Privacy Policy ClubMY12 – Malaysian Player Data Protection

Clubmy12 ("we", "platform", or "clubmy12") values the trust you place in us when you register and use our services at clubmy12.com. This privacy policy is intended to give you a clear and transparent picture of our data protection practices.

This privacy policy applies to all users of the clubmy12 platform, including website visitors, registered members, and active players using our online casino, Sports Betting, slots, Live Casino, blackjack, table games, and all other features available at clubmy12.com.

We operate in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and international standards on data protection. If you have any questions about how we handle your data, please contact our data protection team at privacy@clubmy12.com.

Clubmy12 only collects data that is strictly necessary to provide safe, quality services to Malaysian players. The following are the categories of data we collect:

We do not collect sensitive data such as health information, political affiliations, or religious beliefs. All data collection is carried out with your consent, either explicitly (via registration forms) or implicitly (through your use of the platform).

Every piece of data we collect has a clear and legitimate purpose. clubmy12 uses your personal information for the following purposes:

• Account Management: Creating and managing your clubmy12 account, processing new registrations and verifying your identity through the required KYC process.
• Financial Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and securely processing withdrawals to your Malaysian bank account.
• Platform Security: Identifying and preventing fraud, money laundering, multiple accounts, and any suspicious activity that could compromise the safety of the clubmy12 player community.
• Service Communications: Sending important account notifications such as transaction confirmations, password changes, welcome bonus offers, and service updates.
• Legal Compliance: Fulfilling legal and regulatory obligations, including anti-money laundering (AML) requirements and reporting obligations set by the relevant authorities.
• Service Improvements: Analysing platform usage patterns to improve the gaming experience and introduce relevant new games such as slots, Live Casino, and Malaysia Super League football betting.
• Customer Support: Providing technical assistance and responsive 24/7 support whenever you reach our team via live chat or email.
• Marketing (with consent): Sending promotions, special offers, and updates on new games — only if you have given consent to receive marketing communications.

Clubmy12 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited circumstances in which we need to share your data with trusted parties:

• Payment Processors: Required financial data is shared with approved payment processors to facilitate transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX. All our payment processors comply with PCI-DSS security standards.
• Gaming Software Providers: Minimal game session information is shared with our gaming software providers to ensure smooth operation of slots, Live Casino, blackjack, and table games.
• Legal Authority: We will disclose your information to Malaysian government authorities or law enforcement bodies where required by law or a valid court order.
• Identity Verification Services: Required identity data is shared with approved third-party KYC service providers to verify the authenticity of your identification documents.
• Analytics Services: Anonymised and aggregated usage data may be shared with analytics platforms to help us understand overall platform usage patterns.

Every third party that receives your data is required to comply with strict data protection standards and may only use that data for the purposes specified in the confidentiality agreement in force between them and clubmy12.

Clubmy12 implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, loss, misuse or disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and clubmy12's servers is encrypted using the latest TLS 1.3 protocol. This means every financial transaction, login credential, and piece of personal data is fully protected in transit.
• Stored Data Encryption: Sensitive information such as passwords is stored using one-way hashing algorithms that cannot be reversed. We do not store your password in plain text — not even our own staff can read it.
• Two-Factor Authentication (2FA): Players can enable 2FA for an added layer of security on their accounts. We recommend all players activate this feature for maximum protection.
• 24/7 Security Monitoring: Our automated monitoring system is always active, detecting suspicious login attempts, unusual transaction activity and other potential security threats.
• Internal Access Controls: Access to players' personal data within clubmy12 is restricted to staff on a need-to-know basis. All access is logged and audited regularly.
• Regular Security Testing: The clubmy12 platform undergoes regular penetration testing and independent security audits to ensure no exploitable vulnerabilities exist.

While we take every reasonable measure to protect your data, no system can guarantee absolute 100% security. You also bear responsibility for keeping your clubmy12 account password and login credentials secure.

Clubmy12 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential Cookies (Required): These cookies are required for core clubmy12 platform functions such as login sessions, account security, and language preferences. The platform cannot function properly without them.
• Performance & Analytics Cookies: We use analytics tools to understand how players interact with our platform — which pages are visited most, how long gaming sessions last, and more. This data helps us improve the overall user experience.
• Functional Cookies: These cookies remember your preferences such as display language, account settings, and favourite game selections, so you do not have to reconfigure them each time you log in.
• Marketing Cookies (Optional): With your consent, we use these cookies to display ads and offers relevant to your interests and gaming activity on the platform.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the clubmy12 platform. For browser-specific cookie management instructions, refer to your browser's help documentation.

As a clubmy12 player based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (Malaysia's PDPA) with respect to your personal data:

To exercise any of the above rights, please submit a written request to privacy@clubmy12.com stating the right you wish to exercise and your account details. We will respond within 21 business days of receiving your request.

Clubmy12 only retains your personal data for as long as necessary to fulfil the original purpose of collection, or as required by applicable Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active and you continue using clubmy12's services, we retain all account data to ensure the platform operates smoothly.
• Financial Transaction Records: All deposit and withdrawal records are retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering (AML) legal requirements.
• Security Logs: Access logs and security activity records are retained for 2 years for the purpose of security incident investigations if required.
• Communications Data: Customer support correspondence records are retained for 3 years for reference and service quality improvement.
• Data After Account Closure: Upon account closure, we will delete or anonymise your personal data within 90 days, unless a longer retention period is required by law or an active investigation.

The clubmy12 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you believe a person under 18 has registered an account on clubmy12, please notify us immediately at support@clubmy12.com.

During registration, date of birth verification is required, and any account suspected of belonging to a minor will be investigated and closed immediately. Any data collected from confirmed underage users will be deleted from our systems without delay.

Clubmy12 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Whenever this policy is amended, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• In-platform notifications are displayed on clubmy12 to keep active players informed of important changes.
• Sending notification emails to registered players where changes are significant and affect your rights.

Continued use of the clubmy12 platform after an amendment's effective date constitutes your acceptance of the updated policy. We recommend checking this page periodically to stay informed on how we protect your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how clubmy12 handles your personal data, please contact us through the following channels:

• Data Protection Email: privacy@clubmy12.com (response within 3 business days)
• General Support Email: support@clubmy12.com
• Live Chat: Available 24/7 via the chat icon at the bottom right of the clubmy12 platform

If you are not satisfied with our response, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia which is the relevant regulatory body under the Malaysian Ministry of Communications and Digital.