Privacy Policy Baji99 – Your Personal Data Protection

1Introduction and Scope of This Policy

Baji99 ("we", "Platform", "company") is fully committed to protecting the privacy and security of every member's personal information on our online wagering platform. This Privacy Policy clearly and transparently explains how baji99 manages your personal data — from how it is collected to how it is protected and deleted.

This document is drawn up in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international data protection standards. We believe transparency is the foundation of trust – which is why we strive to explain every aspect of our data management in language that is easy for our members across Malaysia to understand.

This Privacy Policy applies to all channels we operate, including the official baji99 website, Android and iOS mobile apps, and all related services offered under the baji99 brand. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team for further assistance.

2Types of Personal Data We Collect

Baji99 only collects the personal data necessary to provide our members with a safe, compliant, and high-quality service. The data collected can be grouped into three main categories:

3How We Collect Personal Data

Your personal data is collected through several different channels throughout your use of the baji99 platform. The following are the main data collection methods we use:

• Account Registration: Basic information such as name, email, phone number, and date of birth is collected directly when you register a new baji99 account.
• KYC Verification Process: Identity documents such as national ID cards, passports, or driving licences uploaded by members during the mandatory identity verification process.
• Financial Transactions: Deposit and withdrawal information is collected automatically through payment systems integrated with the baji99 platform.
• Platform Usage: Technical data and game data are collected automatically via cookie technology, tracking pixels, and server logs while you use the platform.
• Support Communications: Chat logs, emails and support tickets are retained for service quality purposes and case history reference.
• Referral Programme: If you use or receive a referral link, baji99 records the relevant referral information to calculate the appropriate commissions and benefits.
• Third-Party Services: In certain cases, we may receive additional information from identity verification providers or payment processors working with baji99.

4Purpose of Personal Data Use

Every piece of data collected by baji99 is used for specific, legitimate and transparent purposes. We do not use your data for any purpose not stated in this policy without obtaining your additional consent.

• Account Management: To create, maintain and protect your baji99 account, including login verification and password management.
• Transaction Processing: To process deposits, withdrawals and bonus payments accurately and securely through supported payment methods.
• Identity Verification (KYC): To ensure all members meet the minimum age requirement of 18 years and to comply with anti-money laundering (AML) requirements.
• Platform Security: To detect and prevent fraud, system abuse, intrusion attempts and any unlawful activity that could compromise the platform or other members.
• Personalising Your Experience: To recommend relevant games, display suitable promotions and customise the platform interface based on your habits and preferences.
• Customer Support: To help resolve enquiries, complaints and technical issues more quickly and effectively using your account history.
• Marketing Communications: To send information about promotions, bonuses and platform updates — only if you have agreed to receive marketing communications from baji99.
• Legal Compliance: To fulfil reporting obligations to Malaysian authorities and relevant regulatory bodies as required by law.

5Data Sharing with Third Parties

Baji99 does not sell, rent, or disclose members' personal data to third parties for commercial marketing purposes. However, in certain operational situations, we may need to share limited information with the following parties:

• Payment Service Providers: Payment processors and banking institutions involved in member deposit and withdrawal transactions, for secure processing purposes only.
• KYC and Identity Verification Providers: Third-party verification companies that assist baji99 in verifying member identity and age in line with compliance requirements.
• Game Providers: Game software providers that supply slots, live casino, and betting products to the baji99 platform – only information necessary for game operation is shared.
• Authorities and Regulatory Bodies: Law enforcement agencies or legitimate regulatory bodies when baji99 is required by Malaysian law to disclose relevant information.
• Technology Infrastructure Providers: Cloud and hosting service providers that store and process data on behalf of baji99, subject to strict confidentiality agreements.

All third parties that receive data from baji99 are required to comply with confidentiality and data security standards equivalent to or exceeding those of baji99. Data sharing is kept to a minimum and limited strictly to information that is genuinely necessary.

6Data Security Measures We Take

Baji99 continually invests in sophisticated cybersecurity infrastructure to ensure your personal data is protected at all times. The security measures we employ include:

• End-to-End Encryption: All data communications between your device and baji99's servers are protected by 256-bit SSL/TLS encryption.
• Two-Factor Authentication (2FA): The 2FA system is available to all member accounts to add an extra layer of security beyond passwords alone.
• Real-Time Monitoring: A 24/7 threat detection system monitors all platform activity to identify suspicious patterns or intrusion attempts.
• Regular Security Audits: Baji99 conducts regular internal and external security audits to identify and address vulnerabilities in our systems.
• Role-Based Access Control (RBAC): Only baji99 staff with specific roles and permissions may access member data, with every access recorded in an audit log.
• Secure Data Backup: Member data is regularly backed up to a secure, separate location to ensure service continuity under all circumstances.

7Cookies, Pixels, and Tracking Technologies

Baji99 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure the security of your account. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collects data on how you use the platform – pages visited, time spent, and any errors encountered. This information is used to improve platform quality.
• Functional Cookies: Saves your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you use the platform.
• Analytics Cookies: Helps the baji99 team understand platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the baji99 platform. For more information on managing cookies, please refer to your web browser's help guide.

8Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a baji99 member have certain rights regarding your personal data. baji99 fully respects and upholds these rights:

9Data Retention Period

Baji99 does not retain your personal data longer than necessary for the purposes stated in this policy. Retention periods depend on the type of information and applicable legal requirements:

• Active Account Data: For as long as your baji99 account remains active, your personal data will be retained to allow the platform to function properly.
• Post-Account Closure Data: After account closure, core data is retained for 5 years in line with Malaysian AML/KYC legal requirements.
• Financial Transaction Records: Stored for a minimum of 7 years as required by the Financial Services Act and tax reporting requirements.
• Support Communication Logs: Chat logs and support tickets are retained for 3 years for service quality reference and case history.
• Technical Data & System Logs: Access and technical activity logs are retained for 12 months for security and threat detection purposes.
• Marketing Data: If you withdraw your marketing consent, the relevant data will be deleted within 30 days from the date of the request.

Once the retention period ends, your data will be securely deleted or anonymised so it can no longer be personally linked to you.

10Privacy Policy Amendments

Baji99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data management practices, legal requirements, or the way we operate our services. When material amendments are made, we will:

• Displaying clear notices on the baji99 website and app regarding the amendments made.
• Sending a notification to the registered email address if the amendments involve material changes to your privacy rights.
• Updating the "Last Updated" date at the top of this document.
• Maintaining an archive of previous versions for members who need to refer to them.

It is your responsibility as a member to review the Privacy Policy periodically. Continued use of the baji99 platform after any amendment is published will be considered acceptance of the updated privacy terms. If you disagree with the changes made, please stop using the platform and contact us to close your account.