OFFICIAL DOCUMENT – op12 MALAYSIA DATA PROTECTION

Op12 Privacy Policy – Personal Data Protection for Members of Malaysia's Casino Platform

Op12 takes every member's privacy seriously. This Privacy Policy clearly explains the types of data we collect, how we use it, who can access it, and your rights as an op12 member in Malaysia. All our data handling fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 English (en-MY) Covering Malaysia
SSL 256-bit
PDPA Compliant
Data Encrypted
No Disclosure

Op12's Privacy Commitment to Malaysian Members

Six core data protection principles we uphold every day at op12

256-Bit SSL Encryption

All personal data and financial transactions of op12 members are protected by international banking-grade 256-bit SSL encryption, ensuring your information remains unreadable to any unauthorised party during transmission.

Full PDPA 2010 Compliance

Op12 operates in full compliance with the Malaysia Personal Data Protection Act 2010 (PDPA). Every aspect of member data collection, processing, and storage is conducted in accordance with applicable local legal requirements.

No Data Sales

Op12 has never sold, rented or shared members' personal data with any third party for marketing or commercial purposes, and never will — without the explicit consent of the member concerned. Your data belongs to you.

Secure Data Storage

Op12 member data is stored on servers protected by multiple layers of physical and digital security controls. Access to the member database is restricted to authorised personnel only and is subject to regular audits.

Right of Access & Correction

Every op12 member has the full right to access their personal data held by the platform, request corrections to any inaccurate information, and, in certain circumstances, request that the data be deleted.

Marketing Communications Control

Op12 members have full control over the marketing communications they receive. You may opt out of promotional emails or notifications at any time through your account settings, with no conditions attached.

Important Note: This Privacy Policy forms part of the agreement between you ("Member") and op12 ("Platform"). By registering an account or using any service on op12.my, you are deemed to have read and fully agreed to this Privacy Policy. If you do not agree with any part of this policy, please stop using the op12 platform and contact us to close your account.

1 Introduction – op12's Commitment to Your Privacy

Op12 is a digital casino entertainment platform operating in Malaysia and serving members nationwide. We understand that trust is the foundation of our relationship with every member, and the protection of personal data is an essential part of that trust.

This Privacy Policy sets out transparently and clearly how op12 collects, uses, stores, protects and, in certain circumstances, discloses members' personal data. It also explains the rights you hold in relation to your personal data and how to exercise them.

Op12 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in every aspect of how it handles members' personal data. We take our role as a "Data Processor" very seriously and ensure that all op12 staff with access to member data are properly trained on their responsibilities under applicable Malaysian law.

If you have any questions about this Privacy Policy or how op12 handles your personal data, please contact our support team at [email protected] at any time.

2 Types of Personal Data We Collect

Op12 collects various types of personal data necessary to operate the platform and deliver quality services to members. The categories of data we collect are as follows:

Data Category Example Information Necessity
Identity Data Full name, Malaysian identity card number, date of birth Mandatory
Contact Information Malaysian phone number, email address Mandatory
Financial Data Bank account details, e-wallet numbers (Touch 'n Go, GrabPay, etc.) Required for transactions
Technical Data IP address, device type, operating system, web browser Automatic
Usage Data Gaming history, total wagers, login frequency Automatic
Communication Data Customer support conversation history, member feedback Where applicable

Op12 only collects data that is genuinely necessary to operate the platform and comply with applicable legal requirements. We do not collect excessive or irrelevant data beyond the scope of the services we provide.

3 How op12 Collects Your Personal Data

Op12 collects members' personal data through a variety of channels. It is important that you understand when and how data is collected so you can make informed decisions about your use of our platform.

  • During Account Registration: When you register a new account at op12.my, you provide basic identity information such as your full name, Malaysian phone number and date of birth. This information is required to create your account and verify your eligibility as an op12 member.
  • During the KYC Process: During the Know Your Customer (KYC) process, op12 may request identity verification documents such as a copy of your Malaysian identity card, bank statement or proof of address. This is a standard legal compliance requirement within the financial services industry.
  • During Financial Transactions: When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), or withdraw your winnings, op12 records the transaction details required to process the payment and maintain accurate financial records.
  • Through Use of the Platform: The op12 system automatically records certain technical information when you use our platform, including your device's IP address, browser type, login and logout times, as well as the games you play and bets you place.
  • Via Customer Support: When you contact the op12 support team via Live Chat or email, those conversations may be recorded for quality control purposes and to help resolve any recurring issues more efficiently.
  • Through Cookies and Similar Technologies: op12 uses cookies and similar tracking technologies to enhance the user experience on our platform. Further details on our use of cookies are explained in Section 7 of this Privacy Policy.

