12cuci Privacy Policy

1. Introduction

12cuci ("we", "us", "our") operates the online gaming platform accessible at 12cuci.one. As part of providing our Services — which include sports betting, live casino, slot games, and account management features — we necessarily collect and process personal data relating to our Members and visitors.

This Privacy Policy applies to all personal data processed by 12cuci in connection with the operation of the Platform, regardless of the device or method used to access it. It should be read alongside our Terms and Conditions and our Responsible Gaming Policy.

We are committed to handling personal data responsibly, transparently, and in compliance with applicable data protection legislation. If you have questions about this Policy or how your data is handled at 12cuci, please refer to Section 15 (Contact Us) below.

2. Data Controller

For the purposes of applicable data protection law, 12cuci is the data controller in respect of personal data collected through the Platform. As data controller, 12cuci determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

Where 12cuci engages third-party service providers to process personal data on its behalf — for example, payment processors or fraud prevention services — those providers act as data processors under contract and are bound by data processing obligations consistent with this Policy.

3. Personal Data We Collect

The categories of personal data collected and processed by 12cuci include, but are not limited to, the following:

3.1 Registration & Identity Data

• Full legal name;
• Date of birth;
• Residential address (including postcode, city, state — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya);
• Email address;
• Mobile phone number;
• Username and account credentials (passwords are stored in hashed form and are never stored in plaintext).

3.2 Verification (KYC) Data

• Government-issued photo identification (Malaysian MyKad, passport, or equivalent);
• Proof of address documentation;
• Payment method verification documents;
• Selfie or live identity check data where required for enhanced due diligence.

3.3 Financial & Transaction Data

• Deposit and withdrawal records;
• Payment method details (account numbers, eWallet identifiers — e.g., Touch 'n Go eWallet, Boost, DuitNow-registered details);
• Transaction timestamps and amounts;
• Bonus usage and wagering history.

3.4 Gaming & Betting Activity Data

• Game session records (games played, bet amounts, outcomes, timestamps);
• Sports betting activity (markets wagered, odds accepted, settlement outcomes);
• In-game behaviour and session duration data used for responsible gaming monitoring.

3.5 Technical & Device Data

• IP address and geolocation data (country and city level);
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens;
• Log files recording Platform access and errors.

3.6 Communications Data

• Records of live chat conversations with 12cuci support;
• Email correspondence with 12cuci;
• Responses to surveys, promotions, or feedback requests.

4. How We Collect Personal Data

12cuci collects personal data through the following channels:

• Directly from you — when you register an Account, complete identity verification, make a deposit, contact support, or participate in a promotion;
• Automatically — through cookies, server logs, and tracking technologies when you access and use the Platform;
• From third parties — including identity verification service providers, fraud prevention databases, payment processors, and, where applicable, publicly available sources for due diligence purposes.

5. Purposes of Data Processing

12cuci processes personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and administering your 12cuci Account, including authentication and access control.
Service Delivery	Providing gaming, betting, and associated services including processing bets, game results, and account transactions.
Payment Processing	Processing deposits and withdrawals via your nominated Malaysian payment methods and reconciling transactions.
Identity Verification	Verifying your identity and age as required by our gaming licence obligations, including KYC and AML compliance.
Fraud Prevention	Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct on the Platform.
Responsible Gaming	Monitoring gaming patterns to identify potential problem gambling behaviour and administering player protection tools.
Customer Support	Responding to your queries, resolving disputes, and providing technical assistance.
Marketing	Sending promotional communications about 12cuci offers where you have consented or where permitted by applicable law. You may opt out at any time.
Legal Compliance	Complying with regulatory obligations, responding to lawful requests from authorities, and maintaining records as required.
Platform Improvement	Analysing usage patterns and technical data to improve Platform performance, user experience, and game offerings.

