12joker | Privacy Policy and Data Protection for Players

Our Privacy Commitment

12joker's 6 Data Protection Promises to You

These are not just written terms — they are the real standards we uphold every day in handling the personal information of 12joker members.

256-bit SSL Encryption

Every exchange of data between your device and 12joker's servers is protected by 256-bit SSL encryption – the same level of security used by leading banking and financial institutions in Malaysia. No third party can intercept your information in transit.

No Data Sales

12joker has never sold, rented, or transferred your personal data to third parties for marketing or commercial purposes, and never will. Your information belongs to you — we only use it for purposes you have explicitly consented to or that are required by law.

Full Control in Your Hands

You have the right to access all personal data we hold about you, correct any inaccurate information, request deletion of your data, and withdraw processing consent at any time. We make this process straightforward and free of unnecessary barriers.

Minimum Required Access

We only collect data that is genuinely necessary to provide 12joker's services to you. This "data minimisation" principle means we do not collect information that has no bearing on our services simply because it might prove useful in the future.

Malaysian Legal Compliance

The 12joker Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that every aspect of our data collection and processing complies with the applicable local legal requirements for our platform.

Data Breach Notification

In the event of a security breach that may affect your personal data, 12joker is committed to notifying you within a reasonable timeframe via your registered email address, in accordance with applicable legal requirements.

Contents

1. Introduction
2. Data We Collect
3. How We Collect Data
4. Purposes of Data Processing
5. Legal Basis
6. Data Sharing
7. International Data Transfers
8. Data Retention Period
9. Data Security
10. Your Rights
11. Cookie Policy
12. Children's Privacy
13. Third-Party Links
14. Policy Amendments
15. Contact Us

Official Documents

12joker Full Privacy Policy

Welcome to the Privacy Policy page 12joker. This document explains in detail how we collect, use, store, protect, and in certain circumstances, share your personal information when you use the platform, website, mobile applications, and all services provided by 12joker ("Platform").

Here at 12joker understands that privacy is a serious matter. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, play live baccarat, or place a bet on your favourite badminton match, you are entrusting us with your personal information. We do not take that trust lightly.

Please read this document carefully. If you do not agree with any aspect of this Privacy Policy, please do not use the 12joker Platform. By using our Platform, you consent to the collection and use of your information as described herein.

Introduction & Data Controller

This Privacy Policy is adopted by 12joker, which is the data controller for personal information collected through the 12joker.xyz Platform. As data controller, we are responsible for ensuring that your personal information is processed in accordance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to:

All registered members of the 12joker Platform.
Visitors to 12joker.xyz who have not yet registered an account.
Individuals who contact our customer support team.
Anyone who interacts with our Platform in any capacity.

Important Note: This Privacy Policy should be read together with Terms & Conditions 12joker, which forms the entire agreement between you and our platform.

Personal Data We Collect

12joker collects various types of personal information depending on how you interact with our Platform. The following are the main categories of data we collect:

A. Identity Information

Full name as per your identity card or passport.
Date of birth and age.
Identity card number (MyKad) or passport number for KYC verification purposes.
Current residential address in Malaysia.
Images of identity documents submitted during the verification process.

B. Contact Information

Active email address.
Malaysian mobile phone number.
The username chosen for your 12joker account.

C. Financial Information

Information relating to the payment methods you use – including your Touch 'n Go eWallet or GrabPay account number, Boost, ShopeePay, DuitNow wallet details, or FPX banking details (Maybank2u / CIMB Clicks).
Records of deposit and withdrawal transactions in Malaysian Ringgit (RM).
Betting and gaming activity history on the Platform.

D. Technical Information

Your device's IP address.
Browser or mobile application type and version.
Device operating system (iOS, Android, Windows, etc.).
Cookie data and session identifiers.
Access timestamps and activity logs within the Platform.

E. Gaming Information

Complete records of all casino gaming sessions (baccarat, blackjack, roulette, jackpot slots, table games).
Records of all sports bets, including badminton, Malaysia Super League football, EPL, and live matches.
Your gaming preference settings and account configuration.

Notice: We no store credit or debit card details directly. All payment transactions are processed through licensed and certified payment providers that comply with their own industry security standards.

How We Collect Your Data

12joker collects your personal information through several channels:

Directly From You

During the account registration process on the 12joker Platform.
When you complete the identity verification (KYC) process.
When you make a deposit or submit a withdrawal request.
When you contact our customer support team via live chat or email.
When you update your profile or account settings.

