after the date of the last transaction, whichever is later.
  • Communication Logs: Customer support interaction records are retained for 3 years for reference and dispute resolution purposes.
  • Marketing Data: Retained until you withdraw your consent to receive marketing communications or submit a deletion request.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with your identity.

07Data Security

12spin implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, alteration, disclosure, or loss:

  • Data Encryption in Transit: All communications between your device and our servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
  • Data Encryption at Rest: Sensitive data stored in our databases is protected using military-grade AES-256 encryption.
  • Role-Based Access Control: Only specifically authorised staff may access member personal data, and every access is recorded in a comprehensive audit log.
  • Two-Factor Authentication: 2FA is available and strongly recommended for all member accounts. 12spin internal staff are required to use 2FA for all system access.
  • Real-Time Monitoring: A real-time threat detection system monitors all platform activity to identify and respond to any security threats.
  • Penetration Testing: We conduct regular penetration testing by independent cybersecurity experts to identify and remediate any system vulnerabilities.
  • Staff Security Training: All 12spin staff undergo regular cybersecurity awareness training and are bound by comprehensive confidentiality agreements.

Shared Security: While we implement comprehensive security measures, the security of your account also depends on your own actions. Please use a strong and unique password, enable 2FA, and never share your login credentials with anyone.

08Your Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold the following rights regarding your personal data held by 12spin:

Your Rights as a 12spin Member

You have full control over your personal data. The following are the rights guaranteed by 12spin to every member.

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide that copy in a readable format within 30 working days.

Right to Rectification

If any data we hold about you is inaccurate or out of date, you have the right to request prompt correction. We will update our records within a reasonable timeframe.

Right to Erasure

You may request the deletion of your personal data, subject to our legal obligations to retain certain records for periods prescribed by law.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. We will immediately cease using your data for such purposes.

Right to Data Portability

You may request your data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if needed.

Right to Restrict Processing

In certain situations, you may request that we limit how we process your data while your request or complaint is being resolved accordingly.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]

09Children's Privacy

The 12spin platform is strictly for users who are aged 18 years of age and above. We do not intentionally collect, store, or process any personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on our platform without authorisation are encouraged to contact us promptly through the available support channels.

10Links to External Sites

The 12spin platform may contain links or references to third-party websites or applications in certain contexts, such as game providers or payment services. This Privacy Policy applies solely to the 12spin platform and does not cover the privacy practices of those third-party websites or applications.

12spin is not responsible for the content, privacy policies, or practices of any third-party websites. We encourage you to read the Privacy Policy of each website you visit separately before providing any personal information to them.

11Privacy Policy Amendments

12spin reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to our services. We will notify you of any material changes through:

  • Email notifications to your registered email address.
  • In-app or on-site notifications on 12spin.
  • Update the "Last Updated" date shown at the top of this document.

Continued use of the 12spin platform after the effective date of any amendment is considered acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion before the amendment takes effect.

We recommend reviewing this Privacy Policy page periodically — at least once every six months — to ensure you are always informed of how we protect your personal data.

12Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact the 12spin Data Protection Officer (DPO) through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the 12spin platform.
  • Email: [email protected] — responses within 2 business days for general enquiries and 30 business days for personal data rights requests.
  • Mailing Address: Data Protection Department, 12spin, Official P.O. Box, Malaysia.

We are committed to handling all privacy-related enquiries and complaints thoroughly and within a reasonable timeframe. Every request will be logged and processed systematically by the responsible team.

Guaranteed Response Time: General enquiries will be responded to within 2 working days. Personal data rights requests will be resolved within 30 working days from the date the request is received. Complaints requiring further investigation will have their status communicated within 7 working days.

Trusted & Secure Platform

Join 12spin with Confidence — Your Data is Always Protected

Enjoy a safe, transparent, and responsible online gaming experience. Your privacy and security are our priority at all times.

256-bit SSL Encryption  ·  Secure KYC  ·  PDPA Compliant  ·  24/7 Support

Bahasa Melayu