Privacy Policy 12cuc — Personal Data Protection for Malaysian Members

12cuc is an online entertainment platform designed exclusively for adult users in Malaysia. We take our responsibility towards member privacy very seriously and are committed to processing your personal data in a transparent, fair and secure manner, in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.

This Privacy Policy applies to all personal data collected by 12cuc via:

• The official 12cuc website and all its subdomains
• Member registration and account management process
• Gaming and wagering activity on the 12cuc platform
• Financial transactions including deposits and withdrawals in Malaysian Ringgit (MYR)
• Interactions with the 12cuc customer support team
• Participation in promotions, bonuses and loyalty programmes
• Any communication between you and 12cuc

This Policy is to be read together with the Terms & Conditions and Responsible Gaming Policy 12cuc.

12cuc collects your personal data through two main channels: information you provide directly, and data collected automatically when you use our platform.

Data You Provide Directly:

• Registration Information: Username, Malaysian phone number, email address, password (stored as an encrypted hash)
• Identity Verification Information: Full name, national identity card number (MyKad), date of birth, residential address in Malaysia — collected where required for compliance purposes
• Financial Information: Bank account number, account holder name, e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) — required for processing MYR deposits and withdrawals
• Communications: The content of messages, complaints, enquiries, and feedback you submit to the 12cuc support team

Automatically Collected Data:

• Technical Data: IP address, browser type, operating system, screen resolution, device type (Android/iOS)
• Log Data: Login date and time, gaming activity, betting history, play session duration
• Cookie Data: Session information, user preferences, authentication tokens (see the Cookies Policy section)
• Usage Data: Most frequently played games, session duration, betting patterns — used to enhance the user experience

12cuc uses the personal data collected solely for the following legitimate and clearly stated purposes:

• Service Provision: To create and manage your 12cuc account, process MYR deposits and withdrawals, and enable access to slots, Live Casino, crash games and other available games
• Identity Verification: To verify that you meet the minimum age requirement of 18 years and to fulfil applicable anti-money laundering (AML) compliance requirements
• Account Security: To detect and prevent unauthorised access, fraud, automated bot activity, and other suspicious behaviour that could compromise the security of your account or MYR funds
• Customer Support: To resolve enquiries, complaints and technical issues that you report to the 12cuc team in Bahasa Malaysia or English
• Communications: To send you important notifications relating to your account, updates to our Terms & Conditions, relevant promotions, and information concerning your use of the 12cuc platform
• Legal Compliance: To fulfil the legal obligations applicable to 12cuc under Malaysian legislation, including the PDPA 2010 and related regulations
• Platform Improvements: To analyse aggregated (not individual) usage patterns in order to improve the user experience, system performance and game selection at 12cuc
• Responsible Gaming: To monitor gameplay patterns in order to identify signs of problem gambling and provide appropriate support to members who may need it

We will not use your personal data for any purpose beyond those stated above without first obtaining your consent or without a valid legal basis.

12cuc does not sell, rent or transfer your personal data to third parties for commercial or marketing purposes. However, in limited and specific circumstances, we may share your data with the following parties:

• Payment Service Provider: Payment gateway providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay receive only the minimum transaction information required to process your MYR deposits and withdrawals. These providers are subject to their own privacy policies and security standards.
• Game Software Provider: Game providers may receive the gameplay statistical data necessary to operate and verify game outcomes. This data does not include your financial information or personal identity details.
• Legal Authorities: 12cuc will disclose personal data to the relevant authorities in Malaysia when required to do so by a court order, legal writ, or official request from a Malaysian law enforcement body.
• Technical Service Providers: Cloud service and technical infrastructure providers that support the operation of the 12cuc platform are bound by strict confidentiality agreements and may only access data necessary for their specific technical functions.

12cuc implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL Encryption: All data transmitted between your browser and 12cuc's servers is encrypted using TLS/SSL 256-bit protocol
• Stored Data Encryption: Sensitive data — including banking information, MyKad numbers, and passwords — is stored in encrypted or hashed form using robust algorithms
• Layered Access Control: Access to member data within 12cuc's internal systems is strictly controlled on a need-to-know basis — only staff who require it to perform their duties are granted access
• 24/7 Security Monitoring: Our systems are continuously monitored to detect suspicious activity, intrusion attempts and security anomalies
• Regular Security Audits: 12cuc conducts regular security assessments and penetration testing to identify and patch vulnerabilities before they can be exploited
• Staff Training: All 12cuc staff who handle members' personal data receive comprehensive data protection training on a regular basis

While we take every reasonable precaution, no security system is entirely infallible. In the unlikely event of a data breach affecting your information, 12cuc is committed to notifying you and the relevant authorities within the timeframe prescribed by applicable Malaysian law.

12cuc uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core 12cuc platform functionality, including login session verification, account security, and MYR transaction processing. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Anonymised usage statistics are collected to help us understand how members interact with the platform and identify areas for improvement.
• Functional Cookies: Saves your preferences such as display language and account settings, making your 12cuc gaming experience more personalised and enjoyable.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie usage through your browser settings. However, disabling essential cookies may affect platform functionality 12cuc including the ability to log in and carry out MYR transactions. For guidance on disabling cookies in your browser, please refer to the official documentation for your browser.

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010 and a member 12cuc, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests can be submitted via email to [email protected] and will be processed within 21 business days.
• Right to Rectification: If any of your personal data is inaccurate or out of date, you have the right to request a correction. You may also update certain account details directly through your 12cuc account panel.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. However, this right is not absolute — we may need to retain certain data to fulfil legal obligations or for security purposes.
• Right to Restrict Processing: You have the right to request that we restrict how we use your personal data in certain circumstances, such as when you are disputing the accuracy of that data.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, including direct marketing. If you no longer wish to receive marketing communications from 12cuc, you may unsubscribe at any time.
• Right to Withdraw Consent: Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawing your consent does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact us by email at [email protected] by stating the right you wish to exercise along with sufficient information for us to verify your identity.

12cuc retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law.

• Active Account Data: Personal data of members with active accounts is retained for as long as the account remains active and for a reasonable period following account closure
• Financial Transaction Records: All MYR deposit and withdrawal records are retained for a minimum of 7 years in compliance with Malaysian financial regulatory requirements
• Security Logs: Access logs and security data are retained for 12 months for security incident investigation purposes
• Communication Data: Records of interactions with our support team are retained for 3 years for dispute resolution and service improvement purposes

When your personal data is no longer required, 12cuc will securely delete or destroy it using methods that ensure the data cannot be recovered or accessed again by any party.

12cuc reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or other relevant reasons. When we make material changes:

• We will display a clear notice on the 12cuc website before any changes take effect
• We will update the "Last Updated" date at the top of this Privacy Policy
• For significant changes, we will notify members via email or in-account notification
• Your continued use of the 12cuc platform after any changes take effect will be considered your acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically. The latest version is always available on the 12cuc with a clear last-updated date.

If you have any questions or concerns, or wish to exercise your privacy rights in relation to this Privacy Policy or the way 12cuc handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected] (subject: "Data Privacy Enquiry")
• Live Chat: Available on the 12cuc website 24 hours a day, 7 days a week
• WhatsApp: Number available after logging in to your account

We are committed to responding to all privacy-related enquiries within 5 business days. For formal complaints relating to personal data protection, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.

Support Team 12cuc available in both Bahasa Melayu and English, and ready to assist you with any data privacy matter with complete confidentiality and respect.