Baje999 Privacy Policy – Personal Data Protection for Malaysian Members

Baje999 is an online betting and casino platform operating in Malaysia and serving members nationwide. As a digital platform operator that handles members' financial and personal information, we take our responsibility to respect and fully protect every member's privacy very seriously.

This Privacy Policy applies to all personal information we collect through:

• The baje999 website at https://baje999.site and all associated subdomains.
• The baje999 mobile web platform, accessible via any smartphone browser.
• Communications with the baje999 support team via live chat, email, or WhatsApp.
• Processing financial transactions (deposits and withdrawals) through Malaysian payment methods.
• Baje999 VIP Rewards Programme and promotional activities.

This Policy does not apply to third-party websites or services that may be linked from the baje999 platform. baje999 is not responsible for the privacy practices of those parties, and we encourage you to read their privacy policies separately should you access those external services.

Baje999 only collects personal data that is necessary to operate the platform safely and deliver quality service to members. The categories of data we collect are as follows:

Personal Identification Data:

Financial and Transaction Data:

Platform Activity Data:

Technical Data:

Baje999 does not collect sensitive personal data such as medical information, criminal records, or biometric data, unless specifically required by applicable Malaysian law or for KYC identity verification purposes as prescribed by regulation.

Baje999 collects and processes your personal data solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, maintaining, and managing your baje999 account, including identity verification, password resets, and profile management.
• Financial Transaction Processing: Processes deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), and manages fund withdrawals to your account.
• Service Provision: Provides access to all baje999 games — slots, live casino, Sports Betting for the Malaysian Super League and EPL, badminton, and e-sports MPL Malaysia — and ensures a seamless gaming experience.
• Fraud Prevention and Security: Identifying and preventing fraudulent activity, money laundering, unauthorised access, and violations of baje999's Terms & Conditions.
• VIP Programme & Promotions: Calculating VIP tier status, distributing cashback and rewards, and keeping you informed about relevant baje999 promotions (with your consent).
• Legal Compliance: Fulfilling obligations under Malaysia's PDPA 2010, lawful requests from law enforcement authorities, and anti-money laundering (AML) procedures.
• Service Improvement: Analyses usage patterns in aggregate (not individually) to improve platform performance, user interface, and the various baje999 games.
• Customer Support: Enables the baje999 support team to handle your enquiries, complaints, and requests efficiently and accurately.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling and providing appropriate assistance to members who need it.

Baje999 will not use your personal data for any purpose other than those stated above without first obtaining your renewed consent.

Under the Personal Data Protection Act 2010 Malaysia (PDPA 2010), baje999 processes your personal data on the following valid legal bases:

• Your Consent: When you register a baje999 account and agree to this Privacy Policy, you give baje999 consent to process your personal data for the stated purposes. You may withdraw your consent at any time; however, this may affect our ability to provide you with the full range of services.
• Contractual Performance: Processing required to fulfil the contract between you and baje999 – including transaction processing, account management, and the provision of the betting and casino services you have registered for.
• Legitimate Interest: Processing required for baje999's legitimate interests, such as fraud prevention, platform security, and service improvement, provided this does not override your fundamental rights and interests.
• Compliance with Legal Obligations: Processing required to comply with PDPA 2010, anti-money laundering (AML) regulations, and lawful requests from Malaysian law enforcement authorities.

Baje999 never sells or rents members' personal data to any third party. However, in the course of running a secure and efficient platform, baje999 may share data with the following categories of third parties under limited and controlled circumstances:

• Payment Service Providers: The payment gateways processing DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX transactions require the transaction data necessary to process payments. All these providers comply with PCI-DSS standards and Bank Negara Malaysia regulations.
• Casino and Sports Software Providers: Partners such as Evolution Gaming, Pragmatic Play, SA Gaming, and other providers that supply games on the baje999 platform may receive the minimum technical data required to run the games and verify results.
• KYC Service Providers: Third-party identity verification companies that assist baje999 with the KYC process to authenticate identity documents submitted by members.
• Cloud Infrastructure Providers: baje999's servers and infrastructure are operated through world-class cloud providers. All stored data is held within a protected and encrypted environment.
• Law Enforcement Bodies: baje999 will disclose personal data to the police, the Malaysian Anti-Corruption Commission, or other enforcement bodies when required by a valid court order or under applicable Malaysian law.

In all cases of data sharing with third parties, baje999 ensures appropriate data processing agreements are in place, limits shared data to the minimum necessary, and verifies that the third parties concerned maintain data protection standards comparable to those of baje999.

