1Introduction
12ntc ("we", "Platform") deeply values the privacy of every user who joins our platform. As an online gaming platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (PDPA) and committed to handling your personal data responsibly.
This Privacy Policy ("Policy") applies to all users who access the 12ntc website, use our mobile app, or interact with any of the services we provide. This Policy explains:
- What personal information we collect from you.
- How and why we use that information.
- Who we may disclose your information to.
- Your rights regarding your personal data.
- The security measures we take to protect your data.
We uphold the principle that your personal data belongs to you. Our responsibility is simply to safeguard it to the best of our ability for as long as it is needed to provide you with the best possible service.
2Personal Data We Collect
We only collect data that is strictly necessary to deliver our services safely and efficiently. The categories of data we collect are as follows:
Personal Identity Information:
Contact Information:
Financial Information:
Technical & Usage Information:
3How We Collect Personal Data
Your personal data is collected through several transparent means, and in most cases, you provide it directly to us yourself:
- Account registration: When you register at 12ntc, you provide basic information such as your name, email, and phone number.
- KYC verification: During the identity verification process, you upload a copy of your MyKad and other supporting documents.
- Financial transactions: Your bank account or eWallet information is collected during the deposit and withdrawal process.
- Platform usage: Our system automatically records technical information such as IP address, device type, and gaming activity for security purposes.
- Customer support: When you contact our support team via Live Chat, Telegram, or WhatsApp, those conversations may be recorded for training and improvement purposes.
- Cookies & similar technologies: Our website uses cookies to improve the user experience and analyse usage patterns. Further details are available in Section 8.
4Personal Data Usage Purposes
Every piece of data we collect has a clear and legitimate purpose. We use your personal information for the following purposes:
- Account management: To create, verify, and manage your account on the 12ntc platform.
- Transaction processing: To process deposits, withdrawals, and all financial activities accurately and securely.
- KYC & AML compliance: To meet legal requirements relating to identity verification and anti-money laundering.
- Platform security: To detect and prevent fraud, unauthorised access, and suspicious activity in your account.
- Customer support: To provide more accurate and personalised assistance when you contact our team.
- Service improvements: To analyse usage patterns and improve our platform's features.
- Important communications: To send account-related notifications, security updates, and important changes to our terms.
- Promotions & marketing: To keep you informed about the latest offers, bonuses, and promotions — only if you have agreed to receive marketing communications.
5Data Disclosure to Third Parties
12ntc does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in certain limited and lawful circumstances, we may share your information with the following parties:
- Payment gateway providers: To process your deposit and withdrawal transactions. These providers comply with PCI-DSS standards and may not use your data for any other purpose.
- Technical service providers: Companies that help us manage our technical infrastructure, including hosting, cybersecurity, and analytics — all bound by strict confidentiality agreements.
- Game providers: Third-party gaming software companies whose products are available on our platform may receive limited game session data for technical maintenance purposes.
- Legal authorities: Where required by law, court order, or a competent enforcement authority.
- Identity verification: Licensed third-party KYC service providers who securely verify your identity documents.
In all of the above cases, we ensure that the third parties involved maintain robust privacy policies and are granted access only to data strictly necessary for their tasks — nothing more.
6Personal Data Security
Protecting your data is a responsibility we take extremely seriously. 12ntc implements multiple layers of technical and organisational security measures to ensure your personal data remains secure at all times:
- 256-bit SSL encryption: All communications between your browser and our servers are protected with military-grade SSL/TLS encryption.
- Stored data encryption: Sensitive data such as passwords and financial information is stored in encrypted form using the latest encryption algorithms.
- Layered access controls: Only staff with specific authorisation may access users' personal data, and every access is automatically logged.
- 24/7 monitoring: Our security monitoring system operates around the clock to detect any intrusion attempts or suspicious activity.
- Two-factor authentication (2FA): Our system supports 2FA to add an extra layer of security to your account.
- Periodic security audits: We conduct regular penetration testing and security audits by independent parties to identify and address any vulnerabilities.
7Data Retention Period
We only retain your personal data for as long as necessary to fulfil the purposes stated in this Policy or as required by Malaysia law. The following are our retention period guidelines:
- Active account data: Retained for the duration your account is active and for 5 years after account closure, to meet financial audit and AML compliance requirements.
- Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
- KYC Documents: Retained for 5 years after the business relationship ends, as required by anti-money laundering laws.
- Support communication logs: Retained for 2 years for training and dispute resolution purposes.
- Technical log data: Retained for 90 days for security threat detection and technical troubleshooting purposes.
Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.
8Cookies & Tracking Technologies
The 12ntc website and app use cookies and similar technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:
- Essential Cookies: Required for the platform to function correctly, including login session verification and security settings. These cookies cannot be disabled without affecting the platform's core functionality.
- Performance Cookies: Collecting anonymous information about how users interact with our platform to help us make improvements. This data is aggregated and cannot be used to identify any individual.
- Functional Cookies: Allowing the platform to remember your preferences such as language, region, and display settings to deliver a more personalised experience.
- Analytics Cookies: Used to understand traffic patterns and platform usage, helping us make data-driven decisions about necessary improvements.
9Your Rights Regarding Personal Data
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and 12ntc's internal policies, you have the following rights regarding your personal data:
- Right to access: You have the right to request a copy of the personal data we hold about you at any time.
- Right to rectification: If your data is inaccurate or incomplete, you have the right to request that we correct it.
- Right to withdraw consent: For processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time.
- Right to object to processing: In certain circumstances, you have the right to object to how we process your data.
- Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances permitted by law.
- Right to be informed: You have the right to be informed whenever there are significant changes to how we handle your personal data.
To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will process your request within 14 business days.
10Amendments to the Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to our services. When material changes are made, we will:
- Displaying a clear notice on the main page of our platform.
- Sending a notification to your registered email address at least 7 days before the changes take effect.
- Updating the "Last Updated" date at the top of this document.
Your continued use of the 12ntc platform after the effective date of any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.
11Contact Us Regarding Privacy
If you have any questions, concerns, or wish to exercise your personal data rights, please contact our privacy team through the following channels:
- Privacy Email: [email protected] — with "Privacy Inquiry" in the email subject line
- Live Chat: Available 24/7 directly on the 12ntc platform
- Telegram: Contact an official 12ntc support agent via Telegram
- WhatsApp: Instant support via the official 12ntc WhatsApp
Our privacy team is committed to responding to all enquiries within 3 business days. For cases requiring in-depth investigation, we will keep you informed of the expected timeline.