6. Legal Basis for Processing

12cuci processes personal data on the following legal bases:

• Contract performance — processing necessary to fulfil our obligations under the 12cuci Terms and Conditions, including operating your Account and delivering gaming services;
• Legal obligation — processing required to comply with AML regulations, KYC requirements, gaming licence conditions, and other applicable laws;
• Legitimate interests — processing for fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics, where such interests are not overridden by your privacy rights;
• Consent — where you have given explicit consent, including for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

12cuci does not sell personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and financial institutions — to process deposits and withdrawals via Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, and other nominated methods;
• Identity verification providers — to perform KYC checks and document authentication as required by our licence;
• Fraud prevention and AML services — to screen transactions and accounts against risk databases;
• Game software providers — who may receive session and wagering data necessary to deliver and settle game outcomes;
• IT infrastructure and hosting providers — who provide the servers, databases, and cloud infrastructure on which the Platform operates;
• Customer support platforms — to facilitate live chat, email, and ticketing systems;
• Regulatory and law enforcement authorities — where we are required by law, court order, or regulatory obligation to disclose information.

8. Cookies & Tracking Technologies

12cuci uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — session management, authentication, and security. These cannot be disabled as the Platform cannot function without them.
• Functional cookies — remembering your preferences such as language settings and display options.
• Analytics cookies — measuring Platform usage, page performance, and user navigation patterns to improve the experience. Data collected is aggregated and not used to identify individual users.
• Security cookies — detecting and preventing fraudulent login attempts and suspicious access patterns.

Most browsers allow you to control or delete cookies through browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, but may affect certain functional features. 12cuci does not use advertising or retargeting cookies that track you across third-party websites.

9. Data Retention

12cuci retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfaction of legal, regulatory, accounting, and reporting obligations. Specific retention periods are as follows:

• Account and identity data — retained for the duration of your Account and for a minimum of five (5) years following Account closure, as required by AML and gaming licence regulations;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction;
• KYC documentation — retained for the period required by applicable regulatory obligations, typically five (5) years post Account closure;
• Support communications — retained for up to three (3) years from the date of the communication;
• Technical log data — retained for up to twelve (12) months for security and diagnostic purposes.

Following the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10. Data Security

12cuci implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 12cuci Platform;
• Encryption of sensitive data at rest, including identity documents and KYC records;
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need;
• Two-factor authentication available to all Members for Account login security;
• Regular security assessments, penetration testing, and vulnerability management;
• Incident response procedures for detecting, reporting, and responding to data breaches in accordance with applicable regulatory requirements.

While 12cuci takes reasonable precautions to protect personal data, no transmission over the internet is entirely secure. Players should ensure their own devices are protected with up-to-date software and should use unique, strong passwords for their 12cuci Account.

11. Your Privacy Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 12cuci:

• Right of access — you may request a copy of the personal data we hold about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (such as AML retention requirements);
• Right to restriction — you may request that we restrict processing of your data in certain circumstances;
• Right to data portability — you may request a machine-readable copy of data you have provided to us, where processing is based on consent or contract performance;
• Right to object — you may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact 12cuci support via live chat or the email address in Section 15. We will respond within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing a rights request.

12. Children & Minors

If you believe that a minor has registered an Account on 12cuci, please contact us immediately using the contact details in Section 15 so that we can investigate and take appropriate action.

13. International Data Transfers

Personal data collected by 12cuci may be stored on servers or processed by service providers located outside Malaysia. Where personal data is transferred internationally, 12cuci takes steps to ensure that appropriate safeguards are in place, including contractual protections consistent with applicable data protection law, to ensure that your data receives a standard of protection equivalent to that required under the laws applicable to 12cuci's operations.

14. Changes to This Privacy Policy

12cuci reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform operations. The date of the most recent revision is shown at the top of this page. Where changes are material, registered Members will be notified by email at least 7 days before the changes take effect. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically to remain informed about how 12cuci handles your personal data.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 12cuci, please contact us through any of the following channels:

• Live Chat — available 24/7 directly on the 12cuci Platform after login;
• Support Email: support 12cuci.one

We aim to respond to all privacy-related inquiries within five (5) business days. For formal data subject rights requests, we will confirm receipt within 72 hours and provide a substantive response within the timeframe required by applicable law.