Privacy Policy

Introduction

joker12 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals ("you", "your", "the User") who access or interact with the website at joker12.cam and any associated services, applications or content delivered thereunder.

This Privacy Policy ("Policy") sets out in detail what personal data we collect, the purposes for which we process it, the legal basis on which we rely, how long we retain it, with whom we may share it, the safeguards we apply, and the rights available to you. It should be read alongside our Terms and Conditions.

By registering an account or continuing to use joker12, you acknowledge that you have read and understood this Policy. This Policy is primarily addressed to users located in Malaysia, including residents of Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, Bangsar, Ipoh and all other states and territories within Malaysia.

Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

Data Controller

joker12 acts as the Data Controller for all personal data collected through the joker12.cam platform. As Data Controller, we are responsible for deciding why and how your personal data is processed, and for ensuring that processing is carried out lawfully, fairly and transparently in accordance with applicable data protection principles.

Where joker12 engages third-party Data Processors — such as payment service providers including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong transactions — those processors act on our documented instructions and are contractually obligated to maintain appropriate data protection standards.

Data We Collect

joker12 collects personal data through several channels depending on the nature of your interaction with the Platform. The categories of data we collect include the following:

4.1 Registration Data

• Full legal name as it appears on your Malaysian identity document.
• Date of birth (used to confirm eligibility — users must be aged 21or above).
• Residential address in Malaysia.
• Email address and contact telephone number.
• Chosen username and account preferences.

4.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents: Malaysian MyKad, Malaysian driving licence, or current passport.
• Proof of residential address: utility bills, bank statements or official correspondence dated within 90 days.
• Selfie images taken as part of liveness or identity-match checks.
• Payment method ownership documentation where required.

4.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates and associated payment method identifiers.
• Transaction reference numbers.
• Cryptocurrency wallet addresses where applicable.

4.4 Technical and Device Data

• IP address and approximate geographic location derived therefrom.
• Device type, operating system, browser type and version.
• Session timestamps, page visit sequences and interaction logs.
• Cookie identifiers and similar tracking technologies.

4.5 Communications Data

• Content of support tickets, live chat transcripts and email correspondence with joker12.
• Records of any responsible gambling requests or self-exclusion notifications.

The following visual illustrates the general data lifecycle at joker12:

Legal Basis for Processing

joker12 processes personal data one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between joker12 and the User, including account creation, game access, payment processing and withdrawal fulfilment.
• Legal obligation: Processing is required to comply with applicable law, including anti-money laundering obligations, tax reporting requirements and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing is necessary for joker12's legitimate interests, including fraud prevention, platform security, internal analytics and responsible gambling monitoring, where these interests are not overridden by User rights.
• Consent: Where you have provided explicit consent for a specific purpose — for example, receiving promotional communications — processing is based on that consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

Purposes of Processing

Personal data collected by joker12 is processed for the following specific purposes:

• Establishing and managing your joker12 account.
• Verifying your identity and age in accordance with KYC obligations.
• Processing deposits and withdrawals through Malaysian payment methods including DuitNow, FPX, local banks and approved eWallets.
• Calculating, applying and verifying bonus credit, wagering requirements and promotional eligibility.
• Detecting and preventing fraudulent activity, collusion, money laundering and terms of service abuse.
• Operating the VIP tier programme and calculating tier-based benefits including cashback and birthday bonuses.
• Responding to account queries and customer support requests.
• Monitoring compliance with responsible gambling obligations, including reviewing deposit patterns for harm indicators.
• Fulfilling self-exclusion or cooling-off period requests.
• Meeting regulatory reporting and record-keeping obligations.
• Improving platform performance through anonymised analytics.
• Sending transactional communications (account status, withdrawal confirmations, policy updates).
• Sending promotional communications where the User has provided consent.

