Rujukan Laman

How my12win Handles Your Personal Data

Your privacy matters to us. This policy sets out exactly what data my12win collects when you open an account, make a deposit via Touch 'n Go, GrabPay, Boost…

Data collected at registrationPayment data handled via secure railsYour right to access or delete your dataCookie and device tracking explainedContact us to update your preferences
my12win How my12win Handles Your Personal Data
HUBUNGI KAMI

Reach the my12win Privacy Team

If you have questions about how your personal data is stored or used, or if you want to request a copy, correction, or deletion of your information, our team is ready to…

Live Chat Start a live chat session directly from your account dashboard. Our team handles data access requests, account queries, and privacy concerns around the clock for accounts based in Malaysia.
Email Support Send your privacy request or data-access query to our dedicated support address. Include your registered email and the nature of your request so we can locate your records quickly and respond accurately.
Account Help Centre Our help centre contains step-by-step answers on updating personal details, managing communication preferences, and understanding what data is linked to your account and your payment history.
KESELAMATAN DATA

Data Handling Practices You Can Check

We have built our data practices around what you can actually verify — not vague assurances.

Encrypted Account Storage

All account credentials and personal details are encrypted at rest using industry-standard protocols. No member of our support team can view your password — it is stored only as a hashed value that cannot be reversed.

Payment Data Isolation

Transaction data from Touch 'n Go, GrabPay, Boost dan FPX is handled by each payment provider's own secure infrastructure. We store only the confirmation reference, not your full payment credentials or bank account details.

Cookie and Tracking Controls

We use session cookies to keep your account active and analytics cookies to understand how pages are used. You can manage non-essential cookie preferences from the account settings page at any time without affecting your ability to log in.

Data Retention Schedule

Financial transaction records are retained for the period required under applicable Malaysian law. Communication logs are kept for up to twelve months. Marketing preference data is removed as soon as you opt out or close your account.

Third-Party Disclosure Policy

We do not sell your data. We share information with third parties only where required for payment processing, fraud detection, or legal obligations. Each third-party processor is bound by a data-handling agreement consistent with this policy.

Your Right to Request Changes

You can request a copy of all personal data we hold, ask for corrections to inaccurate records, or request deletion of data we are not legally required to retain. Submit your request via live chat or email and we will action it within two business days.

Privacy Policy Questions Answered

Below are the questions our support team receives most often about how my12win collects and manages personal data. If your question is not answered here, reach out through live chat or email and we will respond directly.

We collect your name, email address, contact number, and the payment method you register with — such as Touch 'n Go or GrabPay. We also log your device type and session IP to protect your account from unauthorised access.

Each payment rail handles your transaction within its own secure environment. We receive only a confirmation reference once the transaction is complete — we do not store your full card number, e-wallet PIN, or FPX banking credentials on our servers.

Yes. Submit a data access request through live chat or email with your registered email address. We will compile the records we hold — account details, transaction references, and communication logs — and send them to you within two business days.

Financial transaction records are kept for the duration required by applicable Malaysian law. Communication logs are held for up to twelve months after your last interaction. All other personal data is deleted within thirty days of account closure unless retention is legally required.

We do not sell your data to advertisers or data brokers. Data is shared only with payment processors like Touch 'n Go, GrabPay, Boost dan FPX and fraud-prevention services, each under a formal data-processing agreement that restricts how they may use your information.

You can update your communication preferences at any time from the account settings page. Alternatively, contact our support team via email and we will remove you from marketing lists within one business day. Opting out does not affect transactional or security notifications.

Contact us immediately through live chat so our team can review recent session activity, secure your account, and initiate an investigation. We recommend also changing your password and reviewing any linked payment methods such as GrabPay or Boost without delay.