Privacy Policy for v12ong

This Privacy Policy ("Policy") is issued by v12ong ("Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://v12ong.cam. It describes how v12ong collects, processes, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who access or use our Platform, register an account, or otherwise interact with our services.

v12ong operates primarily for the benefit of Malaysian players, processing all account transactions in Malaysian Ringgit (MYR) and supporting local payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank. The nature of our business — online gambling and financial transactions — means we handle sensitive personal and financial data, and we take that responsibility seriously.

By registering an account on v12ong or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, residential address, date of birth, payment details, device identifiers, and IP addresses.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, v12ong.
• "Data Processor" means any third party that processes Personal Data on behalf of v12ong pursuant to a written data processing agreement.
• "KYC" means Know Your Customer procedures, including identity verification, age verification, and payment method authentication, required under applicable gaming and anti-money laundering regulations.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the Processing of Personal Data.
• "Cookies" means small data files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.
• "Platform" means the v12ong website and all associated interfaces accessible at https://v12ong.cam.

v12ong acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, v12ong is responsible for determining the lawful basis for processing, ensuring appropriate technical and organisational security measures are in place, and facilitating the exercise of your data rights as set out in Section 13 of this Policy.

Where v12ong engages third-party service providers (such as payment processors, KYC verification providers, or customer support platforms) to process Personal Data on its behalf, those parties act as Data Processors and are bound by written data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

For all privacy-related enquiries, data subject requests, or complaints, please contact our Data Protection contact at: [email protected] (plain text — not a hyperlink). Our team will acknowledge all data-related requests within 5 business days.

v12ong collects the following categories of Personal Data:

v12ong collects Personal Data through the following means:

5.1 Directly from You

• When you complete the account registration form on the Platform;
• When you submit KYC verification documents;
• When you make a deposit or request a withdrawal, including providing payment method details;
• When you contact our customer support team via live chat, email, or other channels;
• When you participate in promotions, surveys, or feedback requests;
• When you update your account profile or security settings.

5.2 Automatically through Platform Use

• Technical data collected via cookies, web beacons, and similar tracking technologies when you access the Platform;
• Usage data generated by your interaction with games, betting markets, and other Platform features;
• Device and browser information collected automatically by our servers upon connection.

5.3 From Third Parties

• Identity and age verification data from KYC service providers engaged by v12ong;
• Fraud and sanctions screening data from compliance and anti-money laundering screening services;
• Payment confirmation data from payment processors facilitating your deposits and withdrawals (e.g., confirmation of Touch 'n Go eWallet or DuitNow transactions).

v12ong processes your Personal Data for the following purposes:

• Account Administration: Creating, managing, and maintaining your player account, including authentication and account recovery.
• Identity Verification (KYC): Verifying your identity, age (minimum 21 years), and payment method ownership in compliance with applicable gaming regulations and anti-money laundering obligations.
• Payment Processing: Facilitating MYR deposits and withdrawals via your selected payment method (Touch 'n Go eWallet, FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, GrabPay, Boost, or cryptocurrency).
• Regulatory Compliance: Fulfilling obligations under applicable gaming, anti-money laundering (AML), and counter-terrorism financing (CTF) regulations, including transaction monitoring and reporting.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account misuse, money laundering, and other prohibited conduct.
• Customer Support: Responding to your enquiries, complaints, and support requests in English, Bahasa Melayu, or Mandarin Chinese.
• Responsible Gambling: Implementing self-exclusion requests, deposit limits, cooling-off periods, and other responsible gambling tools; identifying players at risk of harm.
• Product Improvement: Analysing Platform usage patterns to improve game offerings, payment flows, user interface, and customer experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out — this is subject to your communication preferences set within your account.
• Legal Proceedings: Establishing, exercising, or defending legal claims and complying with court orders or regulatory directives.

v12ong relies on the following legal bases for processing Personal Data:

• Contract Performance: Processing necessary to perform the contractual relationship with you as a registered player — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML/CTF obligations, and gaming licence conditions.
• Legitimate Interests: Processing for fraud prevention, platform security, business analytics, and service improvement, where our legitimate interests are not overridden by your rights and interests.
• Consent: Where required by law (for example, certain marketing communications or non-essential cookies), processing based on your freely given and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

v12ong does not sell your Personal Data. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

8.1 Service Providers (Data Processors)

Third-party service providers who process data on v12ong's behalf under written data processing agreements, including: payment processing companies (facilitating Touch 'n Go eWallet, FPX, DuitNow, and other payment method transactions), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support platform operators, and fraud and compliance screening services.

8.2 Regulatory and Law Enforcement Authorities

Where required by applicable law, court order, regulatory direction, or where disclosure is necessary to prevent fraud or protect the safety of individuals, v12ong may disclose Personal Data to relevant regulatory authorities, gaming licensing bodies, law enforcement agencies, or financial intelligence units.

