LAST UPDATED: JANUARY 2026

Privacy Policy baba8 – Personal Data Protection for Malaysian Members

Baba8 takes the privacy of every member seriously. This document clearly sets out what data we collect, how it is used, who can access it, and your rights as the owner of that data. We believe that transparency in data handling is part of the trust you place in baba8.

Important Note: By registering for and using the baba8 platform, you agree to this Privacy Policy. Please read this document carefully in its entirety. If you have any questions, please contact us at support@baba8.click at any time.
Privacy Summary
  • Your data is protected 256-bit SSL
  • Not shared with third parties without consent
  • Data is used solely for service purposes
  • Your rights access & correction own data
  • Cookies are used for better experience
  • Compliance Malaysia PDPA

Baba8's Privacy Commitment

Six core principles that define how baba8 handles and protects the personal data of every Malaysian member.

256-bit SSL encryption
All data transmitted between your device and baba8's servers is encrypted using 256-bit SSL technology — the same security standard used by Malaysia's major banking institutions such as Maybank and CIMB. Your information cannot be intercepted or read by any unauthorised party.
Data Not Sold
baba8 has never and will never sell, rent, or distribute members' personal data to any third party for marketing purposes. Your information belongs to you — we use it solely to provide you with a better baba8 experience.
Malaysia PDPA Compliance
baba8's Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act (PDPA) 2010. This means your personal data is processed in accordance with the principles established under Malaysian law, and you are entitled to the protections guaranteed by that legislation.
Strict Access Controls
Only baba8 staff with a legitimate operational need are permitted to access members' personal data, and all such access is logged and monitored. baba8's systems use role-based access control (RBAC) to ensure no unnecessary access occurs.
Data Access & Correction Rights
As a baba8 member, you have the right to access the personal data we hold about you, request corrections to any inaccurate information, and in certain circumstances request the deletion of your data. All such requests can be submitted to the baba8 support team at any time.
Limited Retention Period
baba8 does not retain your personal data for longer than necessary for its stated purposes or as required by Malaysian law. Once the data is no longer needed, it is deleted or anonymised in accordance with baba8's established security procedures.
1

Information We Collect

When you register or use the baba8 platform, we may collect various categories of personal information to ensure our services run securely, efficiently, and in compliance with legal requirements. The categories of data we collect are as follows:

Personal Identity Information:

  • Full name as shown on your official Malaysian identification document
  • Identity card number (MyKad) or passport number
  • Date of birth for age verification (18 years and above)
  • Gender
  • Residential address in Malaysia

Contact Information:

  • Malaysian mobile phone number (required for OTP and verification)
  • An active email address

Financial Information:

  • Registered e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
  • Bank account details for FPX transactions (Maybank2u, CIMB Clicks, and other FPX member banks)
  • Deposit and withdrawal transaction history on the baba8 platform

Platform Usage Information:

  • Betting and gaming activity history on baba8
  • Game preferences and frequently accessed categories
  • Bonus claim records and wagering requirement status
  • Interaction logs with the baba8 customer support team

Technical Information:

  • The IP address of the device used to access baba8
  • Device type, operating system, and web browser version
  • Cookie data and session identifiers
  • Geographic location information (state/city level only)

baba8 does not collect sensitive information such as credit card details directly. All financial transactions are processed through certified and secure third-party payment providers. baba8 only receives transaction confirmations — not your full card or bank account details.

2

How We Collect Data

Baba8 collects your personal data through various channels when you interact with our platform:

  • Registration Form: Information you provide directly when registering a baba8 account — your name, phone number, email, date of birth, and any other details requested.
  • KYC (Know Your Customer) Process: Identity verification documents such as a copy of your MyKad or passport that you submit to baba8 for account verification and regulatory compliance purposes.
  • Financial Transactions: Information automatically generated when you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other supported payment method.
  • Gaming Activity: Data automatically recorded while you use the baba8 platform — including games played, bet amounts, winnings, and other account activity.
  • Support Communications: Information you share when interacting with the baba8 support team via Live Chat or email, including enquiries and complaints submitted.
  • Cookies & Tracking Technologies: Data collected automatically via cookies, web beacons, and similar technologies when you browse the baba8 site. Further details on cookies are outlined in Section 6.
  • Third-Party Sources: In certain cases, baba8 may receive information about you from identity verification service providers, payment providers, or fraud prevention agencies working with us to ensure the security of the platform.
3

How Your Data Is Used

Baba8 only uses your personal data for legitimate and necessary purposes. Below is a summary of the key purposes for which baba8 uses your data:

Purpose of UseTypes of Data UsedLegal Basis
Registration & account management Name, email address, phone number, date of birth Contractual agreements
Identity verification (KYC) MyKad / passport, proof of address Legal requirements
Deposit & withdrawal processing E-wallet information, transaction history Contractual agreements
Customer support Account information, interaction logs Baba8's legitimate interests
Fraud prevention & security IP address, device data, activity history Baba8's legitimate interests
Legal compliance & reporting All relevant data categories Legal requirements
Product & platform improvements Anonymised usage data Baba8's legitimate interests
Promotional communications (with consent) Email, phone number Your consent

Baba8 will not use your data for purposes inconsistent with the original reason it was collected without first obtaining your consent. Should there be any change in how your data is used, you will be notified via email or an in-platform notice on baba8.

