Data Protection

Privacy Policy

At Baginda168, your privacy is a foundational commitment — not an afterthought. This Privacy Policy explains in clear terms what personal data we collect, why we collect it, how we use and protect it, and the rights you hold as a user of baginda168.cam. Please read this document carefully alongside our Terms & Conditions.

Last Updated: 1 January 2026 Language: English GDPR-Aligned Principles

Our Privacy Commitments

Six principles that govern how Baginda168 handles every piece of your personal data.

Minimal Data Collection

We collect only the personal information that is strictly necessary to operate your account, process transactions, and comply with regulatory obligations — nothing more.

Encryption & Secure Storage

All data in transit is protected by 256-bit TLS encryption. Sensitive data at rest is encrypted using industry-standard algorithms and held on access-controlled infrastructure.

No Third-Party Marketing Sales

Baginda168 will never sell, rent, or trade your personal information to third-party marketers. Your data is used solely for the purposes set out in this Privacy Policy.

Your Rights, Always Respected

You have clear rights to access, correct, port, restrict, and request deletion of your personal data. Submit a request to our support team and we will respond within 30 days.

Transparent Processing

We document the legal basis for every data processing activity. You will always know why we hold your data, for how long, and who may have lawful access to it.

Defined Retention Periods

We retain personal data only as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and anti-money laundering obligations.

This Policy applies to all users of baginda168.cam, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

Questions about your data? Contact us at
[email protected]

1

Introduction

This Privacy Policy ("Policy") is published by Baginda168 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at baginda168.cam ("the Platform"). This Policy describes how Baginda168 collects, processes, stores, shares, and protects the personal data of individuals ("you", "User") who visit, register on, or otherwise interact with the Platform.

Baginda168 is committed to handling personal data with transparency, integrity, and respect for individual privacy. Our data processing practices are aligned with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, which we adopt voluntarily as a standard for responsible data governance.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform as a whole. By registering an account, depositing funds, or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you have any questions about this Policy or how your personal data is handled, please contact our Data Protection team at [email protected] before providing any personal information.
2

Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

Term Meaning
"Personal Data" Any information relating to an identified or identifiable natural person, including name, email address, identification number, financial data, device identifiers, and behavioural data.
"Processing" Any operation or set of operations performed on personal data, including collection, storage, organisation, retrieval, use, disclosure, or deletion.
"Data Controller" The entity that determines the purposes and means of processing personal data — in this context, Baginda168.
"Data Processor" A third party that processes personal data on behalf of Baginda168, pursuant to a data processing agreement.
"Legal Basis" The lawful justification under applicable data protection law for a specific data processing activity (e.g., contractual necessity, legal obligation, legitimate interests, or consent).
"Cookie" A small data file stored on your device by a website, used to remember preferences, maintain sessions, and gather usage analytics.
"KYC Data" Identity verification documents and related information collected to fulfil Know Your Customer obligations, including government-issued identification, proof of address, and payment method verification.
3

Data Controller

Baginda168 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, Baginda168 determines the purposes for which personal data is collected and processed and is responsible for ensuring that processing activities comply with applicable data protection standards.

Baginda168 operates under international online gaming licensing. The Platform is accessible globally, including to users in Malaysia. Users located in Malaysia are responsible for understanding the legal framework applicable to online gambling in their jurisdiction independently.

For data protection enquiries, users may contact Baginda168 at [email protected]. We will acknowledge all data subject requests within 5 business days and endeavour to resolve them within 30 calendar days.

4

Personal Data We Collect

Baginda168 collects personal data through several channels, including direct submission by users during registration and account management, automated collection through platform usage, and from third-party payment providers. The categories of data we collect are described below.

4.1 — Registration & Account Data

When you create a Baginda168 account, we collect: full legal name, date of birth, email address, mobile phone number, residential address, and chosen username. This information is necessary to establish and maintain your account and to verify your eligibility to use the Platform.

4.2 — Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your identity prior to processing withdrawals, we may collect copies of government-issued identification documents (e.g., Malaysian MyKad, passport), proof of residential address (e.g., utility bill, bank statement), and evidence of payment method ownership. KYC data is handled with enhanced security controls and retained only for as long as required by applicable regulatory obligations.

4.3 — Financial & Transaction Data

We collect records of all deposits, withdrawals, and wagers associated with your account, including transaction amounts in MYR, timestamps, payment method types (e.g., DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB, GrabPay, Boost), and transaction reference numbers. Full payment card or bank account numbers are not stored on our servers.

4.4 — Usage & Behavioural Data

We collect data about how you interact with the Platform, including pages visited, games played, bets placed, session duration, search queries, device type, operating system, browser type, IP address, and approximate geographic location derived from your IP address. This data is used to improve Platform performance, personalise your experience, and detect potentially fraudulent activity.