4 Purposes for Using Personal Data at op12

Op12 uses members' personal data only for legitimate and necessary purposes. The following are the primary purposes for which that data is used:

  • Account Management: To create and maintain your op12 member account, verify your identity at login, and process requests to update your account information.
  • Transaction Processing: Processing deposits and withdrawals via the Malaysian local payment methods selected by members, and maintaining accurate and complete financial transaction records.
  • Legal Compliance: Fulfilling op12's legal obligations, including KYC requirements, anti-money laundering (AML) compliance, reporting to relevant authorities and adherence to Malaysia's PDPA.
  • Platform Security: Detecting and preventing fraud, suspicious activity, multiple account usage, hacking attempts and any security threats to the op12 platform or its members.
  • Service Improvement: Analysing platform usage patterns in aggregate and anonymised form to better understand member needs, improve the user interface and introduce relevant new features.
  • Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal alerts, security notices, and key updates about the op12 platform.
  • Marketing (with consent): Sending information about op12 promotions, bonuses, and special events to members who have consented to receive marketing communications. You may withdraw this consent at any time.
  • Responsible Gaming: Monitoring members' gaming patterns to identify early signs of problem gambling and taking proactive measures in line with op12's commitment to responsible gaming.

op12's Assurance: Your personal data will not be used for any purpose other than those stated above without your prior consent. op12 does not use member data to make automated decisions that could materially affect your rights or interests without appropriate human review.

5 Disclosure of Data to Third Parties

Op12 does not sell, rent or share members' personal data for commercial purposes with any external party. However, in the course of legitimate platform operations, there are certain situations where op12 needs to share data with specific third parties:

  • Payment Service Providers: op12 shares the necessary transaction information with authorised payment providers — including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX providers — to enable deposits and withdrawals to be processed securely and accurately.
  • Technology Service Providers: op12's technical infrastructure service providers — such as server hosts, analytics platforms and cybersecurity providers — may require limited access to certain data in order to carry out their technical functions. All such providers are bound by strict confidentiality agreements.
  • Game Providers: Game providers that supply games such as slots, roulette, and table games to the op12 platform may receive certain gaming data necessary to operate those games online. This does not include full personal identity information.
  • Legal Requirements: op12 may be required by Malaysian law, court order or regulatory directive to disclose certain member data. In such cases, op12 will comply with the legal requirement while making every reasonable effort to protect the privacy of the member concerned.
  • Business Transfer: In the event of any merger, acquisition or transfer of op12's assets, member data may form part of the transferred assets. Members will be informed of any such changes before they take effect.

In all of the above cases, op12 ensures that third parties receiving member data are bound by data protection obligations just as stringent as those imposed by op12 itself. We do not permit third parties to use member data for any purpose other than those specifically authorised by op12.

6 Data Security Measures at op12

Protecting members' personal data is a top priority at op12. We continuously invest in security infrastructure and industry best practices to ensure your data is always safeguarded against unauthorised access, loss, or accidental disclosure.

  • 256-bit SSL Encryption: All data transmitted between your device and op12's servers is protected by 256-bit TLS/SSL encryption — the same security standard used by international banking institutions.
  • Stored Data Encryption: Sensitive member data stored in op12's databases — including financial information and identity documents — is encrypted using robust encryption algorithms. Even if someone were to gain unauthorised access to our database, the data would be unreadable without the correct encryption key.
  • Strict Access Controls: Access to systems and databases containing members' personal data is restricted to op12 staff who have a direct need-to-know in the course of their duties. All access is logged and audited on a regular basis.
  • Two-Factor Authentication (2FA): All op12 internal systems containing member data are protected by two-factor authentication to prevent unauthorised access, even in the event that a staff member's password is compromised.
  • Regular Security Audits: op12 conducts regular internal and external security audits to identify and address any vulnerabilities or security risks before they can be exploited.
  • Staff Training: All op12 staff with access to member data undergo comprehensive data protection training and are required to sign legally binding confidentiality agreements.

Shared Responsibility: While op12 takes all reasonable steps to protect your data, account security also depends on your own actions. Make sure you use a strong and unique password for your op12 account, never share your login credentials with anyone, and notify us immediately if you suspect any unauthorised access to your account.

7 Cookies & Tracking Technologies

Op12 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit op12.my. They help our platform run more smoothly and allow us to deliver a more personalised experience to each member.