4

Data Sharing With Third Parties

Baba8 does not sell or distribute your personal data to any third party for marketing purposes. However, in the course of delivering our services, there are situations where your data may need to be shared with certain parties:

  • Payment Providers: Transaction information required for processing is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow, and banks participating in the FPX network, solely for the purpose of processing your deposits and withdrawals. These providers have their own privacy policies and are subject to Malaysian financial industry security standards.
  • Game Providers: Limited technical information may be shared with game providers such as Pragmatic Play, Evolution Gaming, and Microgaming to enable access to their games within the baba8 platform. This does not include your full financial information.
  • Regulatory Body: baba8 may be required to disclose certain data to Malaysian regulatory bodies or government authorities when lawfully requested under applicable legislation.
  • Identity Verification Services: KYC information may be verified through certified third-party services to confirm member identity and prevent fraud.
  • Analytics Services: Anonymised usage data may be shared with analytics services to help baba8 understand platform usage patterns and make product improvements. This data cannot be used to identify you personally.

Important: All third parties with whom baba8 shares data are bound by strict data protection agreements and are required to handle your data to a standard equal to or higher than baba8's own security standards. Data sharing occurs only to the extent necessary for the specified service purpose.

5

Data Security Measures

Baba8 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, modification, disclosure, or destruction:

Technical Security:

  • 256-bit SSL/TLS Encryption for all data communications between the baba8 platform and your device
  • Data encryption at rest for all sensitive information stored in the baba8 database
  • Two-factor authentication (2FA) via SMS OTP for sensitive operations such as withdrawals and password changes
  • 24/7 security monitoring with an automated intrusion detection system
  • Regular security audits by independent third parties to identify and address security vulnerabilities
  • Network segregation between systems containing sensitive data and other systems

Organisational Controls:

  • Access to members' personal data is restricted to baba8 staff with a legitimate operational need only
  • All baba8 staff who handle personal data undergo regular data protection training
  • All access to sensitive data is logged and audited on a regular basis
  • A clearly defined and regularly tested personal data incident response procedure

While baba8 takes all reasonable precautions to protect your data, no digital security system is entirely infallible. In the event of a data breach involving your personal data, baba8 is committed to notifying you within the timeframe required by applicable Malaysian law and taking appropriate remedial action.

6

Cookies & Tracking Technologies

Baba8 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies baba8 uses:

Essential Cookies: These cookies are required for the core functions of the baba8 platform to operate correctly. Without them, you will not be able to log in, access your account, or make transactions. These cookies cannot be disabled as they are essential to the platform's security and functionality.

Functional Cookies: These cookies allow baba8 to remember your preferences such as your preferred language, display settings, and favourite games. They help baba8 deliver a more personalised and consistent experience every time you visit our platform.

Analytics Cookies: baba8 uses analytics cookies to understand how members use our platform — which pages are most visited, how long users spend on the platform, and where technical issues occur. This data helps us make informed decisions to improve the baba8 platform. All analytics data is collected in aggregated and anonymised form.

Security Cookies: Used to detect and prevent fraudulent activity, cyberattacks, and unauthorised access to baba8 accounts. These cookies help us identify suspicious sessions and keep your account secure.

You can manage your cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality and user experience of the baba8 platform. For more information on how to manage cookies in your browser, refer to the official documentation for the browser you are using.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and baba8's privacy policy, you have the following rights regarding your personal data:

Right of Access
You have the right to request a copy of the personal data we hold about you. baba8 will provide this information within 21 working days from the date the request is received.
Right to Correction
If the personal data baba8 holds about you is inaccurate or outdated, you have the right to request a correction. Corrections will be made within 14 business days.
Right to Deletion
In certain circumstances, you have the right to request the deletion of your personal data. Such requests will be assessed against applicable legal requirements and baba8's legitimate operational needs.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. Your objection will be honoured without conditions.
Right to Restrict Processing
You may request that baba8 restrict the processing of your data in certain circumstances, such as when you are disputing the accuracy of the data or the legitimacy of the processing.
Data Portability Rights
You have the right to receive the personal data you have provided to baba8 in a machine-readable format, allowing you to transfer it to another service provider should you wish to do so.