4.5 — Communications Data

When you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution of your enquiry. This data is used for quality assurance, training, and dispute resolution purposes.

4.6 — Responsible Gambling Data

If you set deposit limits, request a self-exclusion, or engage with our responsible gambling tools, we retain records of those elections. This data is processed exclusively to give effect to your responsible gambling preferences and to fulfil our duty-of-care obligations as a licensed gaming operator.

5

Purposes of Processing & Legal Basis

Baginda168 processes personal data only where a valid legal basis exists for that processing. The table below sets out the primary processing activities, their purposes, and the applicable legal basis.

Processing Activity Purpose Legal Basis
Account creation & management Establishing and maintaining your registered account; enabling access to Platform services Contractual necessity
KYC / identity verification Verifying your identity; fulfilling anti-money laundering and licensing obligations Legal obligation; contractual necessity
Payment processing Processing deposits and withdrawals in MYR via approved payment methods Contractual necessity
Fraud prevention & security Detecting and preventing fraudulent activity, account takeover, and money laundering Legitimate interests; legal obligation
Customer support Resolving support queries; maintaining records of interactions for quality and dispute purposes Contractual necessity; legitimate interests
Responsible gambling tools Giving effect to your deposit limit, self-exclusion, and other responsible gambling elections Legal obligation; contractual necessity
Platform analytics & improvement Understanding usage patterns to improve Platform performance, UX, and game selection Legitimate interests
Marketing communications Sending promotional emails, bonus notifications, and platform updates to opted-in users Consent (withdrawable at any time)
Regulatory reporting Complying with reporting obligations to our licensing jurisdiction and, where applicable, financial intelligence authorities Legal obligation
You may withdraw consent for marketing communications at any time by contacting our support team or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
6

Data Sharing & Third Parties

Baginda168 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data with third parties only in the following limited and controlled circumstances:

  • Payment Service Providers: We share transaction data with payment processing partners including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services, solely to facilitate deposits and withdrawals.
  • Identity Verification Services: KYC data may be shared with third-party identity verification providers who process this data on our behalf pursuant to a data processing agreement and under equivalent security standards.
  • Gaming Platform Technology Providers: Game studios and live dealer operators that power games available on the Platform may receive limited session data necessary to deliver their services (e.g., player session tokens, bet amounts). These providers act as Data Processors and are bound by contractual data protection obligations.
  • Fraud Detection & Security Partners: Data may be shared with specialised fraud detection and cybersecurity service providers for the purpose of protecting the Platform and its users against financial crime and account compromise.
  • Legal & Regulatory Authorities: Baginda168 will disclose personal data to regulatory authorities, law enforcement agencies, or licensing bodies where required to do so by applicable law, court order, or our licensing obligations. We will notify affected users where legally permissible to do so.
  • Professional Advisors: Lawyers, auditors, and compliance consultants engaged to advise Baginda168 may access personal data to the extent strictly necessary to provide their professional services, under obligations of confidentiality.
Baginda168 will never share your personal data with third-party gambling operators, data brokers, or advertising networks. If you receive unsolicited communications purportedly from Baginda168, please report them to our support team immediately as they may constitute a phishing or social engineering attempt.
7

Cookies & Tracking Technologies

Baginda168 uses cookies and similar tracking technologies to operate, maintain, and improve the Platform. The following categories of cookies are deployed:

Cookie Type Purpose Duration
Strictly Necessary Essential for Platform operation: session management, security tokens, login authentication, and fraud prevention. Session / up to 24 hours
Functional Remembering your preferences such as language settings, preferred payment methods, and display options. Up to 12 months
Analytical Aggregated, anonymised analytics to understand usage patterns, feature engagement, and performance metrics for Platform improvement. Up to 24 months
Responsible Gambling Storing your responsible gambling preferences, session timer states, and deposit limit acknowledgements. Up to 12 months

You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies may impair Platform functionality. Baginda168 does not deploy third-party advertising or behavioural targeting cookies.

8

International Data Transfers

Baginda168 operates as an internationally licensed gaming platform. Your personal data may be transferred to, and processed in, countries outside Malaysia in connection with the operation of the Platform, our cloud infrastructure, payment processing partners, and game studio technology providers.

Where personal data is transferred internationally, Baginda168 ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with internationally recognised data protection standards. We do not transfer your data to jurisdictions that we have determined to offer an inadequate level of protection without implementing compensating controls.

By using the Platform, Malaysian users acknowledge and consent to the transfer of their personal data to the extent described in this Policy.

9

Data Retention Periods

Baginda168 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any mandatory retention requirements imposed by applicable law or our licensing obligations. The table below sets out our standard retention periods for the principal data categories.