8.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your Personal Data may be transferred to a successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity.

v12ong operates under an international gaming licence, and your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Such transfers may occur to countries where our service providers are located, including data centres or KYC verification infrastructure hosted in regulated international jurisdictions.

Where Personal Data is transferred internationally, v12ong takes appropriate measures to ensure that such transfers are subject to adequate legal safeguards, including the use of standard contractual clauses, data processing agreements with binding privacy obligations, or transfers to jurisdictions with equivalent or adequate data protection standards.

v12ong retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and compliance obligations. The following general retention principles apply:

• Active Accounts: Personal Data associated with an active player account is retained for the duration of the account's existence and throughout the period of the player relationship.
• Closed Accounts: Following account closure, v12ong retains Personal Data (including KYC documents, transaction records, and account history) for a minimum period of five (5) years, in compliance with applicable anti-money laundering regulations and gaming licence conditions.
• Marketing Data: Personal Data used for marketing communications is retained until you withdraw consent or opt out, after which it will be suppressed from future communications.
• Support Communications: Live chat transcripts and support correspondence are retained for a period of 3 years to facilitate dispute resolution and quality assurance.
• Technical & Log Data: Server logs, IP records, and session data are retained for up to 24 months for security and fraud prevention purposes.

At the end of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

The v12ong Platform uses cookies and similar tracking technologies to provide core functionality, analyse usage patterns, and improve the user experience. The following categories of cookies are used:

11.1 Essential Cookies

Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the Platform.

11.2 Analytics Cookies

Used to collect aggregated, anonymised information about how players use the Platform — including pages visited, time spent, game interactions, and navigation flows — to help v12ong improve its product. These do not identify you personally.

11.3 Functional Cookies

Used to remember your preferences, such as language setting (English), display preferences, and login state, to provide a more personalised experience during your sessions on the Platform.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies in common browsers used in Malaysia (Chrome, Safari, Firefox, Edge), please consult your browser's help documentation.

v12ong implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the v12ong Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive Personal Data, including identity documents and financial information, is stored in encrypted form on secure servers.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations.
• Two-Factor Authentication: Players are encouraged and may be required to enable two-factor authentication (2FA) on their accounts to prevent unauthorised access.
• Fraud Monitoring: Automated and manual monitoring systems are in place to detect suspicious activity, including unusual login patterns, irregular transaction behaviour, and potential account takeover attempts.
• Security Audits: v12ong conducts periodic security assessments to identify and address vulnerabilities in its Platform and data processing infrastructure.

Despite these measures, no system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights, v12ong will notify affected individuals and relevant authorities in accordance with applicable data breach notification obligations.

Subject to applicable law and certain exceptions (for example, where data must be retained for legal or regulatory compliance reasons), you have the following rights in respect of your Personal Data held by v12ong:

• Right of Access: You may request a copy of the Personal Data v12ong holds about you, including information on how it is processed and to whom it has been disclosed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held about you.
• Right to Erasure: In certain circumstances, you may request deletion of your Personal Data. This right is subject to overriding legal retention obligations (see Section 10).
• Right to Restriction: You may request that v12ong restricts the processing of your Personal Data in specified circumstances, such as where you contest the accuracy of data or object to processing.
• Right to Data Portability: Where processing is based on consent or contract, you may request that Personal Data you have provided to v12ong be transferred to you or another controller in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling, and to the use of your data for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact v12ong at [email protected]. Requests will be acknowledged within 5 business days and responded to within 30 calendar days. v12ong may request proof of identity before processing your request.

The v12ong Platform is strictly intended for individuals aged 21 years and above. v12ong does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process applied to all registered accounts.

If v12ong becomes aware that Personal Data has been collected from an individual below the age of 21, that account will be immediately suspended, all associated data will be securely deleted, and any funds deposited will be returned to the original payment source. If you are a parent or legal guardian who believes your child has registered on the v12ong Platform, please contact us immediately at [email protected].

v12ong reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. The revised Policy will be published on the Platform with an updated effective date displayed at the top of the document.

Where changes are material — for example, a change to the categories of data collected, the purposes for which it is used, or your rights — v12ong will endeavour to provide advance notice to registered players via the Platform or by email to the address associated with your account. Your continued use of the Platform following publication of an updated Policy constitutes your acknowledgement of and agreement to the revised terms.

We encourage you to review this Policy periodically to remain informed of how v12ong protects your Personal Data.

For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your Personal Data, please contact the v12ong Data Protection team through the following channels:

• Live Chat: Available 24/7 on the v12ong Platform. Typical response time 3–5 minutes. Available in English, Bahasa Melayu, and Mandarin Chinese.
• Email: [email protected] — for formal data subject requests, please include "Privacy Request" in the subject line.

All privacy-related requests will be logged, acknowledged within 5 business days, and substantively responded to within 30 calendar days. For complex requests, v12ong will notify you if an extension of up to an additional 60 days is required, with an explanation of the reasons.