Baginda168 Privacy Policy – Personal Data Protection for Malaysian Players

Baginda168 takes your privacy and the protection of your personal data very seriously. This Privacy Policy explains in detail how we collect, use, store, disclose and protect your personal information when you use the baginda168 platform, accessible via baginda168.ws.

This Privacy Policy applies to all users of the baginda168 platform, including unregistered visitors, active registered members, and former members whose accounts have been closed. By accessing or using the baginda168 platform, you consent to the collection and use of your personal information as described in this document.

The baginda168 Privacy Policy is drafted in accordance with the requirements Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing personal data protection in the country. We are committed to ensuring that your rights as a data subject are fully protected in accordance with the provisions of this law.

Baginda168 collects your personal information through a number of channels – directly when you register or use our platform, automatically through tracking technologies, and in certain cases from legitimate third-party sources. Below is a detailed summary of the types of data we collect:

Baginda168 uses the personal data it collects for the following legitimate and transparent purposes. We do not use your data for anything beyond what is stated below:

• Account Operations: Processing your registration, verifying your identity, managing logins and maintaining the security of your baginda168 account.
• Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX, and processing withdrawal of winnings to your registered account.
• Service Delivery: Providing access to games, live tables, Sports Betting, and all baginda168 platform content that you are entitled to access.
• Service Communications: Sending account-related notifications, transaction confirmations, security updates, and important information about changes to the platform.
• Promotions & Rewards: Managing bonus eligibility, calculating cashback and VIP rebates, and keeping you informed of relevant promotions at baginda168 – only where you have not opted out of marketing communications.
• Fraud Prevention: Detecting and investigating suspicious activity, including the use of multiple accounts, money laundering, and attempts to abuse the bonus system.
• Legal Compliance: Fulfilling reporting obligations to Malaysian authorities in accordance with applicable laws, including AML/CFT requirements.
• Platform Improvement: Analysing usage patterns in aggregated, anonymised form to improve user experience, platform performance and the relevance of baginda168 content.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and providing appropriate self-control tools to members who need assistance.

Baginda168 does not use your data to make automated decisions that materially affect your rights without human review. Every significant decision relating to accounts, bonuses or withdrawals involves review by our team.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), baginda168 only processes your personal data where a valid legal basis exists. The legal bases we rely on are as follows:

• Consent: You provide explicit consent to data processing when you register a baginda168 account and agree to this Privacy Policy. For optional marketing communications, you may withdraw this consent at any time.
• Contract Performance: Processing necessary to fulfill the service contract between you and baginda168 – including deposit and withdrawal transaction processing and account operations.
• Legal Obligations: Processing required to comply with applicable Malaysian law, including identity verification (KYC) requirements and AML/CFT reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement purposes – where baginda168's legitimate interests do not override your privacy rights.

Baginda168 does not sell or rent your personal data to any third party. However, in the course of operating the platform, we share data only to the extent necessary with the following categories of third parties:

• Payment Providers: Malaysian e-wallet platforms such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX-participating banks receive only the minimum transaction information required to process your deposits and withdrawals.
• Game Software Providers: Our partners such as Evolution Gaming and Pragmatic Play receive only the minimum session data required to deliver live games and verify betting outcomes.
• Technology Service Providers: Cloud storage providers, security monitoring services, and technical infrastructure companies that support baginda168's operations may process your data as data processors acting under our instructions.
• Legal Authorities: Where required by Malaysian law or a valid court order, baginda168 will disclose the requested data to the relevant authorities.

All third parties we engage are required to handle your data in accordance with security and privacy standards that are equal to or higher than those of baginda168 itself. We do not permit third parties to use your data for their own purposes unrelated to the services they provide to baginda168.

Protecting your personal data is more than a legal obligation for baginda168 – it is an operational commitment we take seriously at every level of our platform infrastructure. The following technical and organisational measures are in place to ensure the security of your data:

• 256-bit SSL Encryption: All communications between your browser or application and baginda168's servers are protected by industry-grade SSL encryption, ensuring that data in transit cannot be read by third parties.
• Encryption of Stored Data: Sensitive data such as passwords is stored in hashed form using strong cryptographic algorithms. baginda168 never stores your password in plain text.
• Layered Access Controls: Access to members' personal data within baginda168's internal systems is restricted to staff who require it to carry out their duties. All access is logged and monitored.
• Two-Factor Authentication (2FA): baginda168 members can enable 2FA on their accounts as an additional layer of protection. We encourage all members to make use of this feature.
• Continuous Security Monitoring: The baginda168 security team monitors our systems 24 hours a day, 7 days a week to detect any unusual activity or intrusion attempts.
• Regular Security Testing: The baginda168 platform undergoes regular penetration testing and security audits by independent security experts to identify and address vulnerabilities before they can be exploited.
• Incident Response Plan: baginda168 has tested incident response procedures in place to handle any data breach swiftly, including notification protocols for affected members and relevant authorities as required under PDPA.

While we take all reasonable measures to protect your data, no security system can be guaranteed 100% secure. You also play an important role in safeguarding your account by using a strong password, keeping your login credentials private, and promptly reporting any suspicious activity to us.

Baginda168 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The data retention periods are as follows:

• Active Account Data: Personal data of members with active accounts is retained for as long as the account remains active and for the required period after account closure in accordance with legal obligations.
• Financial Transaction Records: Records of deposits, withdrawals, and betting history are retained for a minimum of seven years in accordance with Malaysia's accounting and AML/CFT legal requirements.
• Identity Verification Data (KYC): Identity verification documents such as copies of MyKad are retained for five years after the business relationship with the member ends, in accordance with BNM Guidelines on AML/CFT.
• Support Communication Logs: Records of live chat conversations and email exchanges with the baginda168 support team are retained for two years for dispute resolution and service improvement purposes.
• Technical Data (Logs): System access logs and technical logs are retained for 90 days for security and technical troubleshooting purposes.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you personally.

The baginda168 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how users interact with our platform. The types of cookies we use are as follows:

Essential Cookies cannot be disabled as they are essential to the core functionality of the baginda168 platform – including login session management, account security, and transaction verification.

Preference cookies (performance, functionality, and analytics) can be managed through your web browser settings. However, disabling certain cookies may affect your experience on the baginda168 platform – for example, language preferences and display settings may not be saved between sessions.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by baginda168. We respect and facilitate the exercise of all these rights:

The baginda168 platform is restricted to individuals aged 18 and above. We do not knowingly collect any personal data from children or individuals under the age of 18.

Should we discover that personal data belonging to a minor has been collected without our knowledge — for example, as a result of registration using false information — we will immediately delete that data and close the account in question. Parents or guardians who believe their child has registered on baginda168 should contact us without delay at support@baginda168.ws.

Baginda168 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform operations. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear in-platform notification on baginda168 at least seven days before any changes take effect.
• Sending email notifications to all registered members who have a valid email address on their account.

Continued use of the baginda168 platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised version. If you do not agree with the changes, you have the right to close your account and withdraw your remaining funds before the changes take effect by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how baginda168 handles your personal information.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way baginda168 handles your personal data, please contact our Data Privacy Officer through the following channels:

• Email: support@baginda168.ws (Please use the subject line "Data Privacy Enquiry")
• Live Chat: Available directly within the baginda168 platform – select the "Privacy & Data" category
• WhatsApp: Number available after logging in to your baginda168 account

Our team operates 24 hours a day, 7 days a week and communicates fully in Bahasa Melayu. We are committed to responding to all privacy-related enquiries within 48 working hours.