Data Sharing

joker12 does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong and eligible card networks.
• Identity verification providers: To complete KYC checks, including document authentication and liveness verification services.
• Cloud infrastructure and hosting providers: Who store Platform data under contractual data processing agreements.
• Fraud detection and anti-money laundering services: Specialist third parties that assist in identifying suspicious activity patterns.
• Regulatory and law enforcement authorities: Where joker12 is legally compelled to disclose information by court order, statutory instrument or regulatory directive.
• Professional advisors: Including legal counsel, auditors or insurers where disclosure is reasonably necessary for the conduct of their professional services.

International Data Transfers

joker12's platform infrastructure may involve data being processed or stored in jurisdictions outside Malaysia. Where personal data is transferred internationally, joker12 takes reasonable steps to ensure that the receiving party maintains a level of data protection that is substantially equivalent to the standards described in this Policy.

Such steps may include entering into appropriate data transfer agreements, applying standard contractual clauses, or relying on adequacy frameworks where applicable. If you have questions about the specific safeguards applied to any international transfer of your personal data, please contact us using the details in Section 16.

Data Retention

joker12 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data is retained for the duration of the account relationship and for a period of up to five years following account closure, unless a longer period is required by law.
• KYC and identity documents are retained for a minimum of five years and up to seven years following account closure, consistent with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of seven years from the date of each transaction to satisfy applicable tax and financial reporting obligations.
• Customer support records are retained for up to three years following the resolution of the relevant interaction.
• Responsible gambling records, including self-exclusion requests, are retained for a period sufficient to support reinstatement decisions and compliance obligations, and in no event less than the duration of the exclusion period plus two years.
• Technical and device logs are retained for up to 12 months, unless longer retention is required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Security of Personal Data

joker12 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures are reviewed and updated regularly include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the joker12 Platform.
• Encryption of sensitive data fields — including identity document data and financial information — at rest.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular internal security reviews and vulnerability assessments.
• Incident response procedures to detect, contain and report personal data breaches in a timely manner.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. Users are encouraged to use strong, unique passwords, enable any available two-factor authentication, and log out of their account when accessing joker12 from shared or public devices.

Cookies and Tracking Technologies

joker12 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the site. They serve several functions:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences, language settings and account customisation choices between sessions.
• Analytical cookies: Collect anonymised information about how users navigate the Platform, allowing us to identify performance improvements. This data does not personally identify individual users.
• Session timing cookies: Support responsible gambling tools including session duration tracking and reality-check prompts.

You may adjust your browser settings to refuse certain cookies; however, doing so may affect your ability to access or use parts of the Platform. joker12 does not use third-party advertising cookies for cross-site tracking or behavioural advertising.

Minors and Age Restrictions

joker12 is strictly an adult platform. The minimum age for registration and use is 21 years. We do not knowingly collect personal data from individuals under the age of 21.

Where joker12 identifies or has reasonable cause to believe that personal data has been collected from an individual under 21, that data will be deleted without retention and the associated account will be permanently closed. Any funds deposited by an underage user will be managed in accordance with applicable legal requirements.

User Rights

Subject to applicable law and regulatory obligations, you have the following rights in relation to personal data held about you by joker12:

Complaints

If you believe that joker12 has processed your personal data in a manner that does not comply with this Policy or applicable data protection principles, you are encouraged to raise the matter with us directly in the first instance using the contact details in Section 16. We will investigate all complaints promptly and fairly.

Where you remain dissatisfied with our response, you may have the right to lodge a formal complaint with the relevant data protection authority or regulator in your jurisdiction. Malaysian users may wish to consult the Department of Personal Data Protection (JPDP) for guidance on the complaint process applicable in Malaysia, though joker12 cannot guarantee that JPDP oversight applies to all data processing activities described herein.

Changes to This Policy

joker12 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — that is, where they affect your rights or the way we process your personal data — we will endeavour to notify you via the email address registered to your account or through a prominent notice on the Platform prior to the changes taking effect.

The date shown in the "Last Updated" field at the top of this document will reflect the date of the most recent revision. We recommend that you review this Policy periodically to remain informed of how your data is being used. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by joker12, please contact our support team. The contact details below are provided as plain text only — neither is a clickable link.

For additional platform information, consult the Terms & Conditions, Responsible Gambling and FAQ pages.