Privacy Policy — v12my

01 Introduction

This Privacy Policy ("Policy") is issued by v12my ("we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to users ("you", "Player") of the v12my online gaming platform accessible at https://v12my.cam and all associated mobile-optimised interfaces and services.

v12my is committed to protecting the privacy of all players across Malaysia — including those accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. This Policy is designed to comply with applicable data protection legislation and international best practices in player data governance.

By registering an account with v12my or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

02 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on personal data, whether automated or manual, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — v12my, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of v12my under a data processing agreement.
• "Sensitive Data" — a subset of personal data warranting heightened protection, such as financial account details, identification documents, and data revealing health or vulnerability status.
• "Cookies" — small text files placed on your device when you access the Platform, used to store session information, preferences, and analytical data.

03 Data We Collect

v12my collects the following categories of personal data from Players, depending on the nature of the interaction:

04 How We Collect Your Data

v12my collects personal data through the following channels:

• Direct Submission — data you provide voluntarily during account registration, KYC verification, deposit or withdrawal requests, and when you contact our support team.
• Automated Technical Collection — data collected automatically when you interact with the Platform, including IP addresses, device identifiers, browser data, and usage logs via cookies and similar tracking technologies.
• Payment Processing Partners — transactional data received from Malaysian payment providers including DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay when you make deposits or withdrawals.
• Identity Verification Services — data received from third-party KYC and anti-fraud service providers used to verify the identity and eligibility of Players.
• Publicly Available Sources — in limited circumstances, data from publicly available sources may be used to supplement identity verification or fraud prevention activities.

05 How We Use Your Data

v12my uses the personal data it collects for the following purposes:

1. Account Management — creating, maintaining, and administering your v12my Account, including processing login credentials and managing account settings.
2. Transaction Processing — facilitating deposits and withdrawals via your chosen Malaysian payment method, including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency channels.
3. Identity & Age Verification (KYC) — verifying that you are who you claim to be and that you meet the minimum age requirement of 21 years to access the Platform.
4. Regulatory Compliance — meeting our obligations under applicable gaming, anti-money laundering (AML), and counter-terrorism financing (CTF) regulations.
5. Fraud Detection & Prevention — monitoring account activity to detect and prevent fraudulent transactions, bonus abuse, and other prohibited conduct.
6. Platform Improvement — analysing usage patterns to enhance the performance, functionality, and user experience of the Platform for Malaysian players.
7. Responsible Gambling — monitoring gameplay patterns to identify signs of problem gambling behaviour and to apply responsible gambling tools where appropriate.
8. Marketing Communications — sending promotional offers, bonus notifications, and platform updates where you have provided explicit consent. You may withdraw this consent at any time.
9. Customer Support — responding to your enquiries, resolving disputes, and providing assistance through our 24/7 support channels.

06 Legal Basis for Processing

v12my processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity — processing required to perform the contract between you and v12my, including account operation, transaction processing, and customer support.
• Legal Obligation — processing required to comply with applicable laws, including AML, KYC, and gaming regulatory requirements.
• Legitimate Interests — processing necessary for the legitimate interests of v12my, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your privacy rights.
• Consent — processing based on your freely given, specific, and informed consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

v12my does not sell, rent, or trade your personal data to third parties for commercial purposes under any circumstances. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Service Providers — Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow / FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank, solely for the purpose of processing your financial transactions.
• KYC & Identity Verification Providers — third-party verification services engaged to confirm your identity and age eligibility.
• Fraud Prevention & AML Screening Services — service providers that assist v12my in meeting its anti-money laundering and fraud prevention obligations.
• IT Infrastructure & Hosting Providers — data centre and cloud service providers that host the v12my Platform and associated data under strict confidentiality agreements.
• Gaming Software Providers — where necessary, limited technical data may be shared with game content providers to facilitate gameplay and RNG certification audits.
• Regulatory & Law Enforcement Authorities — we may disclose personal data where required by applicable law, court order, or a legitimate request from a competent authority.

08 Data Retention

v12my retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account Data — retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AML and gaming regulations.
• Transaction Records — retained for a minimum of seven (7) years from the date of transaction in compliance with financial record-keeping obligations.
• KYC Documents — retained for the duration of your account and for five (5) years post-closure.
• Support Communications — retained for up to three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Preferences — retained until you withdraw consent or request deletion, after which opt-out records are maintained for compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

09 Cookies & Tracking Technologies

v12my uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies — required for the Platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled without impairing basic functionality.
• Performance & Analytics Cookies — used to collect anonymised data about how Players interact with the Platform, enabling us to identify areas for improvement. No personally identifiable information is included in this data.
• Functionality Cookies — used to remember your preferences, such as language settings and display configurations, to personalise your experience.
• Marketing Cookies — used only where you have provided explicit consent to receive targeted promotional content. These cookies track interaction with promotional materials to measure campaign effectiveness.

You may manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. v12my does not use third-party cookies for cross-site tracking.

10 Your Rights as a Data Subject

As a user of v12my, you have the following rights in relation to your personal data. These rights may be exercised free of charge by contacting our Data Protection Officer as described in Clause 15:

• Right of Access — you have the right to request a copy of the personal data v12my holds about you, along with information about how it is being processed.
• Right to Rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten") — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our overriding legal retention obligations.
• Right to Restriction of Processing — you may request that we limit our processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability — where processing is based on consent or contract, you may request that we provide your personal data in a commonly used, machine-readable format.
• Right to Object — you have the right to object to processing based on legitimate interests, and to processing for direct marketing purposes at any time.
• Right to Withdraw Consent — where processing is based on consent (such as for marketing communications), you may withdraw that consent at any time without penalty.

11 Data Security

v12my implements technical and organisational security measures commensurate with the risk profile of the personal data we process. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the v12my Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that only authorised personnel may access player data, strictly on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent specialists.
• Multi-factor authentication requirements for internal administrative access to player data systems.
• Automated anomaly detection systems to identify and respond to potential data breaches in real time.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, v12my will notify affected Players without undue delay and will take all reasonable steps to contain and remediate the breach.

12 Protection of Minors

v12my is strictly an adults-only platform intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals below this age threshold.

Where v12my has reasonable grounds to believe that a Player is under 21 years of age, the relevant Account will be suspended immediately pending age verification. Any deposits made during the period of suspected underage access may be withheld pending investigation and may be returned to the original payment source.

If you believe that a minor has registered an Account with v12my, please contact us immediately at [email protected] so that we can take appropriate action.

13 International Data Transfers

Some of the third-party service providers used by v12my may process personal data outside of Malaysia. Where personal data is transferred internationally, v12my ensures that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that impose equivalent data protection standards on receiving parties.
• Transfers only to jurisdictions that maintain adequate data protection frameworks.
• Regular review of international data transfer arrangements to ensure ongoing compliance.

By using the v12my Platform, you acknowledge that your personal data may be processed in locations outside Malaysia as part of the Platform's operational infrastructure, subject to the safeguards described above.

14 Amendments to This Policy

v12my reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Where changes are material, we will notify registered Players by email or via a prominent in-platform notification at least seven (7) days prior to the changes taking effect.

The date displayed in the "Last Updated" header at the top of this Policy reflects the version currently in force. Your continued use of the v12my Platform following any update constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

15 Contact Us & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by v12my, please contact our team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

To exercise any of your data rights described in Clause 10, please contact us at the above address with sufficient detail to allow us to identify your account and process your request. Identity verification will be required before any data is disclosed, modified, or deleted.

For responsible gambling-related concerns, including self-exclusion requests and deposit limit settings, please refer to our Responsible Gambling page.