The types of cookies used by op12 are:

  • Essential Cookies: These cookies are essential for the basic operation of the op12 platform — such as maintaining your login session and keeping your account secure. Without them, the platform cannot function properly, and they cannot be disabled.
  • Performance Cookies: These cookies collect information about how you use the op12 platform — such as which pages you visit most often and whether you encounter any error messages. All such information is aggregated and cannot be used to identify you personally. It helps us improve how our platform functions.
  • Functional Cookies: These cookies allow the op12 platform to remember your preferences — such as your chosen language and display settings — so you do not need to reconfigure them every time you log in.
  • Analytics Cookies: op12 uses analytics tools to understand general platform usage patterns, helping us make better-informed decisions about product development and service improvements.

You can manage and delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of the op12 platform and your gaming experience. For more information on managing cookies, please refer to your web browser's help documentation.

8 Data Storage & Retention Period

Op12 retains members' personal data for as long as necessary to fulfil the original purpose for which it was collected, or for as long as required under applicable Malaysian law — whichever is longer.

  • Active Account Data: For as long as your op12 account remains active, your personal data will be retained to enable us to provide you with the full platform experience.
  • Data After Account Closure: Upon account closure, op12 may need to retain certain data records for a period stipulated by Malaysian law — typically between five and seven years — for the purposes of legal compliance, dispute resolution and fraud prevention.
  • Financial Transaction Data: Financial transaction records — including deposits and withdrawals made via Touch 'n Go, GrabPay or local banks — are retained in accordance with Malaysian legal requirements and applicable payment industry standards.
  • Customer Support Data: Customer support interaction records are retained for as long as necessary for quality control purposes and the resolution of any disputes that may arise.

Once the relevant retention period has expired, op12 will securely delete or destroy personal data using appropriate methods to ensure it cannot be recovered or accessed by any party after deletion.

9 Your Rights as an op12 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as an op12 member have important rights regarding your personal data. op12 is committed to respecting and facilitating the exercise of these rights:

Your Rights Under Malaysia's PDPA

Data protection rights held by every op12 member under Malaysian law

Right to Data Access

You have the right to request a copy of the personal data that op12 holds about you. op12 will process this request within a reasonable timeframe.

Right to Rectification

If the personal data that op12 holds about you is inaccurate or out of date, you have the right to request that it be corrected.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data from op12's systems, subject to any legal obligations that may require us to retain specific records.

Right to Restrict Processing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. op12 will honour such requests immediately.

Right to Data Portability

You have the right to receive the personal data you have provided to op12 in a machine-readable format and to transfer it to another data controller where applicable.

How to Submit a Request

To exercise any of the above rights, contact op12 by email at [email protected], clearly stating your request. We will respond within 14 business days.

10 Child Privacy Protection

The op12 platform is strictly for individuals aged 18 and above. op12 does not intentionally collect or process personal data of anyone under the age of 18. This is an absolute commitment with no exceptions.

Op12 employs an age verification system during the registration process and reserves the right to request identity verification documents at any time to confirm that members meet the minimum age requirement. Should op12 determine that an account was registered by an individual under the age of 18, the account will be closed immediately and any remaining balance will be processed in accordance with the appropriate procedures.

If you are a parent or guardian and believe your child has registered an account on op12 without your knowledge or consent, please contact us immediately at [email protected] so we can take the appropriate action without delay.

11 Links to Other Websites

The op12.my platform may contain links or references to third-party websites in certain contexts. op12 is not responsible for the privacy practices or content of such third-party sites, and this Privacy Policy does not apply to any website outside of op12's control.

We encourage members to read the privacy policy of any third-party website you visit, especially before providing them with any personal information. Your safety and privacy on external sites are entirely outside the control and responsibility of op12.

12 op12 Privacy Policy Amendments

Op12 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, updated Malaysian legal requirements, or improvements to our data protection practices. Any amendments will be published on this page along with a revised effective date.

For material changes that could significantly affect your privacy rights, op12 will endeavour to notify you in advance via an in-platform notification or an email to the address registered on your account. Your continued use of the op12 platform after any policy changes are published will be deemed as acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how op12 protects your personal data. If you do not agree with any changes made, please contact us at [email protected] to discuss the options available to you.

13 Contact op12 About Your Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or the way op12 handles your personal data, please do not hesitate to get in touch. op12's data protection team is ready to assist you:

Email

Send your privacy inquiry to [email protected]. Please include "Privacy Inquiry" in your email subject line to help us respond more quickly.

Live Chat

For urgent privacy enquiries or guidance on exercising your rights, use the 24/7 Live Chat function available at op12.my.

Op12 is committed to responding to all privacy-related enquiries within 14 business days. For more formal complaints, you also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your personal data has been handled improperly.

Why Is Privacy a Priority for op12?

For many Malaysians, the decision to join an online casino platform is not one made lightly. Beyond ensuring that the platform is secure and fair in its games, the confidence that your personal data will be fully protected is equally important. This is why op12 has made privacy protection one of the core priorities of our platform from the very first day of operations.

