Privacy Policy
How v12bat Handles Your Data

This Privacy Policy ("Policy") describes how v12bat ("v12bat", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("User", "you", "your") of the online gaming platform operated at https://v12bat.cam ("Platform").

v12bat is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is designed to give you a clear and complete understanding of our data practices so you can make informed decisions about your use of the Platform.

By registering an Account, depositing funds, placing bets, or otherwise using any feature of the v12bat Platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not consent to these practices, please do not use the Platform and contact our support team to close your Account.

This Policy was last revised on 1 January 2026. Where changes are material, registered users will be notified by email or via an in-platform notification prior to the changes taking effect.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means v12bat, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third-party service provider engaged by v12bat to process personal data on our behalf, under a binding data processing agreement.
• "KYC Data" means identity and age verification documentation collected under Know Your Customer obligations, including government-issued identification, proof of address, and payment method verification.
• "Usage Data" means data automatically generated by your interaction with the Platform, including login timestamps, pages visited, bet history, session durations, and device identifiers.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which you accept the processing of your personal data for a defined purpose.

v12bat collects personal data across the following categories:

v12bat applies the principle of data minimisation — we collect only the data that is strictly necessary for the specific purpose identified. We do not collect sensitive personal data categories (such as racial origin, health records, or political affiliation) unless expressly required by law.

v12bat collects personal data through the following channels:

• Directly from you: Information you provide during registration, KYC submission, deposit and withdrawal forms, support enquiries, and preference settings.
• Automatically through the Platform: Technical and usage data collected via cookies, server logs, and analytics tools as you interact with the Platform. See Section 9 for full cookie details.
• From third-party KYC providers: Identity verification services that cross-reference your submitted documents against official databases to confirm authenticity and age. These providers operate under binding data processing agreements with v12bat.
• From payment processors: Transaction confirmation data from Malaysian payment providers including FPX gateways, e-wallet operators (Touch 'n Go, Boost, GrabPay), and DuitNow transfer services. Raw card or banking credentials are never transmitted to or stored by v12bat.
• From fraud prevention services: Risk scoring signals from third-party anti-fraud and AML screening tools, used to protect the integrity of the Platform and comply with financial crime prevention obligations.

Every data processing activity conducted by v12bat is grounded in one of the following lawful bases, as applicable to the specific processing purpose:

v12bat does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Service Providers (Data Processors): Trusted third-party vendors engaged to deliver Platform functionality on our behalf, including payment processors (FPX operators, e-wallet providers), KYC/identity verification services, cloud hosting providers, customer support software vendors, and analytics platforms. All processors are bound by data processing agreements requiring them to handle your data solely as instructed by v12bat.
• Legal & Regulatory Obligations: Where required by applicable law, court order, regulatory directive, or lawful request from a government authority, v12bat will disclose personal data to the extent legally mandated. We will notify you of such disclosures where legally permitted to do so.
• Anti-Money-Laundering Reporting: Suspicious transaction reports and related personal data may be shared with financial intelligence units or law enforcement as required under applicable AML legislation, without prior notice to the affected user.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of v12bat's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Users will be notified of any such transfer.
• Fraud Prevention Consortiums: Where permitted by law, v12bat may share data with industry fraud prevention databases to identify and block fraudulent patterns across multiple platforms.

All third-party recipients of v12bat user data are subject to contractual obligations requiring appropriate technical and organisational security measures consistent with their data processing role.

v12bat operates as an international platform. As a result, your personal data may be transferred to, stored in, and processed in countries outside of Malaysia. Where such transfers occur, v12bat ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections applicable in Malaysia.

Safeguards employed for international data transfers include:

• Standard Contractual Clauses (SCCs) or equivalent data transfer mechanisms incorporated into agreements with overseas processors.
• Transfer to jurisdictions with recognised adequate data protection frameworks where applicable.
• Binding corporate rules or equivalent internal policies where data is transferred within a corporate group.

If you wish to obtain information about the specific safeguards applicable to a particular international data transfer, please contact us at the details provided in Section 15.

v12bat retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account and for a minimum period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years from the date of collection or the date of account closure, whichever is later.
• Transaction Records: Financial transaction logs are retained for a minimum of seven (7) years to satisfy regulatory and tax record-keeping obligations.
• Support Communications: Retained for three (3) years from the date of the last interaction, unless a dispute or legal claim extends this period.
• Marketing Data: Retained until you withdraw consent or opt out, at which point marketing data is promptly anonymised or deleted.
• Usage & Technical Logs: Typically retained for thirteen (13) months to enable year-on-year analytical comparison, after which they are aggregated or deleted.

