1
Introduction
12huatmy is an English-language gaming information and entertainment platform operated for adult users in Malaysia. This Privacy Policy applies to all data processing activities carried out in connection with the 12huatmy website, account functions, payment processing, customer support and marketing communications.
References to "we", "us" or "our" mean the entity responsible for operating 12huatmy. References to "you" or "user" mean any individual who accesses, registers with or otherwise interacts with 12huatmy. This policy does not apply to third-party websites, payment processors or support tools that operate under their own independent privacy arrangements.
2
Definitions
"Personal data" means any information relating to an identified or identifiable living individual. "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure and deletion. "Controller" means the party that determines the purpose and means of processing. "Processor" means a party that processes data on behalf of the controller.
"Payment method" includes Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay and digital assets such as USDT where available at the time of use. "Account" means a verified personal profile registered with 12huatmy by an eligible user aged 21 or above.
3
Data We Collect
12huatmy collects personal data at different points in the user journey. The categories of data and their typical collection contexts are described below.
| Category |
Examples |
When collected |
| Identity information |
Full name, date of birth, NRIC or passport number |
Registration and KYC verification |
| Contact information |
Email address, phone number, city or state in Malaysia |
Registration and support enquiries |
| Payment information |
Bank account details, e-wallet reference, transaction records, MYR amounts |
Deposits, withdrawals and fraud checks |
| Account activity data |
Login times, game history, bet records, bonus usage, session length |
Continuous during account use |
| Device and technical data |
IP address, browser type, operating system, device identifiers |
Automatically on access |
| Support communications |
Chat transcripts, email content, complaint records |
When you contact our support team |
| Marketing preferences |
Communication consent status, promotion opt-in or opt-out records |
Registration and account settings |
We do not intentionally collect sensitive categories of personal data such as racial origin, religious beliefs or health information unless a user volunteers such information in an unusual support context. In those cases the data is used only to address the specific query.
4
Data Processing — Purposes and Lawful Basis
12huatmy processes personal data only for defined purposes. The principal purposes and the basis on which each is carried out are described below.
- Service delivery: Creating and maintaining your 12huatmy account, processing MYR deposits and withdrawals, providing access to games and sports markets.
- Verification and compliance: Conducting identity, age, payment ownership and source-of-funds checks as required. Verifying that users are aged 21 or above before gaming access is permitted.
- Fraud and security prevention: Detecting account takeover, payment fraud, collusion, bonus abuse and prohibited activity through automated and manual review.
- Customer support: Responding to account, payment, technical and responsible-gambling enquiries submitted through live chat, email or other support channels.
- Responsible gambling management: Administering deposit limits, cooling-off periods and self-exclusion requests, and monitoring account patterns that may indicate problematic play.
- Marketing communications: Sending promotion updates, new game announcements and bonus information where you have opted in. You may withdraw consent at any time.
- Platform improvement: Analysing aggregated usage data to understand navigation patterns, improve content and optimise the mobile experience for users across Kuala Lumpur, Penang, Johor Bahru and the wider Malaysian market.
- Legal obligations: Retaining records as required by applicable anti-money-laundering, fraud-prevention and data-retention obligations relevant to the international operating context.
5
Cookies and Tracking Technologies
12huatmy uses cookies and similar technologies to maintain login sessions, remember user preferences and collect aggregate analytics data. Cookies do not personally identify you by name; they recognise your browser or device.
- Session cookies: Required to keep you logged in during a visit. These expire when the browser session ends.
- Functional cookies: Remember language, display and game preferences. These may persist across sessions.
- Analytics cookies: Collect aggregate information about pages visited, features used and error events. No individual browsing profiles are built for sale.
- Security cookies: Help detect and prevent fraudulent login attempts and session manipulation.
Most browsers allow you to block or delete cookies through settings. Blocking essential session cookies may prevent access to core 12huatmy account functions. We do not use third-party advertising cookies from unrelated commercial networks.
6
Sharing Personal Data
12huatmy does not sell personal data. We may share data with the following categories of recipients only for the purposes identified in this policy.
- Payment processors and e-wallet providers: Data necessary to process a MYR deposit or withdrawal through Maybank, CIMB, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay or digital-asset channels.
