Rujukan Laman

Privacy Policy: How We Handle Your Account Information

We collect only the information needed to run your account, process deposits via Touch 'n Go, GrabPay, Boost dan FPX, and keep gameplay smooth across live tables and…

Data MinimisationSecure StorageYour ControlClear Retention RulesContact Anytime
b12pp Privacy Policy: How We Handle Your Account Information
POLICY ENQUIRIES

Reach Us About Your Privacy Questions or Data Requests

If you want to see what personal information we hold, request a correction, or ask us to delete your account data, contact our privacy team through any of the channels below.

Live Chat Open the chat bubble on any page and type your question. Our team can pull your data summary on the spot, walk you through deletion steps, or escalate a formal request to our compliance officer if the change needs internal approval.
Email Support Send your data request to [email protected] with your registered email address and a brief description of what you need. Attach proof of identity if you're asking for records or deletion; we'll confirm receipt within one business day.
Account Panel Log in and navigate to Settings → Privacy & Data. You'll find a self-service export button that generates a JSON file of your profile, transaction history and gameplay stats. For deletion, tick the boxes that match your request and submit; we process it automatically if your balance is zero.
DATA SAFEGUARDS

How We Protect the Information You Share with b12pp

Every piece of personal data flows through encrypted channels, lives in access-controlled databases, and gets logged when staff retrieve it.

Encryption In Transit

Login credentials, payment instructions and session tokens travel over TLS connections. We pin certificates to prevent man-in-the-middle attacks, and our gateway rejects any client that doesn't support current cipher suites so your data stays unreadable to outside observers.

Encrypted Storage

Personal fields sit in database columns encrypted with AES-256 keys that live in a separate hardware security module. Even if someone copied our database files they'd see only ciphertext; the decryption keys never leave the HSM and require two-factor approval to retrieve.

Access Logs

Every time a staff member opens a customer record we write a timestamped entry with their employee ID and the reason code they selected. Compliance reviews these logs each quarter to spot unusual access patterns, and any unexplained lookup triggers an immediate investigation.

Cookie Policy

We set a session cookie when you log in so you don't have to re-enter your password on every page, plus a preference cookie that remembers your language choice. Both expire when you close your browser or log out. We don't use tracking pixels or third-party ad cookies on this site.

Retention Schedule

Account profiles stay live as long as you keep the account open. After closure we delete your name, email and device identifiers within ninety days, but we hold anonymised transaction totals for seven years to meet tax and audit rules. Gameplay session logs expire after two years unless tied to an open dispute.

Your Rights

You can request a copy of everything we hold, ask us to correct mistakes, or tell us to delete the account entirely. We honour requests where local law permits, and we'll explain any legal reason that stops us from erasing a particular record. Contact [email protected] or use the in-account data panel.

Common Questions About How We Handle Your Data

Players in Petaling Jaya, Klang and across Malaysia ask us how long we keep records, what happens when they close an account, and whether we share data with anyone outside b12pp. The answers below cover the questions we hear most often.

We ask for your email, mobile number and display name during registration. Payment processors share transaction status and amounts when you deposit via Touch 'n Go, GrabPay, Boost dan FPX, but we never see your wallet credentials or card numbers. Device fingerprints help us prevent duplicate accounts and detect unusual login patterns.

Personal identifiers like your name, email and device ID get deleted within ninety days of account closure. We retain anonymised transaction totals for seven years to satisfy tax and regulatory archive rules, and we hold gameplay session logs for two years unless they're part of an open dispute or compliance review.

Yes. Log into your account, go to Settings → Privacy & Data, and click the export button. You'll receive a JSON file with your profile details, deposit and withdrawal history, gameplay stats and any support tickets you opened. The export usually generates in under a minute and arrives by email if it's large.

We don't sell personal information to anyone. Payment processors see transaction amounts and status when you deposit or withdraw, and local regulators may request account records under legal orders where applicable. We don't pass data to marketing platforms, affiliate networks or ad brokers, and we send promotional messages only if you opted in during signup.

We set a session cookie when you log in so the site remembers you as you move between pages, plus a preference cookie that stores your language choice. Both expire when you close the browser or log out. You can delete them anytime through your browser settings, though you'll need to log in again and reselect your language.

Open live chat or email [email protected] with the field you want corrected and the accurate value. For email or mobile changes we send a verification code to the new address to confirm you own it. Most corrections complete within two business days; if the change affects withdrawal routing we may ask for additional proof of identity.

Yes, where local law permits. Log into Settings → Privacy & Data, tick the deletion boxes and submit your request. If your account balance is zero we process it automatically and remove identifiable fields within ninety days. When legal obligations require us to keep anonymised transaction records for audit purposes we'll explain that in the confirmation email and delete everything else right away.