At 12b, we take your privacy seriously. This document explains clearly and honestly what data we collect, why we need it, how it is used and how you can control your own information. We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA).
By using the 12b, you agree to the collection and use of information as described in this Privacy Policy. We never sell your personal data to any third party.
Six core principles that guide how we handle your personal data every day
All data in transit between your device and the 12b protected by bank-grade 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Sensitive data such as passwords is stored in an irreversible hashed format.
12b has never and will never sell, rent or share your personal data with advertisers, data brokers or any commercial third party. Your data belongs to you, and we only use it for the purposes stated in this policy.
You may review, amend and request the deletion of your personal data at any time through your account settings or by contacting us. These rights are guaranteed under Malaysia's PDPA 2010 and we respect them fully.
All data collection, storage and usage practices at 12b comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We have an appointed Data Protection Officer to ensure ongoing compliance.
12b only collects data that is strictly necessary to provide our services to you. We do not collect irrelevant or excessive information. The principle of "minimum necessary data" is at the core of how we operate.
In the event of any security incident involving your personal data, 12b committed to notifying you and the relevant authorities within the timeframes required by law — and sooner than required wherever possible.
This Privacy Policy explains how 12b ("we", "platform" or "Company") collect, use, store and protect the personal information you provide or that we gather when you use the website, mobile app and all services operating under the 12b.cash domain.
This document is effective from 1 January 2026 and applies to all users of the platform 12b — including visitors who have not yet registered, registered members, and former members whose accounts are still within the data retention period. By using any part of our platform, you agree to the terms of this Privacy Policy.
12b collects personal data through three main channels: data you provide directly, data collected automatically while you use the platform, and data we receive from legitimate third parties.
In certain circumstances, 12b may receive data about you from legitimate third parties including: identity verification service providers that assist with the KYC process, payment gateway providers such as FPX and e-wallet processors that validate your transactions, and regulatory bodies or law enforcement agencies where required by law.
12b uses your personal data for the following purposes, each with a valid legal basis:
| Purpose of Use | Legal Basis | Description |
|---|---|---|
| Registration & Account Management | Contract | Creating and maintaining your account, processing logins and managing account settings. |
| Transaction Processing | Contract | Processing deposits (TNG, GrabPay, DuitNow, FPX) and withdrawals securely and accurately. |
| Identity Verification (KYC) | Legal Obligations | Complying with anti-money laundering (AML) requirements and age verification obligations under Malaysian law. |
| Customer Support | Contract | Resolving enquiries, complaints and technical issues that you report to our team. |
| Security & Fraud Prevention | Legitimate Interest | Detecting and preventing fraud, money laundering, multiple accounts and unauthorised access. |
| Legal Compliance | Legal Obligations | Fulfilling reporting obligations to the relevant authorities and regulatory bodies. |
| Direct Marketing | Consent | Sending offers, bonuses and news updates via email or SMS — only where you have given your consent, and you may unsubscribe at any time. |
| Responsible Gaming | Public Interest | Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support. |
*12b will not use your personal data for any purpose other than those stated above without first obtaining your renewed consent.
12b does not sell your personal data to anyone. However, in operating the platform, we need to share certain data with a limited and carefully selected set of third-party categories:
We engage third-party service providers who act solely on our instructions for specific purposes:
All of these service providers are bound by strict data protection agreements and may only use your data for the specific purposes we authorise.
12b may be required to disclose your data to Malaysian government authorities, law enforcement agencies, or regulatory bodies when mandated by law or court order. In such situations, we will notify you where permitted by law to do so.
12b implements multiple layers of technical and organisational safeguards to protect your personal data from unauthorised access, loss, destruction or accidental disclosure:
All communications between your browser or app and the 12b is encrypted using TLS 1.3 with a 256-bit SSL certificate. This means that even if someone manages to intercept your data traffic, they will not be able to read it.
Data is stored in enterprise-grade data centres with strict physical access controls, intrusion detection systems and round-the-clock 24/7 monitoring. Data backups are performed regularly and stored securely in separate locations.
Your account password is never stored in plain text. We use a robust hashing algorithm (bcrypt) with a random salt. Even in the event of a data breach, your original password cannot be recovered from the hash.
Staff 12b can only access the data required for their specific role (least privilege principle). All access to personal data is logged and audited. Staff undergo regular data protection training and are bound by confidentiality agreements.
You are encouraged to enable two-factor authentication in your account settings 12b you. 2FA adds an extra layer of protection — even if someone knows your password, they still cannot log in without the verification code sent to your phone.
Platform 12b undergoes penetration testing and independent security audits on a regular basis. Any vulnerabilities identified are addressed promptly in accordance with established incident response procedures.
12b retains your personal data only for as long as necessary for the stated purposes or as required by law:
Once the relevant retention period expires, data is securely deleted using methods that ensure it cannot be recovered. If you request account deletion and there are no legal holds, your data will be deleted within 30 days.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 12b:
You have the right to know whether 12b store your personal data and to request a copy of that data. We will provide a copy within 21 days of receiving a valid request.
If the personal data we hold about you is inaccurate, incomplete or out of date, you have the right to request a correction. You can update your basic information directly from your account settings.
For data processed based on your consent — such as marketing communications — you may withdraw that consent at any time through your account notification settings or by contacting us.
In certain situations provided for under the PDPA, you may request 12b to restrict how we process your data while a dispute or investigation is ongoing.
You have the right to object to the processing of your data carried out on the basis of our legitimate interests, including processing for direct marketing purposes that you no longer wish to receive.
