Baba88 Privacy Policy

1 Personal Information We Collect

To provide a complete and secure service, baba88 collects several categories of information from our users. Below is a detailed breakdown of the types of data we collect and their purposes:

2 How We Use Your Personal Data

The data we collect is used for legitimate and transparent purposes. Every use of data is based on a sound legal basis under Malaysia's PDPA:

• Account Management: Create and maintain your account, process registration, and manage secure login.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Identity Verification (KYC): Verify that you meet the minimum age requirement of 18 and prevent fraud and money laundering.
• Customer Support: Provide effective assistance when you contact our support team via live chat.
• Platform Security: Detect and prevent unauthorised access, fraud, and other security threats.
• Service Improvement: Understand usage patterns to improve the overall platform experience.
• Promotional Communications: Send information about the latest offers and promotions — you may opt out of these communications at any time.
• Legal Compliance: Meet reporting and compliance obligations under applicable laws.

We will not use your data for any other purposes not stated here without first obtaining your additional consent.

3 Data Storage & Security Measures

Your data security is baba88's highest priority. We implement multiple layers of technical and organisational protection to ensure your information remains safe at all times:

• 256-bit SSL Encryption for all data transmitted between your device and our servers.
• Encryption of stored data — all sensitive information is stored in encrypted format on protected servers.
• Tiered access controls — only authorised personnel may access user data, and every access is logged and monitored.
• 24/7 security monitoring using a real-time threat detection system.
• Regular penetration testing by independent security experts to identify and close any vulnerabilities.
• Automatic data backup to ensure service continuity in the event of a technical disruption.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach affecting your information, we will notify you and the relevant authorities within the timeframe required by law.

4 Data Sharing & Disclosure to Third Parties

Baba88 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we need to share your data:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with approved payment gateways (FPX, Touch 'n Go, Boost, GrabPay, USDT) — subject to their own privacy policies.
• Technical Service Providers: Companies that help us operate our platform, including server hosting and support services — bound by strict confidentiality agreements.
• Legal Authorities: When required by Malaysian law, court order, or official investigation by a competent authority.
• Fraud Prevention: Approved anti-fraud agencies where there is reasonable suspicion of illegal activity.

All third parties who receive your data are bound by confidentiality obligations and are required to protect that data to a standard at least equivalent to our Privacy Policy.

5 Cookies & Tracking Technologies

Baba88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous data on how visitors use our platform to help us improve the user experience.
• Functional Cookies: Save your preferences such as language, display settings, and personal preferences so you do not need to reset them each time.
• Analytics Cookies: Help us understand platform traffic and usage patterns in aggregate — no personally identifiable information is collected through these cookies.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and user experience of the baba88 platform.

6 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by baba88:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any data that is inaccurate or incomplete.
• Right to Withdraw Consent: You may withdraw consent for certain data processing at any time, without affecting the validity of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data — subject to our legal obligations to retain certain records.

To exercise any of the above rights, please contact our support team via live chat on the baba88 platform. We will process your request within 14 business days.

7 Child Data Protection

Baba88 services are exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors. If we become aware that we have collected data from someone under the age of 18, we will:

• Suspend the relevant account immediately.
• Delete all relevant data from our systems.
• Return valid account balances to the relevant parties.

Parents and guardians who suspect their child has registered on our platform should contact our support team immediately. We take this matter very seriously.

8 Cross-Border Data Transfers

In the operation of the baba88 platform, your data may be processed or stored on servers located outside Malaysia. Where this occurs, we ensure that:

• Data transfers are only conducted to countries or regions with an adequate level of data protection.
• All cross-border data transfers are governed by data processing agreements that comply with Malaysia's PDPA.
• We apply recognised contractual data protection standards to ensure your data remains protected wherever it is processed.

9 Data Retention Period

Baba88 only retains your personal data for as long as it is needed for the stated purposes or as required by law:

• Active Account Data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements.
• Security Logs: Retained for 12 months for security threat detection and investigation purposes.
• KYC Records: Retained for the period prescribed by applicable anti-money laundering legislation.
• Support Communication Data: Retained for 24 months for quality control and dispute resolution purposes.

Once the applicable retention period has ended, your data will be securely deleted or anonymised in accordance with approved data disposal procedures.

10 Policy Changes & How to Contact Us

Baba88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to you via a prominent notice on the platform or through your registered email.

We encourage you to review this page regularly. Your continued use of the baba88 platform after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, our team is ready to assist via:

• Live Chat: Available 24/7 directly on the baba88 platform — the fastest way to get a response.
• Email: [email protected] — for enquiries that require written documentation.