12huat Privacy Policy

01 Introduction

This Privacy Policy (hereinafter "Policy") is issued by 12huat ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with the 12huat website at 12huat.one and all associated services, features, games, and communications provided therein.

12huat is committed to protecting the privacy of its members and website visitors. This Policy describes the categories of personal data we collect, the purposes for which that data is used, the legal bases upon which we rely to process it, the circumstances in which we may share it with third parties, and the rights you have in relation to your personal data.

By registering a 12huat account, making a deposit, or otherwise using the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the 12huat platform. This Policy should be read together with the 12huat Terms & Conditions and Responsible Gaming Policy.

02 Personal Data We Collect

12huat collects personal data from you in the following categories, depending on the nature of your interaction with the platform:

We collect this data through account registration forms, KYC document uploads, payment processing interfaces, cookies and similar tracking technologies, and your ongoing use of the platform including game play and support interactions.

03 How We Use Your Personal Data

12huat uses your personal data for the following purposes:

• Account Management: To create, verify, and maintain your 12huat account, including authentication of your identity at login and processing of KYC documentation.
• Transaction Processing: To process deposits and withdrawals via your chosen payment method, including Touch 'n Go eWallet, Boost, Maybank, CIMB, and other supported channels in MYR.
• Service Delivery: To provide access to all 12huat games and features, including live casino, slots, sportsbook, and roulette, and to personalise your experience on the platform.
• Customer Support: To respond to your enquiries, resolve disputes, and communicate relevant account information including transaction confirmations, security alerts, and policy updates.
• Legal Compliance: To meet our obligations under anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other applicable legal or regulatory obligations.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account takeover, and other prohibited activities.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools at your request.
• Platform Improvement: To analyse usage patterns, technical performance, and player feedback in order to improve the 12huat platform, correct bugs, and introduce new features.
• Marketing Communications: To send you information about promotions, bonuses, and platform news — but only where you have consented to receive such communications. You may opt out at any time.

04 Legal Basis for Processing

Where data protection law requires 12huat to identify a legal basis for processing personal data, we rely on the following bases:

• Contract Performance: Processing necessary to fulfil the 12huat Terms & Conditions and to operate your account, including processing deposits, withdrawals, and game activity.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including AML/KYC requirements, tax reporting obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for 12huat's legitimate business interests, including fraud prevention, platform security, customer support, and internal analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your specific, freely given, and informed consent — primarily for the sending of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 Sharing Your Personal Data

12huat does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where necessary:

• Payment Processors: Licensed payment service providers who process deposits and withdrawals on your behalf, including eWallet operators and banking partners. These processors handle data under their own privacy obligations and PCI-DSS compliance frameworks.
• Game Software Providers: Third-party studios that supply the games available on 12huat may receive anonymised or aggregated activity data to support RNG certification, audit, and game performance analytics. No personally identifiable information is shared with game providers without your consent.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or the lawful direction of a competent regulatory or law enforcement authority, 12huat will disclose personal data as required. We will notify you of such disclosures where we are legally permitted to do so.
• Technology Service Providers: Cloud infrastructure, security, analytics, and customer support technology vendors who process data on 12huat's behalf under data processing agreements that impose equivalent data protection obligations.
• Fraud Prevention & KYC Agencies: Identity verification and fraud prevention service providers used to verify KYC documentation and detect suspicious account activity.

All third parties with whom 12huat shares personal data are required to handle that data in accordance with applicable data protection law and to implement appropriate security measures commensurate with the sensitivity of the data involved.

06 Cookies & Tracking Technologies

The 12huat platform uses cookies and similar technologies (including local storage and session identifiers) to operate and improve the platform. Cookies are small data files placed on your device that enable the platform to recognise your browser, maintain session state, and personalise your experience.

The following categories of cookies are used on 12huat:

• Essential Cookies: Strictly necessary for the operation of the platform, including session authentication, security functions, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language settings, game lobby preferences, and "Remember Me" login state to provide a more convenient experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform — which pages are visited, session duration, error rates — to help 12huat improve performance and user experience.

You may configure your browser to reject cookies or to alert you when cookies are being set. Please note that disabling essential cookies will impair your ability to use the 12huat platform. 12huat does not currently use third-party advertising cookies.

07 Data Retention

12huat retains personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your membership with 12huat and for a period of five (5) years following account closure, unless otherwise required by law.
• KYC Documentation: Retained for a minimum of five (5) years following the conclusion of the business relationship, in accordance with applicable AML regulations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction to comply with financial record-keeping requirements.
• Support Communications: Retained for two (2) years from the date of the last communication, or for as long as necessary to resolve any open dispute or complaint.
• Technical and Analytics Data: Aggregated or anonymised analytics data may be retained indefinitely; personally identifiable technical data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in a manner that prevents re-identification.

08 Your Data Protection Rights

Subject to applicable law, you may have the following rights in relation to the personal data 12huat holds about you:

• Right of Access: The right to request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: The right to request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: The right to request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is being resolved.
• Right to Data Portability: The right to receive personal data you have provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or contract performance.
• Right to Object: The right to object to processing of your personal data based on legitimate interests, including for direct marketing purposes, at any time.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the 12huat data protection team at [email protected]. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

09 Security Measures

12huat implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 12huat servers.
• Bcrypt hashing of all account passwords — 12huat staff cannot view plain-text passwords.
• Segregated storage of player funds in accounts separate from 12huat operational funds.
• Role-based access controls limiting staff access to personal data to those who require it to perform their job functions.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third parties.
• Intrusion detection systems and real-time monitoring of platform security events.
• PCI-DSS compliant payment processing infrastructure for all financial data.

Notwithstanding the above, no security system is entirely impenetrable. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 12huat will notify you and the applicable supervisory authority in accordance with our legal obligations.

10 Children's Privacy

The 12huat platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account or attempt to use the 12huat platform in any way.

If 12huat becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, any winnings or bonuses forfeited, and the data deleted in accordance with our retention procedures. If you believe that a minor has registered an account on 12huat, please contact us immediately at [email protected].

11 Changes to This Privacy Policy

12huat reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered members by email and/or by displaying a prominent notice on the platform prior to the change taking effect. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

Your continued use of the 12huat platform following notification of a change to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should close your account and cease using the platform before the revised policy takes effect.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which 12huat processes your personal data, please contact us. Our Data Protection team is reachable 24 hours a day, 7 days a week:

[email protected]

Please include "Privacy Request" in the subject line of your email, together with your registered username and a clear description of your request. We will acknowledge receipt within two (2) business days and provide a substantive response within thirty (30) days.