12 Cuci Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

12 Cuci ("we", "platform", "company") is an online casino and Sports Betting platform operator based in Malaysia. We take the privacy and security of your personal data extremely seriously and are committed to protecting it in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices.

This Privacy Policy applies to all users who access or use the 12 Cuci platform, including registered players, casual visitors, and any individual who interacts with our platform through any device or channel.

This document outlines:

• Types of personal data we collect from you
• How and why we collect your data
• How we use, store, and protect your data
• When and why we share data with third parties
• Your rights regarding your personal data
• How to contact us for privacy-related enquiries or requests

12 Cuci collects various categories of information depending on how you interact with our platform. The following are the data categories we may collect:

We do not collect sensitive data such as health information, religious beliefs, political views, or biometric information unless specifically required for identity verification purposes and with your consent.

12 Cuci collects your personal data through several different channels:

Directly from You:

• During the registration process for a new account on the 12 Cuci platform
• When you fill in your profile information or update your account details
• When making a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX online banking
• When you contact our customer support team via live chat, email, or WhatsApp
• When you submit identity verification documents (KYC) to us

Automatically:

• Through cookies and similar tracking technologies when you browse the platform
• Through server logs that record technical activity on the platform
• Through gameplay activity data generated while you play slots, live casino, or place sports bets

12 Cuci uses your personal data only for legitimate, stated purposes. The following are the primary purposes for which your data is used:

• Account Management: To create, verify, and manage your player account on the 12 Cuci platform.
• Transaction Processing: To process deposits and withdrawals via Malaysian e-wallets and FPX securely and accurately.
• Identity Verification (KYC): To verify your identity in order to meet compliance requirements and prevent fraud and money laundering.
• Service Provision: To enable you to play slots, live casino, poker, and place Sports Betting wagers within the 12 Cuci platform.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, and security breaches.
• Customer Support: To help you resolve issues, answer enquiries, and handle complaints effectively.
• Responsible Gaming: To monitor gameplay patterns and identify players who may need additional support or protection.
• Important Communications: To send system notifications, security alerts, term updates, and other important service information.
• Platform Improvements: To analyse usage patterns and continuously improve the player experience on the 12 Cuci platform.

12 Cuci does not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, there are certain situations where we may need to share your data with trusted parties, namely:

• Payment Providers: Required transaction information is shared with legitimate payment service providers such as Touch 'n Go, GrabPay, DuitNow, and the FPX network to securely process your financial transactions.
• Game Providers: Minimal technical data is shared with licensed game providers (such as Pragmatic Play and PG Soft) to ensure games function properly.
• Technology Service Providers: IT infrastructure, cybersecurity, and analytics providers that help us operate the platform. They are only permitted to use your data in accordance with our instructions.
• Legal Authorities: When required by Malaysian law, a valid court order, or the directive of a competent authority.
• Financial Crime Prevention: To relevant authorities where there is reasonable suspicion of money laundering or financial fraud involving your account.

All third parties we share data with are required to meet security and privacy standards equal to or exceeding our own. We do not permit them to use your data for any purpose other than those specified.

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is 12 Cuci's highest technical priority. We implement multiple layers of security to ensure your data is always protected:

• 256-bit SSL/TLS Encryption: All communications between your browser and 12 Cuci's servers are encrypted using the latest SSL/TLS protocols — the same standard used by Malaysia's leading banking institutions.
• Two-Factor Authentication (2FA): An additional layer of protection is available for your account via OTP verification through your registered Malaysian phone number.
• 24/7 Monitoring: Our security systems continuously monitor platform activity to detect any suspicious behaviour or unauthorised access attempts.
• Internal Access Controls: Access to players' personal data is restricted to staff who require it for their job duties only, in accordance with the "need-to-know" principle.
• Regular Data Backups: Critical data is regularly backed up to a separate secure location to ensure service continuity.

12 Cuci retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law.

• Active Account Data: For as long as your account remains active on the 12 Cuci platform.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in accordance with Malaysian financial regulatory requirements.
• KYC Verification Data: A minimum of 5 years after account closure or the end of the business relationship.
• Support Communication Logs: 2 years from the date of last interaction.
• Technical Data (Logs): 90 days for standard access logs; longer for logs related to active security investigations.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

As a 12 Cuci player based in Malaysia, you have certain rights under the Personal Data Protection Act 2010 (PDPA) with respect to your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right to Access: You have the right to access the personal data we hold about you and to obtain a copy of it.
• Right to Rectification: You have the right to request correction of any data that is inaccurate, incomplete, or out of date.
• Right to Withdraw Consent: Where our processing of your data is based on your consent, you have the right to withdraw that consent at any time.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that we restrict how we process your data.

To exercise any of these rights, please contact the 12 cuci customer support team via email at support@12cuci.click or through the live chat on the platform. We will process your request within 14 business days. We may need to verify your identity before doing so.

The 12 Cuci platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children or individuals under the age of 18.

All account applicants are required to confirm they are 18 years of age or older at the point of registration. 12 Cuci reserves the right to request age verification at any time via valid identification documents.

12 Cuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological requirements, applicable laws, or business needs. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page
• A clear notice is displayed on the 12 Cuci platform homepage
• Sending email notifications to all registered players for changes that significantly affect their privacy rights

We encourage you to review this Privacy Policy periodically. Your continued use of the 12 Cuci platform after any changes are published will be considered acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 12 Cuci handles your personal data, please do not hesitate to get in touch. Our team is available 24 hours a day, 7 days a week.

• Privacy Email: privacy@12cuci.click
• General Support Email: support@12cuci.click
• Live Chat: Available on the 12 Cuci platform, with an average response time of under 3 minutes

For formal complaints regarding personal data protection in Malaysia, you may also contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my. However, we always encourage you to reach out to us first so we can resolve any issues directly and more quickly.