Privacy Policy

1Introduction

This Privacy Policy ("Policy") issued by baji888 ("baji888", "We", "OurUs"), the operator of the online gaming and sports betting platform accessible at https://baji888.cam. This Policy governs the collection, storage, use, disclosure, and protection of personal data provided by or collected about users ("Players", "Users", "You") of the baji888 Platform.

baji888 is committed to protecting the privacy of all players, including those accessing our Platform from Malaysia and other jurisdictions. We process personal data responsibly, transparently, and in accordance with applicable data protection principles and the requirements of our international gaming licensing jurisdiction.

By registering an Account on baji888, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to request Account closure.

2Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, identification number, financial data, and device identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, deletion, or destruction.
• "Data Controller" means baji888, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of baji888 in accordance with our instructions and this Policy.
• "KYC Data" means identity verification documentation collected as part of the Know Your Customer process, including government-issued identification, proof of address, and payment method verification.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analyse usage, and support personalisation.
• "Sensitive Personal Data" means personal data revealing or pertaining to racial or ethnic origin, political opinions, religious beliefs, health status, biometric data, or financial account details — processed by baji888 only where strictly necessary for regulatory compliance.

3Data We Collect

baji888 collects the following categories of personal data, collected at different stages of your interaction with the Platform:

3.1 Registration Data

When you register an Account, we collect: full legal name, date of birth, email address, mobile phone number, and chosen username and password (stored in hashed form).

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering requirements, we collect KYC documentation including: government-issued photo identification (Malaysian MyKad, MyPR, Driver's Licence, or Passport), proof of residential address (utility bill or bank statement), and a selfie photograph for identity matching purposes.

3.3 Financial Data

We collect data necessary to process deposits and withdrawals, including: payment method details (e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay; bank account details for DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, AmBank; and cryptocurrency wallet addresses for BTC, ETH, USDT, and LTC transactions). We do not store full bank card numbers on our servers.

3.4 Transaction and Gaming Activity Data

We maintain records of all deposits, withdrawals, wagers placed, game outcomes, and bonus redemptions associated with your Account for operational, compliance, and dispute resolution purposes.

3.5 Technical and Device Data

When you access the Platform, we automatically collect: IP address, device type and model, browser type and version, operating system, session duration, pages viewed, and referring URL. This data is used for security monitoring, fraud detection, and Platform optimisation.

3.6 Communication Data

When you contact our support team via live chat or email, we retain records of those communications, including timestamps, for quality assurance, dispute resolution, and regulatory compliance purposes.

4How We Collect Your Data

baji888 collects personal data through the following mechanisms:

4.1 Directly from You

The majority of personal data we hold is provided directly by you during the account registration process, KYC submission, payment transactions, and any communications you initiate with our support team. We also collect data you provide when responding to surveys, completing bonus claim forms, or participating in promotions.

4.2 Automatically via Platform Technology

Technical data — including IP address, device identifiers, session data, and browsing behaviour on the Platform — is collected automatically via server logs, cookies, and similar tracking technologies each time you access or interact with baji888. See Section 10 for full details on our cookie practices.

4.3 From Third-Party Service Providers

In some circumstances, we may receive personal data from third-party service providers engaged to assist with KYC verification, fraud screening, or payment processing. Data received from such providers is subject to this Policy and to the data sharing agreements in place with each provider.

5Legal Basis for Processing

baji888 processes personal data on the following legal bases:

• Contractual Necessity: Processing of registration data, financial data, and gaming activity data is necessary for the performance of the contract between you and baji888 (i.e., the provision of gaming and betting services under our Terms and Conditions).
• Legal Obligation: Processing of KYC data, transaction records, and certain communication data is required to comply with our obligations under applicable anti-money laundering, age verification, and gaming licensing regulations.
• Legitimate Interests: Processing of technical data, fraud-prevention data, and aggregated analytics data is carried out pursuant to baji888's legitimate interest in maintaining the security, integrity, and performance of the Platform.
• Consent: Processing of personal data for the purpose of sending marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

6How We Use Your Data

baji888 uses personal data collected from Players for the following purposes:

6.1 Account Management

To create, maintain, and administer your baji888 Account, including processing login authentication, managing Account settings, and communicating service-related notifications.

6.2 Identity Verification and Age Compliance

To verify your identity and confirm that you meet the 21+ age requirement through our KYC process. This is a mandatory regulatory obligation and cannot be waived.

6.3 Payment Processing

To process deposits and withdrawals through your selected Malaysian payment methods (including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and others) and to maintain accurate financial records associated with your Account.

6.4 Fraud Prevention and Security

To detect, investigate, and prevent fraud, money laundering, account abuse, bonus manipulation, and other prohibited activities — including the use of automated tools to monitor unusual account patterns and transaction behaviour.

6.5 Regulatory Compliance

To fulfil our obligations under applicable gaming licensing regulations, anti-money laundering requirements, and any lawful requests from competent regulatory or law enforcement authorities.

6.6 Customer Support

To respond to queries, resolve disputes, process complaints, and improve the quality of our support operations — including review of live chat and email communications.

6.7 Platform Improvement and Analytics

To analyse aggregate usage patterns, identify technical issues, optimise Platform performance, and develop new features — using anonymised or pseudonymised data where possible.

6.8 Marketing Communications (Consent-Based)

To send you information about promotions, bonuses, new games, and Platform updates — only where you have given explicit consent and subject to your right to withdraw consent at any time.

