Privacy Policy baginda168 – A Data Protection Commitment for Malaysian Players

Baginda168 ("we", "the platform") is committed to protecting the privacy of every member and user of the platform. This Privacy Policy ("Policy") describes our privacy practices, including the types of personal data we collect, how it is used, who it may be shared with, and your rights as a data subject.

Baginda168 operates as an online casino platform offering slots, Live Casino, poker, Roulette and progressive jackpot games to adult players in Malaysia. In running these operations, we need to collect and process certain personal data to ensure our services run safely, efficiently and in compliance with applicable requirements.

We believe that player trust is baginda168's most valuable asset — and that trust cannot be built without full transparency in how we handle your data. That is why this Privacy Policy is written in plain, straightforward language, not legal jargon that requires a lawyer to interpret.

Baginda168 collects two main categories of data: information you provide to us directly, and data collected automatically as you use the platform.

Data you provide directly:

• Identity information: Full name, date of birth, identification card number (for verification)
• Contact information: Email address, phone number
• Account information: Username and password (stored in hashed form — unreadable by anyone, including baginda168 staff)
• Financial information: E-wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or bank account details for deposit and withdrawal purposes
• Verification documents: Copies of identity cards or related documents requested during the identity verification process

Automatically collected data:

• IP address and geographic location information (country and city)
• Device type, operating system, and browser used
• Game session data including date, time, game type, bet amount and outcome
• Deposit and withdrawal transaction history
• Communication records with the customer support team
• Platform usage data including pages visited and time spent on the platform

Your personal data is collected by baginda168 through the following methods:

• Account registration: When you register a new account at baginda168, you provide basic information directly, such as your name, email address or phone number, and date of birth.
• Platform usage: When you play games, make deposits, request withdrawals, or use any platform feature, our system automatically records relevant data for security, audit, and service improvement purposes.
• Identity verification process: When baginda168 requests identity verification — for example, for withdrawals exceeding RM5,000 or where suspicious activity is detected — you will be asked to submit a copy of your identity document.
• Customer support communications: When you contact the baginda168 support team via live chat or email, records of those communications are retained for training, quality assurance, and reference purposes in the event of a dispute.
• Cookies and similar technologies: As described in Section 8, baginda168 uses cookies and similar tracking technologies to enhance the user experience and platform security.

Baginda168 does not purchase personal data from third-party sources and does not use data brokers to obtain information about our members or prospective members.

Baginda168 uses your personal data solely for legitimate and necessary purposes. The following is a complete list of data usage purposes at baginda168, along with their legal justifications:

Baginda168 will not use your data for any purpose not listed above without your prior consent. If you do not wish to receive promotional communications from baginda168, you may withdraw your consent at any time through your account settings or by contacting our support team.

Baginda168 takes a strictly limited approach to data sharing. We do not sell, rent, or hand over members' personal data to external parties for marketing or commercial purposes. Data sharing occurs only in the following limited and necessary situations:

• Payment service providers: Transaction information is shared with e-wallet service providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (via DuitNow and FPX) as necessary to process your deposits and withdrawals. These providers are subject to their own privacy and security policies.
• Game providers: To ensure games function properly, basic session data (not your full personal details) is shared with game providers such as Pragmatic Play and Evolution Gaming. This is required to process bets and game outcomes.
• Legal obligation: baginda168 will disclose personal data when required to do so by law, court order, or directive from a competent authority. We will notify you of any such disclosure where permitted by law.
• Security safeguards: In situations where there is a serious threat to platform security, certain data may be shared with cybersecurity service providers acting as our data processors.

Baginda168 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption of data in transit: All communications between your device and baginda168's servers are protected by TLS 1.3 with AES-256-GCM encryption — the same standard used by banking institutions in Malaysia.
• Data encryption at rest: Sensitive data — including financial information and identity documents — is stored in encrypted form on baginda168's servers. Passwords are stored as hashed values using the bcrypt algorithm, meaning no one, including our staff, can ever read your password.
• Access controls: Access to member personal data at the baginda168 system level is governed by a minimum privilege principle — each staff member can only access the data required for their role. All access is logged and monitored.
• Two-factor authentication: For sensitive operations within baginda168's internal systems, two-factor authentication is mandatory for all staff with access to user data.
• Regular security audits: baginda168's security systems undergo regular penetration testing and independent security audits.
• Incident response plan: baginda168 has a clearly defined incident response procedure to address any potential data breach. Should an incident materially affect your data, you will be notified within 72 hours.