Automatically During Platform Use

Gaming and betting activity records automatically generated by the system while you play.
Technical data collected through cookies, pixels, and similar tracking technologies.
Server logs recording access times, pages visited, and actions taken within the Platform.

From Third Parties

Payment service providers that process and verify your deposit and withdrawal transactions.
Third-party identity verification service providers we use for the KYC process.
Regulatory authorities or law enforcement agencies where required by law.

Purposes for Processing Your Data

12joker processes your personal information for legitimate and transparent purposes. Every piece of data we collect has a clearly defined reason:

Account Management: To create, verify, and maintain your 12joker account, including processing registration, login, and profile updates.
Service Delivery: To enable you to access all Platform features – including playing Live Casino games, placing Sports Betting wagers, claiming bonuses, and interacting with live dealers.
Financial Processing: To process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, FPX, Boost, and ShopeePay, and to securely process your withdrawal requests.
Identity Verification (KYC): To comply with anti-money laundering (AML) and counter-terrorism financing (CFT) legal requirements, which obligate us to verify the identity of every member.
Platform Security: To detect and prevent fraud, unauthorised access, system manipulation, and other unlawful activities on our Platform.
Service Communications: To send you important notifications related to your account, including transaction confirmations, security updates, and changes to our Terms or Privacy Policy.
Marketing Communications: To inform you about promotions, bonuses, and new offers from 12joker — but only if you have agreed to receive such communications.
Product Improvement: To understand usage patterns, identify technical issues, and improve the user experience on the Platform.
Legal Compliance: To comply with all legal and regulatory obligations applicable to 12joker's operations.

Legal Basis for Data Processing

Every processing of personal data by 12joker is carried out on a valid legal basis. In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, our bases for processing are:

Consent: For marketing and promotional communications, which are entirely optional, we rely on your explicit consent. You may withdraw this consent at any time.
Contract Performance: Processing necessary to deliver 12joker's services to you in accordance with the Terms & Conditions you agreed to upon registration.
Legal Obligation: Processing necessary to comply with applicable Malaysian law, including AML/CFT requirements and directives from competent authorities.
Legitimate Interests: Processing for the purposes of Platform security, fraud prevention, and service improvement, where these interests do not override your fundamental right to privacy.

              If you would like to know the specific legal basis for any particular data processing activity, you may contact us at support@12joker.xyz and we will provide a detailed explanation.
            

Data Sharing With Third Parties

12joker does not sell your personal data to anyone. We share your information only in the following limited, legitimate circumstances:

Trusted Service Providers

We share only the minimum necessary data with third-party service providers who assist us in operating the Platform, including:

Payment service providers (processing transactions via Touch 'n Go, DuitNow, GrabPay, FPX, Boost, ShopeePay).
Accredited identity verification (KYC) service providers.
Cloud and server infrastructure providers that host the Platform.
Analytics service providers that help us understand how the Platform is used.
Casino gaming and Sports Betting software providers that supply content for the 12joker Platform.

All of these third-party service providers are contractually obligated to protect your data and use it solely for the purposes we specify.

Legal Authorities

12joker will disclose your personal information to government authorities, law enforcement agencies, or regulatory bodies where required by Malaysian law or a valid court order.

Fraud Investigation

In cases of suspected fraud, money laundering, or other illegal activity, we reserve the right to share relevant information with the appropriate authorities, financial institutions, or relevant industry bodies for investigation purposes.

Warning: 12joker will never contact you to request your password, PIN, or full payment card details. If you receive any such communication claiming to be from 12joker, please report it to us immediately at support@12joker.xyz.

International Data Transfers

Some of our third-party service providers may operate or store data in countries outside Malaysia. When your data is transferred outside Malaysia, 12joker ensures that:

Transfers only take place to countries with an adequate level of data protection, or
Appropriate data transfer agreements are in place to ensure your information remains protected to a standard equivalent to Malaysia's PDPA.
Recipient service providers are contractually bound to comply with equivalent data protection requirements.

For more information about the safeguards applied to international data transfers by 12joker, please contact us at support@12joker.xyz.

Data Retention Period

12joker retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law. Our data retention guidelines are as follows:

Active Account Data: Retained for the duration of your active membership on the 12joker Platform.
Closed Account Data: Following account closure, core data is retained for a minimum of 7 years to meet AML/CFT legal requirements and the financial record-keeping obligations mandated under Malaysian law.
Financial Transaction Records: Retained for a minimum of 7 years to comply with accounting and taxation legislation.
Game Activity Records: Retained for 5 years for dispute resolution and regulatory compliance purposes.
Support Communication Logs: Retained for 3 years from the date of last communication.
Technical Data (Logs, IP): Retained for 90 days to 1 year depending on the data type.