Data Category Retention Period Basis
Account registration data Duration of account + 5 years post-closure Legal obligation (AML / licensing)
KYC / identity documents 5 years post account closure or last transaction Anti-money laundering regulations
Financial transaction records 7 years from transaction date Financial record-keeping requirements
Customer support communications 3 years from interaction date Legitimate interests (dispute resolution)
Responsible gambling records 5 years post account closure Licensing / duty of care obligations
Usage / analytics data (anonymised) Up to 24 months (anonymised) Legitimate interests (Platform improvement)
Marketing consent records Until consent is withdrawn + 1 year Compliance with consent obligations

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

10

Security Measures

Baginda168 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

  • Encryption in transit: All data transmitted between your browser and the Platform is encrypted using TLS 1.2 or above (256-bit encryption).
  • Encryption at rest: Sensitive personal data fields, including KYC documents and financial identifiers, are encrypted at the database layer using AES-256 encryption.
  • Access controls: Access to personal data by Baginda168 staff is restricted on a strict need-to-know basis, enforced through role-based access control systems and multi-factor authentication.
  • Regular security audits: The Platform undergoes periodic penetration testing and security assessments conducted by qualified independent parties.
  • Fraud monitoring: Automated and human-supervised systems monitor Platform activity for indicators of account compromise, financial fraud, and data exfiltration attempts on a continuous basis.
  • Incident response: Baginda168 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to affected individuals, we will notify the relevant supervisory authority and, where required, affected users within applicable timeframes.
No method of electronic transmission or storage is 100% secure. While Baginda168 takes reasonable and proportionate steps to protect your personal data, we cannot guarantee absolute security. If you suspect your account has been compromised, please contact our support team immediately.
11

Your Data Protection Rights

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to the personal data Baginda168 holds about you. These rights may be exercised by submitting a request to [email protected]. We will respond within 30 calendar days.

Right of Access Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure Request deletion of your personal data where we no longer have a lawful basis for holding it, subject to mandatory retention obligations.
Right to Restriction Request that we restrict the processing of your personal data in specified circumstances, such as while we investigate an accuracy dispute.
Right to Data Portability Receive a structured, machine-readable copy of personal data you have provided to us, for transfer to another service provider.
Right to Object Object to processing activities carried out on the basis of legitimate interests, including direct marketing communications.
Right to Withdraw Consent Withdraw consent for consent-based processing activities (e.g., marketing emails) at any time without affecting prior processing.
Rights re: Automated Decisions Request human review of any automated decision that produces legal or similarly significant effects on you.

We may request proof of identity before processing a data subject request to ensure we do not disclose personal data to an unauthorised third party. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

12

Minors & Age Policy

Baginda168 is an adult-only gaming platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

During the registration process, all applicants are required to declare their date of birth and confirm that they are aged 21 or above. Prior to processing any withdrawal, full KYC identity verification — including confirmation of date of birth against government-issued identification — is mandatory.

If Baginda168 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account, with any deposits returned in full and any winnings forfeited.

If you believe that a minor may have accessed or registered on the Platform, please notify us immediately at [email protected].

21+ Only. Providing false date of birth information during registration constitutes a material breach of our Terms & Conditions and may result in account closure and forfeiture of all balances.
13

Policy Amendments

Baginda168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the scope of our services. The most current version of this Policy is always accessible at baginda168.cam/privacy-policy.

Where amendments are material — meaning they significantly alter how we collect, use, or share your personal data — we will notify registered users by email or prominent Platform notification at least 14 days before the changes take effect, where reasonably practicable.

Your continued use of the Platform following the effective date of a revised Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any amendment, you should discontinue use of the Platform and may request account closure by contacting our support team.

14

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which Baginda168 processes your personal data, please do not hesitate to contact us through one of the following channels:

  • Email: [email protected] — for all privacy-related enquiries, data subject requests, and concerns about data processing activities. We aim to respond within 5 business days.
  • Live Chat: Available 24/7 directly through the Platform. Suitable for general questions and initial enquiries. Data subject requests should be submitted via email to ensure a full written record is maintained.
  • Website: baginda168.cam

When submitting a data subject request, please include your registered account email address or username, the nature of your request (e.g., access, rectification, erasure), and any specific data categories or processing activities you are enquiring about. We may request additional verification to confirm your identity before processing the request.

Effective Date: This Privacy Policy is effective from 1 January 2026 and supersedes all prior versions. Baginda168 operates under international gaming licensing. For players aged 21 and above only. All services provided through baginda168.cam.

Your Privacy Is Our Priority

Still have questions about how we handle your data? Our support team is available around the clock to assist — in plain English, not legal jargon.

For players aged 21 and above only. Play responsibly.