While baginda168 takes every reasonable step to protect your data, no digital security system can guarantee complete 100% protection. We encourage you to take your own security precautions as well — use a strong and unique password, do not share your login credentials, and ensure that any device used to access baginda168 is kept up to date with the latest security patches.

Baginda168 retains your personal data only for as long as necessary for the purposes set out in this Policy, or as required by law. The following is a general guide to data retention periods at baginda168:

Once the retention period expires, or upon your request for data deletion (where no legal obligation prevents it), baginda168 will delete or anonymise the relevant data within 30 days. Fully anonymised data — where your identity can no longer be linked to it — may be retained for a longer period for statistical analysis purposes.

Baginda168 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and analyse usage patterns. The following types of cookies are used:

• Essential cookies (required): These cookies are essential for the basic operation of the baginda168 platform, including maintaining your login session, remembering your betting cart contents, and securing transactions. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Performance cookies: This collects information about how you use baginda168 — which pages you visit most often, how long you spend in each section, and any error messages you encounter. All of this information is gathered in aggregate form and does not personally identify you.
• Functional cookies: This allows the baginda168 platform to remember your preferences — such as language, VIP level, and display settings — so we can deliver a more personalised experience every time you return.
• Security cookies: Used by baginda168's anti-fraud system to identify and prevent unauthorised access attempts, bot attacks, and other malicious activity.

You can manage your cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of the baginda168 platform — particularly the ability to stay logged in and use the platform's security features.

As a baginda168 member and data subject, you have the following rights regarding your personal data that we hold. All requests relating to these rights may be submitted by email to support@baginda168.wine:

• Right to access: You have the right to obtain a copy of the personal data we hold about you, including account information, transaction records, and communication history. Requests will be processed within 30 days.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. For basic details such as your phone number or email address, you can update these yourself directly through your account settings.
• Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal data from baginda168's systems. This right is subject to data retention obligations imposed by law — we may be unable to fulfil a complete deletion request where there is a legal requirement to retain certain data.
• Right to restrict processing: You may request that baginda168 restrict the processing of your data in certain circumstances — for example, while you are disputing the accuracy of your data or while a complaint is under investigation.
• Right to portability: You have the right to receive the personal data you have provided to baginda168 in a machine-readable format (JSON or CSV) for transfer to another service if required.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. Such objection will be enforced immediately.

Baginda168 will respond to any request relating to the above rights within 30 days of receipt. If your request is complex or involves a large volume of data, we may require up to 60 days — however, you will be informed of this extension within the first 30 days.

Baginda168 is an adult entertainment platform and is strictly prohibited for individuals under the age of 18. We do not knowingly collect personal data from minors.

Measures baginda168 takes to prevent registration by underage individuals include:

• Date of birth is required during registration — the system will automatically reject any application where the date of birth indicates the applicant is under 18 years of age
• Right to request age verification via official documents at any time
• Immediate closure of any account found to belong to a minor

If you become aware that someone under the age of 18 has registered for or is using the baginda168 platform, please notify us immediately at support@baginda168.wine. We will act promptly to close the account in question and process any related refunds in accordance with our established procedures.

Baginda168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to the services we offer.

When changes are made to this Policy:

• The "Updated" date at the top of this document will be revised to reflect the date of the most recent changes
• For material changes — those that significantly affect how we collect, use, or share your data — notice will be sent to your registered email address or phone number at least 7 days before the changes take effect.
• For non-material changes such as spelling corrections, language clarifications or updates to contact information, changes take effect immediately

We encourage you to review this Privacy Policy periodically to stay informed about how baginda168 protects your information. Continued use of the platform after any changes take effect will be considered your acceptance of the updated Policy.

If you have any questions, concerns, or complaints regarding how baginda168 handles your personal data, or if you wish to exercise any of the rights outlined in Section 9, please contact us through the following channels:

• Email: support@baginda168.wine – For privacy-related enquiries and data rights requests. Include "PRIVACY" in the email subject line for faster processing.
• Live chat: Click the live chat icon on any baginda168 page — available 24 hours a day, 7 days a week in Bahasa Melayu.

Our response times for privacy-related enquiries are as follows:

• General enquiries via live chat: Under 2 minutes
• Data access requests by email: 30 working days
• Data deletion requests via email: 30 working days
• Privacy complaints: 14 working days for acknowledgement, 30 days for resolution

Baginda168 values all feedback and complaints related to privacy — they help us continually improve our data protection practices for the benefit of all members.