If you are not satisfied with the way 12b handles your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
To submit any request relating to the above rights, please contact the Data Protection Officer 12b via email at support@12b.cash with the subject line "PDPA Request". We will respond to all valid requests within 21 working days. In complex cases, this period may be extended with notice to you.
12b uses cookies and similar tracking technologies to ensure the platform functions correctly and to improve your experience. Below are the types of cookies we use:
These cookies are essential for the platform to 12b are functional and cannot be disabled in our system. These include the login session cookie that keeps you signed in, security tokens that protect against CSRF attacks, and your language preference cookie. Without these cookies, the platform will not function.
Analytics cookies help us understand how players use the platform — which pages are visited most often, where users encounter difficulties and how navigation can be improved. This data is collected in aggregate and is not used to directly identify any individual.
These cookies enable 12b remember your preferences — such as favourite games, display settings, and communication preferences — to deliver a more personalised experience.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to view, delete and block cookies from specific websites. Please note, however, that disabling essential cookies will affect the functionality of the 12b.
In the course of its operations, 12b may need to transfer your personal data outside of Malaysia — for example, to international game software providers or cloud infrastructure operating across multiple regions. When such transfers occur, 12b to ensure that:
If you have any questions about cross-border data transfers or would like to know more about the safeguards we have in place, please contact us at support@12b.cash.
Services 12b is strictly for individuals aged 18 and above. We do not knowingly collect, store or process personal data from individuals under the age of 18.
If we discover that personal data belonging to a minor has been collected without our knowledge — for example, through a child using the platform via an adult's account — we will take immediate action to delete that data and close the account in question.
Parents and guardians are required to take appropriate measures to prevent children from accessing online betting platforms, including 12b. If you find that your child has accessed this platform, please contact us immediately at support@12b.cash and we will respond promptly.
12b reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or changes to the services we offer.
When material amendments are made — meaning changes that could significantly affect your privacy rights — we will notify you through:
The "Updated" date at the top of this page always reflects the date of the most recent amendment. You are responsible for reviewing this page periodically. Continued use of the platform after the effective date of any amendment will be considered acceptance of the updated Privacy Policy.
If you do not agree with the amendments made, you have the right to close your account before the changes take effect. Please contact support@12b.cash for assistance with account closure.
For any enquiries, requests or concerns regarding this Privacy Policy or the way 12b handling your personal data, please contact us through the following channels:
Related Reading: This Privacy Policy should be read together with Terms & Conditions and pages Responsible Gaming ours for a full understanding of how 12b operate and protect your interests as a player.
When you register an account on any online betting platform, including 12b, you are entrusting us with fairly sensitive information — your MyKad number, bank or e-wallet details, usage patterns and more. We do not take that trust lightly. That is why the Privacy Policy 12b is not merely a document written to satisfy licensing requirements — it is a genuine roadmap of how we handle your information in day-to-day operations.
There is a significant difference between platforms that has privacy policy and platform that following their privacy policies. At 12b, we conduct regular internal audits to ensure that actual practices align with what is set out in this document. Staff undergo annual PDPA training and access to player data is restricted to those who genuinely require it for their role.
The Personal Data Protection Act 2010 (PDPA) is Malaysia's primary legislation governing how companies handle personal data. While many Malaysian internet users may have heard of the PDPA, few are aware of the specific rights it grants. As a member 12b, you have the right to request a copy of the data we hold about you, request a correction if any data is inaccurate, and in certain circumstances, request the deletion of your data.
In the context of an online betting platform, PDPA also means that 12b cannot use your data for purposes you have not consented to without notifying you first. If you have signed up to receive promotions via SMS or email, you can unsubscribe at any time with a single click in your account settings — no need to contact support, no hassle.
When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX at 12b, your transaction passes through multiple layers of security. First, the connection between your app or browser and our servers is encrypted. Transaction details are then submitted to the payment processor via a secure API — 12b does not store your bank account number or full card number on any of our servers.
Malaysian e-wallet providers such as Touch 'n Go eWallet and GrabPay have robust security systems of their own — including token encryption, which means every transaction uses a temporary token rather than your actual account number. This means that even in the highly unlikely scenario where data 12b compromised, an attacker will not gain access to your actual e-wallet or bank account details.
Data security is a shared responsibility. 12b implements all the technical measures outlined in this policy, but there are things that only you can control. Use a unique password for your account 12b yours — do not reuse the same password as your email or social media accounts. Enable two-factor authentication (2FA) in your account settings. Log out whenever you use a shared device. And never share your login credentials with anyone, even if they claim to be a member of 12b — our support team will never ask for your password.
If you receive an email or message that appears to be from 12b but asks you to click a link to "verify your account" or "claim a bonus", exercise caution — this may be a phishing attempt. Official emails 12b always come from the @12b.cash domain. If you're ever unsure, log in directly at 12b.cash — don't click any links in the email — and check your account notifications.
Questions About Data Privacy? Our team is here to help. Reach us via live chat within your account 12b yours or email support@12b.cash with the subject line "Privacy Enquiry". For your PDPA rights, use the subject line "PDPA Request". Please also read Terms & Conditions and pages Responsible Gaming ours for the full picture.
Frequently asked questions about how 12b manages the personal data of Malaysian players
A secure platform starts with trust. 12b comply with PDPA 2010, use 256-bit SSL encryption and never sell your data. Register for free today and enjoy a safe, responsible betting experience.
*For users aged 18 and above. Play responsibly.