Upon expiry of the applicable retention period, personal data is either securely deleted, anonymised (where aggregate analytics require the data structure), or archived in a restricted-access format as required by law.

v12bat uses cookies and similar tracking technologies to ensure the Platform functions correctly, to personalise your experience, and to understand how users navigate and use the Platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable session management, security tokens, login state persistence, and shopping cart (balance) functionality. They cannot be disabled without significantly impairing Platform usability. No consent is required for these cookies.
• Functional Cookies: Remember your preferences such as language settings, display configuration, and responsible gambling tool activations. These improve the quality of your experience but are not critical to core Platform operation.
• Analytical Cookies: Collect anonymised usage statistics — such as page load times, most-visited sections, and navigation paths — to help v12bat identify improvements. These cookies do not track you across external websites.
• Security Cookies: Detect and mitigate fraudulent login attempts, bot traffic, and session hijacking. These operate in the background without affecting your visible experience.

v12bat does not use third-party advertising cookies or behavioural retargeting technologies that track you across unrelated external websites.

v12bat implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption: All data in transit is protected by TLS 1.2 or higher. Passwords are hashed using industry-standard cryptographic functions and are never stored or transmitted in plaintext. Payment card data is processed under PCI DSS compliance standards.
• Access Controls: Internal access to personal data is restricted to authorised personnel whose job functions require it. Role-based access controls and multi-factor authentication are enforced across all internal systems.
• Network Security: Platform infrastructure is protected by enterprise-grade firewalls, DDoS mitigation systems, web application firewalls (WAF), and continuous intrusion detection and prevention (IDS/IPS) monitoring.
• Data Centre Standards: Personal data is hosted in data centres that meet ISO 27001 or equivalent internationally recognised information security management standards.
• Penetration Testing: v12bat commissions regular security audits and penetration tests by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: v12bat maintains a documented data breach response procedure. In the event of a security incident involving your personal data, we will notify affected users and applicable regulators in accordance with legal requirements.

While v12bat takes all reasonable precautions, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your v12bat account and to enable two-factor authentication for an additional layer of protection.

Subject to applicable legal limitations, you hold the following rights in relation to your personal data held by v12bat:

• Right of Access: You may request a copy of all personal data v12bat holds about you, along with information about the purposes for which it is processed, the categories of data involved, and the recipients with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your Account. Many data fields can be updated directly through your Account settings without contacting support.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other lawful basis applies), or where processing is unlawful. This right is subject to our legal obligations to retain certain data — particularly KYC and transaction records required under AML law.
• Right to Restriction of Processing: You may request that v12bat restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interest at any time. v12bat will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Identity verification may be required before processing a data rights request to ensure we are responding to the correct individual.

The v12bat Platform is strictly for individuals aged 21 years and above. v12bat does not knowingly collect personal data from any person under the age of 21. We apply age verification checks at the point of registration and at periodic intervals during Account operation.

If v12bat becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation of age or any other means — the following actions will be taken immediately:

• The associated Account will be permanently suspended.
• All personal data collected will be securely deleted, except where retention is required for legal or regulatory purposes.
• Any balance associated with the Account will be handled in accordance with applicable law and our Terms & Conditions.

If you believe a person under the age of 21 has registered an Account on v12bat, please notify us immediately at [email protected] and we will investigate and take appropriate action.

v12bat may send you promotional communications including bonus offers, reload promotions, VIP programme updates, and platform news. All marketing communications are sent only to users who have opted in to receive them at the time of registration or subsequently through Account settings.

You may opt out of marketing communications at any time through the following methods:

• Clicking the "Unsubscribe" link included in any promotional email from v12bat.
• Updating your notification preferences in your Account settings under "Communication Preferences".
• Contacting our customer support team via live chat or email with a request to be removed from marketing lists.

Opting out of marketing communications will not affect your ability to use the Platform, receive transactional notifications (such as deposit confirmations, withdrawal updates, and security alerts), or receive important operational updates relating to your Account or changes to our Terms and Conditions.

v12bat reserves the right to update or amend this Privacy Policy at any time. All changes will be published on this page with an updated "Last Updated" date. Where changes are material — meaning they significantly affect how your personal data is processed or your rights in relation to that data — we will provide advance notice by email or in-platform notification, with a minimum notice period of fourteen (14) days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

If you do not agree with any material changes to this Privacy Policy, you have the right to close your Account and request deletion of your personal data (subject to legal retention obligations) by contacting us at the details provided in Section 15.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions.

If you have any questions, concerns, or requests relating to this Privacy Policy or v12bat's data processing practices, please contact our Data Protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 via the in-Platform chat widget for general privacy questions
• Response Time: We acknowledge all privacy-related correspondence within 5 business days and provide a substantive response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays (GMT+8)

For matters relating to responsible gambling, self-exclusion, or account management, please visit our Responsible Gambling page or our FAQ page for dedicated guidance.

For general legal matters including our Terms & Conditions, please refer to the Terms & Conditions page.