7Data Sharing & Disclosure

baji888 does not sell, rent, or trade personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

7.1 Payment Service Providers

We share financial data with payment processors and banking partners necessary to execute your deposit and withdrawal transactions — including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong, RHB, AmBank). Data shared is limited to what is required to process the specific transaction.

7.2 KYC and Identity Verification Providers

KYC documents and identity data are shared with licensed third-party identity verification service providers engaged to assist with age and identity verification. These providers process data solely in accordance with our instructions and applicable data protection agreements.

7.3 Fraud Prevention and Security Services

Technical data and transaction may be shared with fraud prevention platforms to identify and block prohibited activity. Information shared is used exclusively for security screening purposes.

7.4 Regulatory and Legal Authorities

We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of baji888, its players, or the public.

7.5 Business Transfers

In the event of a merger, acquisition, or transfer of baji888's business operations, personal data held about registered players may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

8International Data Transfers

baji888's Platform is operated under international licensing jurisdiction. As a result, personal data may be stored on and processed by servers located outside of Malaysia. Where personal data is transferred internationally, baji888 takes reasonable steps to ensure that such transfers are subject to appropriate safeguards, including contractual data protection clauses with receiving parties, to maintain a standard of protection consistent with the principles of this Policy.

By registering an Account and using the Platform, you acknowledge and consent to the transfer of your personal data to servers and processors located outside your country of residence, subject to the safeguards described herein.

9Data Retention

baji888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable regulatory and legal obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.

10Cookies & Tracking Technologies

baji888 uses cookies and similar tracking technologies to enable core Platform functionality, improve user experience, and support security monitoring. By continuing to use the Platform, you consent to the use of cookies as described in this section.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function — including session management, login authentication, and security token validation. These cannot be disabled without impacting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and previous session state, enabling a more personalised experience.
• Analytics Cookies: Collect anonymised data about how Players navigate and interact with the Platform, used to identify performance issues and improve usability.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts, and bot traffic.

10.2 Managing Cookies

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent core Platform features — including account login and transaction processing — from functioning correctly. Instructions for managing cookies in common browsers are available in each browser's help documentation.

11Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by baji888. To exercise any of these rights, please contact our support team using the details in Section16.

11.1 Right of Access

You have the right to request a copy of the personal data baji888 holds about you, together with information about how it is being processed. We will respond to verified access requests within 30 days.

11.2 Right to Rectification

You have the right to request correction of any inaccurate personal data held about you, and to have incomplete data completed. You may also update certain profile information directly through your Account settings.

11.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of personal data we hold about you where: the data is no longer necessary for the purposes for which it was collected; you withdraw consent (where consent is the processing basis); or the data has been unlawfully processed. Please note that we may be required to retain certain data beyond an erasure request to comply with legal and regulatory obligations (see Section 9).

11.4 Right to Restrict Processing

You may request that we limit our use of your personal data in certain circumstances — for example, while we investigate a disputed accuracy claim, or pending the outcome of an objection you have raised.

11.5 Right to Data Portability

Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

11.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests, including profiling, where you have grounds relating to your particular situation. You also have the right to object at any time to processing of your data for direct marketing purposes.

11.7 Response Timeframes

baji888 will respond to all data rights requests within 30 calendar days of receipt of a verified request. In complex or high-volume cases, this period may be extended by a further60 days with written notice. We will not charge a fee for processing data rights requests unless are manifestly unfounded or excessive.

12Security Measures

baji888 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser or device and baji888 servers is protected by TLS 1.2 or higher (256-bit encryption). HTTPS is enforced sitewide.
• Encryption at rest: Sensitive data stored on baji888 servers — including KYC documents, financial account references, and authentication credentials — is encrypted using AES-256 or equivalent industry-standard protocols.
• Access controls: Access to systems containing personal data is restricted on a need-to-know basis, with role-based access controls, multi-factor authentication for administrative access, and regular access reviews.
• Password security: Account passwords are stored using one-way cryptographic hashing (bcrypt or equivalent) and are never stored in plain text.
• Security monitoring: Continuous automated monitoring for unusual login patterns, transaction anomalies, and access attempts is in place, with alerts triggering human review where thresholds are met.
• Penetration testing: baji888 conducts periodic security assessments and penetration testing of its infrastructure.
• Incident response: In the event of a personal data breach that is likely to result in risk to affected individuals, baji888 will take appropriate remedial action and notify affected Players without undue delay, consistent with applicable breach notification obligations.

While baji888 takes all reasonable steps to secure your personal data, no transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your Account credentials and for ensuring your own device security.

13Children's Privacy

baji888 operates exclusively for adults aged21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our mandatory KYC process is specifically designed to prevent underage registration.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and permanently close the associated Account. If you believe that a minor may have accessed baji888, please contact our support team immediately.

14Third-Party Links

The baji888 Platform does not contain links to external third-party websites. This Privacy Policy applies solely to data processing activities conducted by baji888 in connection with the Platform. baji888 is not responsible for the privacy practices or content of any third-party service, including payment processors or identity verification providers, whose own privacy policies govern how they handle data shared with them.

15Changes to This Privacy Policy

baji888 reserves the right to update or revise this Privacy Policy at any time. Any material changes to this Policy — including changes to the categories of data collected, the purposes of processing, or the rights available to Players — will be communicated to registered Players via email and/or by prominent notice on the Platform at least seven (7) days prior to the revised Policy taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this Policy periodically to remain informed of how we protect your data.

16Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by baji888, please contact us through the following channels:

For data rights requests (access, erasure, portability, etc.), please provide your registered Account name, the email address associated with your Account, and a description of your request. We may ask for additional verification to confirm your identity before processing the request.