Once the applicable retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to you.

Data Security

12joker continually invests in information security technologies and practices to protect your personal data. Our technical and organisational security measures include:

Technical Measures:

Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
At-rest encryption for sensitive data stored in our databases.
Intrusion detection (IDS) and intrusion prevention (IPS) systems operating 24/7.
Strict role-based access controls — 12joker staff may only access the data required to carry out their specific responsibilities.
Regular security testing, including independent penetration testing.
Secure data backups and a disaster recovery plan to ensure data availability.

Organisational Measures:

Mandatory data protection training for all 12joker staff who handle personal data.
Strict internal policies governing the handling of and access to members' personal data.
Non-disclosure agreements (NDAs) binding all staff and contractors.
Documented security incident response procedures that are tested on a regular basis.

While we take every reasonable precaution, no security system can be guaranteed 100% secure. We also recommend that you take your own protective measures, such as using a strong and unique password for your 12joker account and never sharing your login credentials with anyone.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as the data subject have the following rights regarding the personal information held by 12joker:

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a clear, readable format within 30 days of receiving your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Updates can be made directly through your account settings or by contacting customer support.

Right to Erasure

Under certain circumstances, you may request that we delete your personal data. Please note that this right has limitations — we may be required to retain certain data to fulfil legal obligations such as AML requirements.

Right to Withdraw Consent

You may withdraw consent for data processing at any time — for example, by unsubscribing from 12joker marketing emails. This does not affect the validity of any processing that took place prior to withdrawal.

Right to Restriction of Processing

Under certain circumstances, you have the right to request that we temporarily restrict the processing of your data while an issue is being resolved — for example, if you are disputing the accuracy of your data or objecting to how we are processing it.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, enabling you to transfer that data to another party if you wish.

          How to Submit a Data Rights Request: Send an email to support@12joker.xyz with the subject line "Privacy Rights Request", including your full name, account number, and details of your request. We aim to process all requests within 30 days. Your identity will be verified before any data is shared or deleted.
        

Data Summary

12joker Data Processing Overview

This table provides a concise overview of the data categories, their purposes of processing, and the corresponding legal bases.

Data Category	Purpose of Processing	Legal Basis	Retention Period
Identity Information	Account Registration KYC Verification	Contract & Legal	7 years after account closure
Contact Information	Account Communications Customer Support	Contract	For the duration of active account + 3 years
Financial Information	Payment Processing AML/CFT	Legal	Minimum 7 years
Gaming Records	Service Delivery Dispute Resolution	Contract & Legitimate Interests	5 years
Technical Data	Platform Security Product Improvement	Legitimate Interest	90 days – 1 year
Marketing Preferences	Promotional Communications	Consent	Until consent is withdrawn

Cookie Policy

How 12joker Uses Cookies

Cookies are small text files stored on your device when you visit the 12joker Platform. We use cookies for several different purposes, ranging from those essential to the Platform's operation to optional ones that enhance your experience.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the 12joker Platform. For guidance on managing cookies in your browser, please refer to your browser's documentation.

Children's Privacy

The 12joker Platform is an adult service that is not intended for individuals under the age of 18. We do not knowingly collect any personal information from underage children or minors. All registration applications go through a strict age verification process.

If we discover that personal information belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that information and close the relevant account. If you have reason to believe that a minor is using our Platform, please contact us immediately at support@12joker.xyz.

Third-Party Links

The 12joker Platform does not contain links to third-party websites outside the 12joker.xyz domain. However, casino game providers and payment service providers integrated with our Platform operate under their own privacy policies.

12joker is not responsible for the privacy practices of any third party. We recommend reading the privacy policy of each payment service provider you use for deposits and withdrawals, including Touch 'n Go eWallet, DuitNow, GrabPay, FPX, Boost, and ShopeePay.

Privacy Policy Amendments

12joker reserves the right to modify this Privacy Policy from time to time to reflect changes in our data processing practices, technological developments, or new legal requirements. Any material changes will be communicated to you via:

In-platform notification upon your next login.
Email to your registered email address at least 14 days before the changes take effect.
Update the "Last Updated" date at the top of this document.