To submit any of the above requests, contact the baba8 privacy team by email at support@baba8.click – stating the type of request, your baba8 account number, and any relevant details. baba8 may require identity verification before processing your request to ensure the security of your data.

8

Protection of Children's Data

Baba8's services are exclusively for individuals aged 18 and above. baba8 does not knowingly collect or process personal data from individuals under the age of 18.

If baba8 becomes aware that personal data of a minor has been collected without parental or guardian consent, we will take immediate action to delete that data and close the associated account. If you suspect that your child or any minor has registered a baba8 account, please contact us immediately at support@baba8.click so that prompt action can be taken.

Parents and guardians are responsible for monitoring their children's online activity. baba8 encourages the use of parental control software and access restriction settings to prevent minors from accessing online betting platforms.

9

Links to Third-Party Websites

The baba8 platform may contain links to or integrations with third-party services such as game providers or payment providers. baba8's Privacy Policy applies only to information collected within the baba8 platform itself.

Baba8 is not responsible for the privacy practices or content of third-party websites and services. Each game provider and payment provider operates under its own privacy policy. We encourage you to review the privacy policy of any third-party service you use in conjunction with baba8.

All third-party integrations on the baba8 platform are selected based on an assessment of their security and privacy compliance standards. baba8 only works with third parties whose security standards are equivalent to or higher than our own.

10

Cross-Border Data Transfers

In operating the baba8 platform, your personal data may be processed at locations outside Malaysia — particularly for functions related to international game providers such as Pragmatic Play, Evolution Gaming, and Microgaming, which maintain servers across various global locations.

Any transfer of personal data outside Malaysia by baba8 is carried out only under the following conditions:

  • The recipient country or region provides a level of data protection equivalent to or greater than that of Malaysia
  • Strict data transfer agreements have been signed with all recipients, ensuring they are bound by the same data protection standards we uphold
  • Data transfers are kept to a minimum — only data that is strictly necessary for service delivery is transferred
  • Additional technical security measures are applied to protect data in transit

Baba8 ensures that your data protection rights remain upheld regardless of where your data is processed.

11

Data Retention Period

Baba8 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. The following are baba8's data retention guidelines:

  • Active Account Data: For as long as your account remains active and you continue using the baba8 platform, your personal data will be retained to ensure smooth and uninterrupted service.
  • Data After Account Closure: Following account closure, baba8 will retain certain records for up to seven (7) years to comply with Malaysian legal requirements relating to financial records and anti-money laundering regulations.
  • Financial Transaction Records: Deposit and withdrawal transaction history is retained for a minimum of seven (7) years from the transaction date, in accordance with Malaysian financial regulatory requirements.
  • Customer Support Logs: Customer support communication records are retained for three (3) years for reference and complaint resolution purposes.
  • Technical & Security Log Data: Security logs and technical data are retained for 90 days to one (1) year for the purposes of security investigations and fraud prevention.

Once the applicable retention period has ended, your data will be securely deleted or anonymised so that it can no longer be used to identify you personally.

12

Contact Us & Policy Updates

If you have any questions, concerns, or requests regarding baba8's Privacy Policy or the handling of your personal data, please reach out to us through the following channels:

  • Email: support@baba8.click
  • Live Chat: Available on the baba8 platform, 24 hours a day, 7 days a week
  • Response: baba8 will respond to all privacy enquiries within 5 business days

Baba8 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or our business operations. Any material changes to this Privacy Policy will be communicated to you via your registered email or a prominent notice within the baba8 platform before the changes take effect.

Continued use of the baba8 platform after the effective date of any amendments to the Privacy Policy will be considered acceptance of the updated policy.

Effective Date: This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions of the baba8 Privacy Policy.

Why Data Privacy Matters at baba8

When you sign up on any online platform — especially one involving financial transactions like baba8 — you are entrusting that platform with highly personal and sensitive information. Your full name. Your phone number. Your e-wallet account details. Your activity history. This is not information you share with just anyone. We at baba8 fully understand the weight of that trust, and we do not take that responsibility lightly.

Baba8's Privacy Policy is more than a legal document written simply to satisfy regulatory requirements. It is a commitment we make to you — a guide to how we handle your data with respect, transparency, and full accountability. Every section of this document reflects baba8's core values: honesty, integrity, and a genuine dedication to protecting our members' interests.