We understand that when you register for an op12 account and share information such as your phone number, bank details or digital wallet numbers like Touch 'n Go and GrabPay, you are placing a great deal of trust in us. We do not take that trust lightly. Every technical decision we make — from how we store passwords to how we process DuitNow transactions — is guided by one core principle: member data belongs to the member, and it is our responsibility to protect it.

Best-in-class data protection isn't something op12 does simply because the law requires it — though we do comply fully with Malaysia's PDPA. We do it because we believe a platform that genuinely respects its members' privacy is a better platform all round. Players who enjoy op12 knowing their data is safe are happier, more loyal, and far more likely to get the most out of their gaming experience.

Register Your op12 Account with Confidence
Bank-Grade Encryption

The same 256-bit SSL trusted by Maybank, CIMB, and Malaysia's leading banks safeguards every piece of data that passes through the op12 platform.

Malaysia PDPA Compliance

Op12 fully complies with all provisions of the Malaysia Personal Data Protection Act 2010, ensuring your rights as a data subject are protected in accordance with local law.

No Data Sales

Op12 has never sold or rented members' personal data to any third party for commercial or marketing purposes, and never will.

Control in Your Hands

You have the right to access, correct, or request deletion of your data at any time. Your privacy is in your own hands at op12.

FAQ – op12 Privacy Policy

The questions Malaysian members ask most frequently about privacy at op12

op12 does not sell or share members' personal data with third parties for commercial or marketing purposes. There are limited circumstances in which we need to share data with certain parties in order to carry out legitimate operations — for example, with payment service providers such as Touch 'n Go or GrabPay to process your transactions, or with Malaysian authorities if required by law. In all such cases, the receiving parties are bound by strict confidentiality agreements and may only use the data for purposes specifically authorised by op12. op12 has never sold, and will never sell, member data to advertisers or data brokers.

To request a copy of the personal data op12 holds about you, send an email to [email protected] with the subject line "Data Access Request", stating your full name and the phone number registered to your op12 account. op12 will first verify your identity before processing your request within 14 business days. Data will be provided in an appropriate format in accordance with Malaysia's PDPA requirements. This service is free of charge for the first request within any 12-month period. Additional requests within the same period may be subject to a reasonable nominal fee to cover administrative costs.

Yes, your financial information is safe at op12. All transaction data — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u or CIMB Clicks — is transmitted through channels encrypted with 256-bit SSL. op12 does not directly store your bank account details or e-wallet passwords in our systems. The only information we retain is the transaction records required for legal compliance and dispute investigations. Our payment processes also do not involve storing members' credit or debit card numbers within the op12 system.

You have the right to request the deletion of your personal data from op12's systems under certain circumstances provided for by Malaysia's PDPA. However, please be aware that op12 may need to retain certain records in order to fulfil its legal obligations — for example, financial transaction records may need to be kept for a period stipulated by Malaysian law for tax and anti-money laundering purposes. If you wish to exercise this right to erasure, please contact [email protected] with the subject line "Data Deletion Request" and include your account details. We will inform you which data can be deleted and which must be retained in accordance with our legal obligations, along with the relevant retention periods.

Opting out of promotional emails from op12 is straightforward, and you have every right to do so at any time. There are two ways to go about it: first, click the "Unsubscribe" link found at the bottom of any promotional email you receive from op12 — this is the quickest method. Second, log in to your op12 account and update your communication preferences in your account settings. You may also email [email protected] to request a change to your communication preferences. Please note that unsubscribing from promotional emails does not mean you will stop receiving important account-related emails such as deposit confirmations, withdrawal notifications or security alerts — these are essential service emails and are distinct from marketing communications.

Op12 Policies & Other Information

Other official documents related to privacy and security at op12

About Us

Learn more about op12 — who we are, our mission and our commitment to Malaysian players.

Learn More
Terms & Conditions

Read the full op12 user agreement, including terms on membership, deposits, withdrawals, and bonuses.

Read More
Responsible Gaming

Learn about the responsible gaming tools and support resources op12 provides for members in Malaysia.

Read More
FAQ

Find answers to the questions op12 members ask most frequently about every aspect of the platform.

View FAQ

Your Data Is Safe. Your Experience Is Guaranteed.

Now that you understand how op12 protects your privacy, you can register and play with complete confidence. op12 ensures your personal data is fully protected in accordance with Malaysia's PDPA, while delivering the country's best digital casino experience.

SSL 256-bit PDPA 2010 Compliant No Data Sales 18 Years and Above Only
Bahasa Melayu