Baji99 Privacy Policy – Our Commitment to Protecting Your Data

Welcome to the baji99 Privacy Policy page. This document is a formal agreement between you as a user and baji99 regarding how we manage your personal information. We understand that personal data is a valuable asset, and we are fully committed to ensuring it is protected in the most transparent and responsible manner.

Baji99 operates as an online entertainment platform in compliance with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA). Every decision involving your data is made with your security, confidentiality, and trust as our top priority.

By using any part of the baji99 platform — whether through the website, mobile app, or any of our official communication channels — you are deemed to have read, understood, and agreed to this privacy policy in full. If you do not agree with any part of this policy, please stop using the platform and contact our support team for further assistance.

Baji99 only collects personal data that is strictly necessary to provide our services safely and efficiently. The information we collect falls into three main categories:

All data is collected directly from you during the registration process, KYC verification, transaction activity, and regular platform use. We do not purchase or obtain your personal data from third-party sources without your knowledge.

Every use of your personal data by baji99 is based on a valid legal basis and a clearly defined purpose. We do not use your data for any purpose not stated in this policy without obtaining your consent in advance.

• Account management — To open, verify, update, and manage your user account, including the mandatory KYC process.
• Transaction processing — To process deposits, withdrawal of wins, and other financial activities safely and efficiently using your preferred payment method.
• Platform security — To detect and prevent fraud, money laundering, unauthorised access, and any activity that violates the terms of use.
• Customer Support — To respond to inquiries, resolve complaints, and provide the technical assistance you require.
• Marketing communications — To send promotional information, bonus offers, and the latest platform updates, subject to the communication preferences you have set.
• Responsible gaming — To monitor gaming habits and identify users who may require additional support or protection.
• Legal compliance — To comply with legal requirements, regulatory obligations, and requests from lawful authorities in accordance with Malaysian law.
• Service improvement — To analyse usage patterns, identify technical issues, and improve the overall user experience.

Baji99 will not use your data to make automated decisions that could have a material impact on your rights or interests without human intervention and adequate explanation.

Baji99 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. Your data is only shared in specific situations outlined below, and every instance of sharing is carried out with strict security controls:

• Payment service providers — Financial institutions, digital wallet providers, and payment processors required to complete your transactions. They are bound by strict confidentiality agreements.
• Game software providers — Third-party game software companies that provide slot games, live casino, and other games on our platform, limited to the information necessary to operate the games correctly.
• Identity verification — Accredited KYC service providers who assist us in verifying user identities and complying with anti-money laundering (AML) requirements.
• Legal authorities — Law enforcement agencies, courts, or regulatory bodies when required by law or a valid court order in Malaysia.
• Professional advisors — Lawyers, auditors, and consultants bound by professional confidentiality obligations when providing services to baji99.

Baji99 invests seriously in security infrastructure to ensure your personal data is always protected against unauthorized access, loss, alteration, or disclosure. The security measures we employ cover multiple layers of protection:

• 256-bit SSL Encryption — All communication between your device and baji99 servers is encrypted using SSL 256-bit, ensuring data cannot be intercepted during transmission.
• Data encryption at rest — Sensitive data stored in our databases is encrypted using the AES-256 encryption algorithm, which represents the highest security standard in the industry.
• Two-factor authentication (2FA) — Users are encouraged to enable 2FA to add an extra layer of security to their account, making it significantly harder for unauthorised parties to gain access.
• 24/7 security monitoring — The baji99 IT security team continuously monitors our systems to detect any suspicious activity or security threats.
• Internal access control — Access to users' personal data among baji99 staff is restricted to individuals who genuinely need it to perform their duties, based on the principle of least privilege.
• Regular security audits — We conduct penetration testing and security audits by independent experts on a regular basis to identify and address any system vulnerabilities.

While we take all reasonable precautions, no security system can guarantee 100% absolute protection. In the event of any data breach affecting you, baji99 will notify you within the timeframe required by law and take immediate remediation steps.

Baji99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and deliver a more personalized experience.

• Essential cookies — These cookies are required for core platform functions such as login authentication and session security. They cannot be disabled without affecting platform functionality.
• Performance cookies — Helps us understand how users interact with the platform, which pages are most popular, and where technical issues may occur.
• Functional cookies — Stores your preferences such as language, display settings, and other preferences to facilitate your use of the platform.
• Analytics cookies — Helps us analyse traffic and usage patterns for continuous improvement of the platform and its content.

You can control or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the baji99 platform. For more information on managing cookies, refer to your browser's help section.

Under Malaysia's Personal Data Protection Act 2010 and baji99's privacy policy, you have certain rights regarding the personal data we hold about you. We fully respect these rights and provide straightforward mechanisms for you to exercise them:

To exercise any of the above rights, please contact our data protection team via email at [email protected]. We will verify your request and process it within the timeframe required by law.

Baji99 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by law. Once data is no longer needed, it will be securely deleted or anonymized using industry-approved methods.

• Active account data — Retained for the duration your account remains active and used to manage your services on an ongoing basis.
• Financial transaction data — Retained for at least seven (7) years after a transaction occurs, in line with Malaysia's taxation and accounting legal requirements.
• KYC verification records — Retained for at least five (5) years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Security and access logs — Retained for 90 days for the purpose of security incident investigation and fraud prevention.
• Support communication data — Conversation records and support tickets are retained for two (2) years for reference and service improvement purposes.
• Closed account data — After an account is closed, basic data is retained for the minimum period required by law before being permanently deleted.

Baji99 is an entertainment platform exclusively for individuals aged 18 and above. We do not accept registrations or platform access from anyone under 18, and we do not knowingly collect any personal data from minors.

If you believe or suspect that someone under the age of 18 has registered for or is using the baji99 platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take the necessary action, including closing the relevant account and deleting all collected data.

Baji99 reserves the right to amend or update this privacy policy at any time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any significant changes will be communicated to you via your registered email or an in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. You are encouraged to check this page periodically to stay informed about how we protect your information. Continued use of the platform after a revision's effective date is considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding how baji99 manages your personal data, or if you wish to exercise any of the data rights stated in this policy, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Response time: Within 3 business days for general inquiries; 21 business days for formal data rights requests
• Operating hours: 24 hours a day, 7 days a week

We take every privacy-related complaint seriously and will investigate and respond within the stipulated timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Personal Data Protection Department or the relevant regulatory authority.