Continued use of the 12joker Platform after any amendment takes effect will be considered acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

              The latest version of this Privacy Policy is always available at https://12joker.xyz/privacy-policy. The current version date is 1 January 2026.
            

Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints about how 12joker handles your personal data, or if you wish to exercise any of your data rights, please contact us:

Email: support@12joker.xyz – use the subject line "Data Privacy Enquiry" to ensure a faster response.
Live Chat: Available 24 hours a day, 7 days a week via the 12joker Platform. Average response time is under 3 minutes.

We are committed to responding to all privacy-related enquiries within 30 days. For more complex cases, we will notify you within the first 7 days that your request is being processed and provide an estimated resolution timeline.

If you are dissatisfied with how we have handled your privacy complaint after going through our internal process, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

FAQ

Frequently Asked Questions About Privacy at 12joker

12joker does not sell your personal data to anyone. We only share data in three limited situations: first, with trusted service providers who assist in operating the Platform (such as payment providers Touch 'n Go, DuitNow, GrabPay, FPX, and others) — all of whom are contractually bound to protect your data; second, when required by Malaysian law or a court order; and third, in cases of fraud or unlawful activity that require reporting to the relevant authorities. In all other circumstances, your data remains under 12joker's control.

To submit a data rights request, send an email to support@12joker.xyz with the subject line "Privacy Rights Request". Please include your full name, 12joker account ID, the type of request (access, correction, or deletion), and a brief reason for your request. We will verify your identity before processing any request. Processing time is within 30 days from the date your request is verified. Please note that the right to deletion has its limitations – data that must be retained to fulfill legal obligations, such as AML financial records, cannot be deleted upon request.

When you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, FPX (Maybank2u or CIMB Clicks), Boost, or ShopeePay, 12joker records transaction details including the deposit amount in Malaysian Ringgit (RM), the date and time of the transaction, the payment method used, and the transaction status (successful or failed). We do not store your PIN, password, or full bank account or digital wallet details — this sensitive information is processed directly by licensed payment providers and does not pass through 12joker's servers. Transaction records are retained for a minimum of 7 years to meet accounting and AML legal requirements.

Yes, you can opt out of marketing and promotional emails from 12joker at any time. Simply click the "Unsubscribe" link at the bottom of any promotional email we send, or reach out to our support team via live chat or email at support@12joker.xyz to state your preference. Once your request is received, we will stop all marketing emails within 5 business days. Please note, however, that you will continue to receive essential operational emails related to your account, such as transaction confirmations, security notices, and changes to our terms – these are necessary communications and cannot be disabled.

When you close your 12joker account, we do not immediately delete all of your data. Malaysian laws — including AML/CFT requirements and accounting provisions — obligate us to retain certain financial and identity records for a minimum of 7 years following account closure. Once this mandatory retention period ends, your data will be securely deleted or anonymised. For data not subject to mandatory retention requirements — such as personal preferences, older support history, and technical data — it will be deleted within 90 days of account closure.

View All FAQs

12joker Privacy Commitment – Summary

12joker collects only the data that is necessary, uses it for clearly defined purposes, never sells it to anyone, protects it with 256-bit SSL encryption, and gives you full control through the data rights established under Malaysia's PDPA.

To read our relevant Terms & Conditions, please visit Terms & Conditions page. For further privacy enquiries, email us at support@12joker.xyz.

Read Full Terms & Conditions

Privacy & Responsible Gaming at 12joker

Data related to your gaming activity is also used for player protection purposes. 12joker analyzes playing patterns to identify signs of problem gambling and to provide support to members who may need it.

Gaming Pattern Monitoring

Your gaming data is analysed in aggregate to identify patterns that may indicate problem gambling, enabling us to offer timely support.

Self-Exclusion Data is Protected

Your self-exclusion information is strictly confidential and accessible only by authorised support staff solely for the purpose of enforcing the exclusion.

Safe Deposit Limits

Your deposit limit settings are stored securely and cannot be changed without additional identity verification, protecting you from unintended modifications.

18 Years and Above Only

Age verification data is processed to the highest security standards, as it forms the non-negotiable foundation of our child protection measures.

Responsible Gaming Guide

🔒

Your Data is Safe at 12joker – Play with Peace of Mind

You now know how we protect your privacy. Register for free today and enjoy the best online casino experience in Malaysia with complete peace of mind.

Questions about privacy? Contact us at support@12joker.xyz | Live Chat 24/7