Baba88 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how Baba88 ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("Users", "Players", or "you") who access or use the services available at https://baba88.cam.

Baba88 is committed to protecting the privacy and security of all personal data entrusted to us. This Policy is designed to provide you with a clear and transparent account of our data practices in compliance with applicable data protection legislation and international privacy standards.

By accessing the Baba88 platform, registering an account, or using any of our services — including casino games, sports betting, live dealer tables, and promotional programmes — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

03 Data We Collect

Baba88 collects personal data across several categories, each serving a specific and legitimate operational purpose. The categories of data we collect are as follows:

• Full legal name as it appears on official identification documents (e.g., MyKad, passport).
• Date of birth — collected to verify compliance with the minimum age requirement of 21 years.
• Residential address — including city (e.g., Kuala Lumpur, Penang, Petaling Jaya, Shah Alam) and postcode.
• Email address and contact telephone number.
• Username and encrypted password hash.
• Nationality and country of residence.

• Scanned or photographed copies of government-issued photo identification (MyKad, passport, driving licence).
• Proof of address documentation dated within 90 days of submission (utility bill, bank statement).
• Proof of payment method ownership where required (e.g., screenshot of e-wallet interface showing name match).

• Deposit and withdrawal transaction records, including amounts in MYR, timestamps, and payment method identifiers.
• Payment method type (e.g., Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, BTC wallet address, USDT wallet address).
• Account balance history and bonus allocation records.

• Betting and gaming activity records, including game types played, bet amounts, and outcomes.
• Session logs, login timestamps, and session duration data.
• Responsible gambling tool usage (e.g., deposit limits set, cool-off period activations).
• Bonus claims and promotional participation records.

• IP address and approximate geolocation derived therefrom.
• Device type, operating system, and browser information.
• Unique device identifiers where applicable.
• Cookies and tracking data as described in Section 10.

• Records of live chat interactions with Baba88 support agents.
• Email correspondence with Baba88's support team ([email protected]).
• Complaint and dispute records.

04 How We Collect Data

Personal data is collected through the following primary channels:

• Direct provision: Data entered by the User during registration, account updates, KYC submissions, or support interactions.
• Automated collection: Data collected automatically when a User accesses the Platform, including IP address, session logs, and cookie data.
• Third-party verification providers: Identity and document verification data received from KYC service providers engaged by Baba88.
• Payment processors: Transaction confirmation data received from integrated payment gateways (DuitNow, FPX, e-wallet providers, and cryptocurrency networks).
• Fraud prevention services: Risk signals and device fingerprinting data from fraud detection partners used to protect Players and the platform.

05 Purposes of Processing

Baba88 processes personal data for the following purposes:

06 Legal Basis for Processing

Baba88 relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to fulfil the agreement between Baba88 and the Player, including account operation, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable laws, including AML, CTF, and data retention obligations imposed by regulatory authorities.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics — where these interests do not override a Player's fundamental rights.
• Consent: Processing for optional marketing communications and non-essential cookie deployment, where explicit opt-in consent has been obtained from the Player.

07 Data Sharing & Disclosure

Baba88 does not sell or rent personal data to third parties. Data is shared with the following categories of recipients only where strictly necessary:

• KYC & Identity Verification Providers: Third-party services engaged to verify player identity and documentation. These providers operate under strict data processing agreements with Baba88.
• Payment Processing Partners: Integrated payment gateways for MYR transactions (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay) and cryptocurrency networks (BTC, USDT). Only the data required to process a specific transaction is shared.
• Fraud Detection & Security Services: Third-party risk management platforms that assist in detecting suspicious activity, bonus abuse, and account compromise attempts.
• Game Software Providers: Certified game providers may receive anonymised session data necessary to operate their games within the Baba88 environment.
• Regulatory & Law Enforcement Authorities: Personal data may be disclosed to competent governmental authorities where Baba88 is legally compelled to do so by valid court order, regulatory directive, or statutory requirement.
• Professional Advisors: Legal, accounting, and audit professionals engaged by Baba88, subject to confidentiality obligations.