- Identity verification and fraud-prevention services: Providers conducting KYC, age or document verification checks and real-time fraud monitoring.
- Technology and hosting providers: Cloud infrastructure and software services operating under contractual data-processing obligations.
- Customer support tools: Live-chat and ticketing systems through which support agents access account and communication records.
- Regulatory and law-enforcement authorities: Where disclosure is required by applicable law, court order or a lawful regulatory request.
- Prospective business transferees: In the event of a merger, acquisition or business sale, personal data may form part of the transferred assets under appropriate confidentiality protections.
Any third party that processes data on behalf of 12huatmy is required to maintain appropriate security standards and to process data only as instructed.
7
Data Retention
Personal data is retained for the period necessary to fulfil the purpose for which it was collected and to meet applicable legal obligations. General retention principles are as follows.
- Account and identity records are retained for the duration of the active account and for a defined period after closure to support compliance, audit and legal requirements.
- Transaction and payment records are retained in accordance with anti-money-laundering, fraud-prevention and financial-record obligations relevant to the operating context.
- Support communications are retained long enough to handle follow-up queries and maintain service quality records.
- Marketing preference records are retained until consent is withdrawn and for a short period after to process the opt-out correctly.
Data that is no longer required is securely deleted or anonymised. Anonymised aggregate data may be retained indefinitely for analytics purposes.
8
User Rights
Subject to applicable law and verification requirements, you may exercise the following rights in relation to personal data that 12huatmy holds about you.
Right of access
Request a copy of the personal data 12huatmy holds about your account, transactions and communications.
Right to rectification
Ask us to correct inaccurate information. Identity documents may need to be resubmitted through the account verification channel.
Right to erasure
Request deletion of data that is no longer necessary, subject to overriding legal and compliance retention obligations.
Right to restriction
Ask us to limit processing of your data in defined circumstances, such as during a dispute about accuracy.
Right to object
Object to processing based on legitimate interests. You may withdraw marketing consent at any time through account settings or by contacting support.
Right to data portability
Where processing is automated and consent-based, request that we transfer data to you or another controller in a structured format.
To exercise any of these rights, contact the 12huatmy support team. We may need to verify your identity before responding. We aim to acknowledge requests promptly and to complete them within a reasonable period. Some requests may be declined where legal obligations, fraud-prevention requirements or self-exclusion protections make full compliance impracticable.
9
Data Security
12huatmy applies technical and organisational measures to protect personal data from unauthorised access, accidental loss, alteration and destruction. These include encrypted connections for data in transit, access controls restricting internal data visibility to staff with a defined need, and routine security reviews.
Users also have an important role in account security. You must protect your login credentials, never share passwords or one-time authentication codes through an unverified channel and report any suspected unauthorised account access to support immediately. 12huatmy will never ask for your password by email or live chat.
10
Minors and Age Verification
12huatmy is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under 21 years of age. Age verification checks are conducted during registration and may be repeated at any subsequent point.
If 12huatmy identifies or is notified that a minor has registered an account, the account will be suspended, all associated activity reviewed and personal data handled in accordance with applicable legal obligations. Users who believe a minor has created an account on 12huatmy should notify the support team promptly.
11
Changes to This Policy
12huatmy may revise this Privacy Policy to reflect changes in operations, applicable legal requirements or the services we provide. Minor clarifications may be made without separate notice; material changes will be communicated through the website, account notifications or email where contact details are available.
Continued use of 12huatmy after a revised policy takes effect constitutes acknowledgement of the update where permitted by law. If you object to a material change, you should stop using the platform and request account closure.
12
Contact Us
Privacy-related queries, data subject requests, consent withdrawals and complaints should be directed to the 12huatmy support team. The website contact email is [email protected]. Please include your account username, a brief description of the request and any relevant dates or reference numbers.
Do not include your full payment card number, bank PIN, one-time authentication code or account password in any correspondence. 12huatmy support will never ask for these details.
We aim to acknowledge all privacy enquiries and to work constructively toward a resolution. If you remain unsatisfied after engaging with the support team, you may wish to seek independent guidance on your rights under applicable privacy or data-protection legislation.
