12joker Privacy Policy

1.Who We Are

12joker is the operator of the online casino and sports betting platform accessible at 12joker.win ("the Platform"). 12joker operates under international gaming authority licensing, which imposes obligations on us with respect to the lawful handling of player data, including identity verification, anti-money laundering (AML) procedures, and record-keeping.

For the purposes of this Privacy Policy, 12joker acts as the data controller in respect of personal data collected directly from players through the Platform. Where third-party service providers process data on our behalf, they act as data processors under contractual arrangements that require them to handle data in accordance with this Policy and applicable law.

Our designated contact for data privacy matters can be reached at [email protected] (plain text only — not a clickable link).

2.Personal Data We Collect

12joker collects personal data in the following categories, depending on how you interact with the Platform:

• Registration Data: Full name, date of birth, email address, mobile number, country of residence, and preferred currency. This information is collected when you create a 12joker account.
• Identity Verification Data (KYC): Government-issued identity documents (e.g., MyKad for Malaysian players, passport for international players), proof of address documents, and where required, source of funds documentation. This data is collected to comply with our licensing and AML obligations.
• Financial Data: Payment method identifiers (e.g., e-wallet account references, bank account name and last four digits), transaction history, deposit and withdrawal records. Full payment card numbers are never stored on 12joker's servers — payment processing is handled by our PCI-DSS-compliant payment partners.
• Usage Data: Login timestamps, IP addresses, device identifiers, browser type and version, operating system, pages visited, game sessions played, and bet history. This data is collected automatically through standard server logging and analytics tools.
• Communications Data: Records of live chat support conversations, support ticket content, and any emails or messages you send to 12joker. These records are retained for quality assurance and dispute resolution purposes.
• Responsible Gaming Data: Records of deposit limits, loss limits, self-exclusion elections, and cooling-off periods set by or for your account. This data is retained for compliance purposes and to prevent circumvention of protective measures.

3.How We Use Your Personal Data

12joker processes your personal data for the following purposes:

• Account Management: To create, verify, maintain, and close your 12joker account; to authenticate your identity when you log in; and to communicate account-related information to you.
• Service Delivery: To enable you to place wagers, access games, make deposits and withdrawals, and use all features of the 12joker Platform.
• Regulatory Compliance: To fulfil our obligations under our gaming licence, including age verification (21+ minimum), identity verification, AML monitoring, and suspicious activity reporting to relevant authorities where legally required.
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, cheating, money laundering, bonus abuse, and other prohibited activities on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw consent at any time by updating your communication preferences in account settings.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and develop new features — using aggregated, anonymised data wherever possible.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce player-requested limits, and to apply self-exclusion restrictions.

4.Legal Basis for Processing

12joker relies on the following legal bases for processing your personal data:

• Performance of a Contract: Processing necessary to provide the Platform services you have registered for — account management, game access, payment processing, and support.
• Legal Obligation: Processing required to comply with our gaming licence conditions, AML legislation, and other applicable regulatory requirements — including KYC verification and transaction monitoring.
• Legitimate Interests: Processing for fraud prevention, platform security, and improving the quality of our services, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

5.Data Sharing and Disclosure

12joker does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment Processors: Financial transaction data is shared with our payment partners (including e-wallet providers and banking partners facilitating Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and DuitNow transactions) to process your deposits and withdrawals.
• Identity Verification Providers: KYC documentation may be processed by third-party identity verification service providers engaged to support our compliance obligations. These providers are contractually bound to handle data securely and solely for verification purposes.
• Gaming Regulators and Law Enforcement: We will disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where we are legally required to do so — for example, pursuant to a court order or regulatory direction.
• IT and Platform Service Providers: Technical service providers (cloud hosting, CDN, security monitoring) may have access to platform data in the ordinary course of providing their services. All such providers are subject to data processing agreements.
• Game Providers: Where game studios require session data for RNG certification or dispute resolution purposes, anonymised game round data may be shared. Your name and contact details are not shared with game studios.

6.Cookies and Tracking Technologies

12joker uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies we use include:

• Strictly Necessary Cookies: Required for login sessions, security tokens, and core platform functionality. These cannot be disabled without impairing your ability to use the Platform.
• Performance Cookies: Collect anonymised usage data (page views, session duration, error rates) to help us identify and resolve performance issues.
• Functional Cookies: Remember your preferences such as language settings, last-used game category, and notification preferences.
• Analytics Cookies: Used to understand aggregate player behaviour patterns for product improvement purposes. Data is processed in anonymised or pseudonymised form.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

7.Data Retention

12joker retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention periods:

• Active Account Data: Retained for the lifetime of your account plus five (5) years following account closure, in accordance with our licensing obligations and AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial crime legislation.
• KYC Documentation: Retained for five (5) years following account closure or the completion of a business relationship, whichever is later.
• Support Communications: Retained for two (2) years from the date of each interaction, unless the subject matter of the communication is the subject of ongoing proceedings, in which case retention continues until proceedings conclude.
• Self-Exclusion Records: Retained indefinitely to prevent circumvention of exclusion requests by re-registration.

8.Your Data Protection Rights

Subject to applicable law and the limitations imposed by our regulatory obligations, you have the following rights in respect of your personal data held by 12joker:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where we no longer have a lawful basis for processing it. This right does not apply to data we are required to retain for regulatory purposes.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of your account data where processing is based on contract or consent.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 12joker support. We will respond within thirty (30) days. Identity verification may be required before processing rights requests to prevent unauthorised access to another person's data.

9.Data Security

12joker implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and 12joker's servers;
• Encryption at rest for sensitive data fields including identity documents and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Multi-factor authentication requirements for internal administrative access;
• Incident response procedures for data breach detection, containment, and notification.

No data transmission over the internet can be guaranteed to be completely secure. While we take all reasonable precautions, you use the Platform at your own risk. You are responsible for maintaining the security of your account credentials.

10.Children and Minors

The 12joker Platform is strictly restricted to individuals aged 21 years and above. 12joker does not knowingly collect personal data from anyone under this age. If we become aware that a person under 21 has provided personal data to 12joker, the relevant account will be immediately suspended, all funds will be returned to the deposit source, and the data will be deleted except to the extent retention is required for regulatory compliance.

Parents and guardians who believe a minor has accessed the Platform should contact 12joker support immediately.

11.Cross-Border Data Transfers

12joker's server infrastructure and some of our third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities or transfers to jurisdictions with adequacy decisions in place. By using the Platform, you consent to the transfer of your data as described in this section.

12.Changes to This Privacy Policy

12joker reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email and/or a prominent notice on the Platform at least seven (7) days before the amended Policy takes effect. Your continued use of the Platform after the effective date of any change constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

13.Contact Us

For any questions, concerns, or rights requests relating to this Privacy Policy or 12joker's data practices, please contact our support team:

This Privacy Policy was last reviewed and updated in June 2026. The current version supersedes all previously published versions of the 12joker Privacy Policy.