08 Data Retention

Baba88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to mandatory regulatory retention periods. The following indicative retention schedules apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

09 Data Security

Baba88 implements a multi-layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• TLS/SSL Encryption: All data in transit between Player devices and Baba88's infrastructure is encrypted using current TLS protocols.
• Data Encryption at Rest: Sensitive personal data and KYC documents stored on Baba88's servers are encrypted using AES-256 or equivalent standard.
• Access Controls: Access to personal data within Baba88 is restricted to authorised personnel on a strict need-to-know basis. Access is logged and audited regularly.
• Two-Factor Authentication (2FA): Available to all Players and mandatory for staff accessing internal systems containing personal data.
• Regular Security Audits: Baba88's technical infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities.
• Incident Response: In the event of a confirmed personal data breach that poses risk to Players, Baba88 will notify affected users and, where legally required, the relevant regulatory authority within the timeframes specified by applicable law.

10 Cookies & Tracking Technologies

Baba88 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how Players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without rendering the Platform inoperable.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously entered non-sensitive form data to improve your experience.
• Analytical Cookies: Collect anonymised data on how Players use the Platform — page visits, session duration, and navigation paths — to help us improve the site. These require your consent.
• Marketing Cookies: Used to track the effectiveness of promotional campaigns and serve relevant bonus notifications to opted-in Players. These require your consent and can be withdrawn at any time.

You may manage or withdraw your consent to non-essential cookies at any time through your browser settings or by contacting our support team. Please note that disabling certain functional cookies may affect your Platform experience.

11 Minors & Age Restriction

Baba88 is strictly an adult platform. The minimum age to register and use Baba88's services is 21 years old. We do not knowingly collect personal data from any person under the age of 21.

If Baba88 becomes aware that personal data has been collected from a person under the age of 21 — whether through self-disclosure, KYC verification, or third-party reporting — the relevant account will be permanently closed, all associated data deleted (subject to applicable retention obligations), and any deposited funds returned via the original payment method where legally permissible.

Parents and legal guardians who have reason to believe that a minor has registered or attempted to register an account on Baba88 are encouraged to contact our support team immediately at [email protected].

12 Your Rights

Subject to applicable data protection legislation, registered Players hold the following rights in relation to their personal data processed by Baba88:

• Right of Access: You may request confirmation of whether Baba88 holds personal data about you and, if so, a copy of that data along with information on how it is used.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you be corrected. Certain corrections (such as name and date of birth) may require re-submission of KYC documents.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to Baba88's legal obligations — data required for AML/regulatory compliance cannot be deleted before the mandated retention period expires.
• Right to Restriction of Processing: You may request that Baba88 temporarily suspend processing of your data in certain specified circumstances, such as where the accuracy of the data is contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to Baba88 demonstrating compelling grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Privacy team at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notification.

13 International Data Transfers

Some of Baba88's third-party service providers — including KYC verification providers, fraud detection services, and game software partners — may be located in jurisdictions outside Malaysia. Where personal data is transferred to such providers, Baba88 ensures that appropriate safeguards are in place to protect the data, including:

• Data Processing Agreements (DPAs) incorporating standard contractual clauses and equivalent data protection provisions.
• Transfer only to jurisdictions that provide an adequate level of data protection as determined by applicable law.
• Contractual obligations on recipient entities to implement security measures equivalent to those described in this Policy.

Players who wish to obtain more information about the safeguards applicable to specific international transfers may contact Baba88's support team.

14 Policy Amendments

Baba88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or technological developments. The effective date of the most recent version is displayed at the top of this page.

Material changes to this Policy — particularly those that affect how we collect, use, or share your personal data — will be communicated to registered Players via email notification or a prominent notice on the Platform no less than 14 days before the effective date of the change.

Your continued use of the Baba88 platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you disagree with any changes, you should cease use of the Platform and contact our support team to close your account.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Baba88, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform interface in English, Bahasa Melayu, and Mandarin. Average response time 3–5 minutes.
• Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays.

Players exercising data subject rights (access, rectification, erasure, etc.) should include their registered email address and a clear description of their request in all correspondence to enable us to process it efficiently.