A common concern among players on Malaysia's online betting platforms is whether their data is sold to marketing parties or used in ways they never agreed to. At baba8, the answer is clear and unequivocal: no. baba8 does not sell, rent, or distribute members' personal data to any party for marketing purposes. The information you provide to baba8 is used solely to deliver, protect, and improve the services you use — nothing more.

On the technical side, baba8 invests seriously in data security infrastructure. 256-bit SSL encryption means that every time you log in, make a deposit via Touch 'n Go eWallet or GrabPay, or submit a withdrawal request through DuitNow — all of that communication is encrypted to the same standard used by Malaysia's leading online banking systems. Data stored on baba8's servers is also encrypted, meaning that even in an unforeseen event, your data remains protected from unauthorised access.

A word on cookies — many Malaysian users may feel uncomfortable with the idea of being "tracked" while browsing online. It's worth clarifying that the cookies used by baba8 are not designed to monitor your activity outside our platform. baba8 cookies serve practical purposes: keeping you logged in, remembering your display preferences, and ensuring the platform works properly on your device. The analytics cookies we use only collect data in aggregated, anonymised form — we can see how many members played Gates of Olympus slots on a Friday evening, but we have no way of knowing that it was you.

Baba8 takes your rights as a data subject seriously, in line with the Personal Data Protection Act (PDPA) Malaysia 2010. You have the right to know what data we hold about you, to request a correction if any information is inaccurate, and in certain circumstances to request the deletion of your data. These requests can be submitted to the baba8 support team at any time, and we are committed to processing them within the stipulated timeframe without unnecessary delays.

If you are considering whether baba8 is a platform you can trust with your data — we hope this document gives you a clear picture of our commitment. Privacy is not optional at baba8. It is part of who we are as a platform built for Malaysian players who deserve the highest level of protection in every aspect of their online betting experience.

Frequently Asked Questions – baba8 Privacy Policy

The most frequently asked questions by Malaysian members about privacy and data protection at baba8.

Absolutely not. baba8 does not sell, rent, or distribute members' personal data to any marketing companies, advertisers, or data brokers. Your personal information is used solely for the purposes stated in this Privacy Policy — to provide baba8 services, process your financial transactions, and ensure account security. The only circumstances in which your data may be shared with external parties are with payment providers processing your transactions, game providers who need to verify access, or regulatory bodies when required by law. All such parties are bound by strict confidentiality agreements with baba8.

To request a copy of the personal data we hold about you, send an email to support@baba8.click with the subject line "Data Access Request" along with your baba8 account number. baba8 will process your request within 21 business days. For data deletion requests, the process is the same — simply use "Data Deletion Request" as your email subject. Please note that deletion requests may not be fully fulfilled if the data is required to comply with applicable Malaysian legal obligations — for example, financial transaction records that must be retained for seven years. In such cases, baba8 will inform you of what can and cannot be deleted, along with the valid reasons.

Once your account is closed, baba8 will no longer use your data for any marketing activities or active operations. However, we are required under Malaysian law to retain certain records for a prescribed period — financial transaction records must be kept for up to seven years to comply with the Anti-Money Laundering Act and related legislation. After the mandatory retention period ends, your data will be securely deleted or anonymised. If you would like more details on what data we still retain after your account is closed, please contact the baba8 privacy team at support@baba8.click.

Financial transaction security at baba8 is enforced through multiple layers of protection. First, all communications during transactions are encrypted with 256-bit SSL. Second, baba8 does not store your full bank account or credit card details — payment processing is handled directly by certified payment providers such as Touch 'n Go eWallet, GrabPay, and the FPX network, with baba8 only receiving transaction success confirmations. Third, all withdrawal requests require OTP verification via your registered Malaysian mobile number before they are processed. Fourth, baba8's fraud detection system operates 24 hours a day to identify suspicious transactions and will temporarily freeze the withdrawal process if any unusual activity is detected, to safeguard your funds.

Yes, you can withdraw your consent to receive promotional communications from baba8 at any time. There are a few ways to do this: First, click the "unsubscribe" link found at the bottom of any promotional email we send you. Second, log in to your baba8 account and update your communication preferences under the Profile or Account Settings section. Third, reach out to the baba8 support team via Live Chat or email at support@baba8.click and request to be removed from our marketing communications list. Please note that withdrawing consent for promotional communications does not affect important account-related communications such as transaction confirmations, security alerts, and policy change notices — these are necessary for the security and operation of your account.
YOUR DATA IS SAFE WITH baba8

Play With Confidence at baba8

You now know how baba8 protects your data. Register a free account today and enjoy a safe, transparent, and enjoyable Malaysian online betting experience.

256-bit SSL
Data Not Sold
PDPA Compliance
24/7 BM Support

Baba8 Policy Documents & Further Information

Bahasa Melayu