Rujukan Laman

How We Handle Your Account Data and Privacy

When you open an account with win12u, we collect and process personal information to verify your identity, manage deposits via Touch 'n Go, GrabPay, Boost and FPX, and…

Account SecurityData ProtectionWithdrawal Verification
win12u How We Handle Your Account Data and Privacy
POLICY CONTACT

How to Reach Us About Privacy or Account Matters

If you have questions about how we handle your data, want to request a copy of your information, or need to update your details, contact us through the channels below. Our support team responds to privacy and account inquiries within 48 hours during business days.

Team online

Live Chat

Open the live chat widget on any page of the site and select the privacy or account topic. Our agents are online daily from 10:00 to 22:00 Malaysia time. You'll receive immediate assistance for account verification, data access requests and policy questions. Chat transcripts are stored for 90 days and then deleted.

Email

Send your inquiry to the support email address displayed in your account dashboard. Include your registered email and account ID so we can verify your identity before discussing personal data. We respond to written requests within two business days and provide detailed answers about data collection, retention periods and your rights under local law.

Account Settings

Log in and visit the Privacy section under Account Settings to view the categories of data we hold, download a copy of your transaction history, or request account closure. Closure requests are processed within seven days; your remaining balance is returned via your registered payment method, and all personal data is anonymized or deleted according to our retention schedule.

DATA GOVERNANCE

How We Secure and Manage Your Information

We built our data practices around transparency and control. Below you'll see how we collect, store and protect your account information, what we do with cookies, how long we keep records, and…

Data We Collect

We gather your name, email, phone number, payment details and device identifiers when you register. During sessions we log game activity, deposit and withdrawal timestamps, and IP addresses to prevent fraud and resolve disputes. We do not collect sensitive personal data beyond what is necessary for account verification and payment processing, and we never sell your information to third parties.

Cookie Use

We place session cookies to keep you logged in and preference cookies to remember your language and display settings. Analytics cookies track page views and feature usage so we can improve the lobby layout and game recommendations. You can disable non-essential cookies in your browser; session cookies are required for login and cannot be turned off without losing access to your account.

Encryption & Storage

All personal data is encrypted in transit using TLS and at rest using AES-256. Payment credentials are tokenized by our payment processors; we never store full card numbers or bank account details on our servers. Account databases are hosted in secure data centers with restricted physical and network access, audited quarterly by independent security firms.

Retention Period

Active account records are kept for the duration of your membership plus seven years after closure, as required by anti-money-laundering and tax regulations in our operating jurisdictions. Session logs and game history are retained for 18 months, after which they are permanently deleted. Marketing preferences and cookie data are discarded immediately when you withdraw consent or close your account.

Your Rights

You may request a copy of your data, ask us to correct errors, or withdraw consent for marketing communications at any time through the Account Settings panel or by contacting support. Where local law grants the right to deletion, we will anonymize or remove your personal information within 30 days of your request, subject to legal retention obligations for financial records.

Policy Updates

We review and update this policy annually or whenever regulations change. When material changes occur, we notify you via email and display a banner on your account dashboard for 14 days. Continued use of the platform after the notice period constitutes acceptance of the revised terms. Previous versions are archived and available on request.

Common Questions About Your Data and Privacy

Below are the questions we hear most often about how we handle personal information, account security and your rights under this policy. If you don't see your question here, contact support through the channels listed above.

We collect your full name, email address, phone number, date of birth, residential address and payment details for Touch 'n Go, GrabPay, Boost or FPX. This information verifies your identity, processes deposits and withdrawals, and ensures we comply with local anti-money-laundering regulations. Device and IP data are logged to prevent unauthorized access.

Session cookies keep you logged in; preference cookies remember your language and layout choices; analytics cookies track page views so we can improve the lobby. You can disable analytics and preference cookies in your browser settings, but session cookies are required for login. We do not use third-party advertising trackers on our site.

Yes. Log in, visit Account Settings, and select the Privacy section. Click 'Download My Data' to receive a JSON file containing your registration details, transaction history, game logs and cookie preferences. The download is available immediately; no support ticket is required. Contact support if you need additional details not included in the export.

Account records are retained for seven years after closure to meet financial and legal obligations in our operating jurisdictions. Session logs and game history are deleted after 18 months. Marketing preferences and cookie data are discarded immediately when you close your account or withdraw consent. Anonymized aggregate data may be retained for internal analytics indefinitely.

No. When you deposit via Touch 'n Go, GrabPay, Boost or FPX, our payment processors tokenize your credentials. We store only the token and the last four digits of your account identifier. Full payment details never touch our servers, and we cannot reconstruct them from the token. Withdrawals are sent to the same tokenized destination you used for deposit.

We share personal information only with payment processors to handle deposits and withdrawals, identity verification services to confirm your details during registration, and cloud infrastructure providers who host our databases under strict confidentiality agreements. We do not sell, rent or share your data with advertisers, data brokers or unrelated third parties. Law enforcement requests are honored only when accompanied by valid legal orders.

Log in and visit Account Settings to change your email, phone number or address. For data deletion, contact support and request account closure. We will anonymize or delete your personal data within 30 days, except for records we are legally required to retain for anti-money-laundering or tax purposes. Those records are kept for seven years and then permanently deleted.