Baje999 continuously invests in security infrastructure and procedures to ensure members' personal data remains protected at all times. Key security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and baje999's servers is encrypted using TLS 1.3 protocol with 256-bit encryption keys. This means that even if your communication is intercepted, the data cannot be read.
• Encryption of Stored Data: Sensitive data stored in baje999's databases – including identification information and financial records – is encrypted using AES-256 at rest.
• Role-Based Access Control: Only baje999 staff who require data access to carry out their specific job responsibilities are permitted to do so. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): All staff access to baje999's internal systems requires two-factor authentication. Members are also encouraged to enable 2FA on their accounts.
• 24/7 Security Monitoring: baje999's security team continuously monitors all platform activity to detect unauthorised access attempts, cyberattacks, or suspicious behaviour.
• Periodic Penetration Testing: baje999 conducts regular security (penetration) testing by independent third parties to identify and address potential system vulnerabilities before they can be exploited.
• Incident Response Plan: baje999 has a detailed data security incident response procedure in place. In the event of a data breach affecting members' personal data, we will notify the affected members and relevant authorities within the timeframe stipulated by the PDPA 2010.

While baje999 takes all reasonable measures to protect your data, no system can guarantee absolute 100% security. We encourage you to play your part in keeping your account safe by using a strong password, enabling 2FA, and never sharing your baje999 login details with anyone.

Baje999 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration of your baje999 account and for an additional period after account closure as specified below.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, as required under Malaysian tax and anti-money laundering laws.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of last verification, in line with Malaysia's AML compliance requirements.
• Support Communication Logs: Retained for 3 years from the date of interaction for reference and dispute resolution purposes.
• Gaming & Betting Data: Game session and betting records are retained for 3 years for dispute resolution and security analysis purposes.
• Technical Data (IP Logs, Cookies): Retained for a maximum of 12 months unless a longer period is required for an ongoing security investigation.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. This deletion process is carried out systematically according to a schedule established by baje999.

The baje999 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. The types of cookies used are as follows:

• Essential Cookies (Required): These cookies are required for the core functions of the baje999 platform, such as login authentication, session security, and account balance management. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Performance Cookies: Used to collect aggregated usage statistics – most visited pages, time spent, most popular games – which help baje999 improve the platform. This data does not identify you personally.
• Functional Cookies: Saves your preferences — such as language, display settings, and game choices — so you don't have to reconfigure them every time you log in to baje999.
• Security Cookies: Helps baje999 detect suspicious activity, unusual login attempts, and protect your account from unauthorised access.

You can manage or disable certain cookies through your browser settings. However, disabling essential cookies may significantly affect the functionality of the baje999 platform. For more information on managing cookies in browsers commonly used in Malaysia, refer to the help documentation for Chrome, Firefox, Safari, or your preferred browser.

Baje999 does not use third-party tracking pixels for external advertising purposes on our platform. Any analytics in use are solely for internal platform improvement at baje999.

As a baje999 member whose personal data we process, you have the following rights under Malaysia's Personal Data Protection Act 2010:

In the course of operating the baje999 platform, members' personal data may be transferred to and stored on servers located outside Malaysia – specifically in locations where our casino software providers and cloud infrastructure partners operate. This is a common technical requirement for global digital platforms.

When baje999 transfers personal data outside Malaysia, we ensure:

• The recipient country or region maintains a level of data protection comparable to Malaysia's PDPA 2010, or
• Appropriate and binding data transfer agreements have been signed with data recipients, obligating them to protect your data to baje999's standards, or
• The transfer is carried out with your explicit consent or to fulfil a contractual obligation you have agreed to.

If you would like to know more about the countries or regions where your personal data may be processed, or about the safeguards in place, please contact us at support@baje999.site with the subject line "Cross-Border Data Transfer Enquiry".

The baje999 platform is strictly restricted to individuals aged 21 years of age and above. baje999 does not intentionally collect or process any personal data from individuals under the age of 21.

Should we discover that personal data belonging to a minor has been collected inadvertently, we will take immediate action to delete that data and close the account in question. This decision is final and not subject to appeal.

If you are a parent or guardian and believe that your child who is under the age of majority has a baje999 account or has provided personal data to our platform, please contact us immediately at support@baje999.site with the subject line "Children's Privacy Complaint". We will investigate and take immediate action.

Baje999 uses a combination of age verification during registration, KYC document checks, and active monitoring to prevent underage access to the platform. While technology cannot guarantee perfect age verification in every circumstance, we are committed to minimising this risk by every means available to us.

Baje999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform operations, Malaysian legal requirements, or industry practices. You will be notified of any material amendments through:

• In-platform notifications on baje999 when you log in after an amendment takes effect.
• Notification emails sent to the address registered with your baje999 account.
• Update the version number and effective date at the top of this page.

We encourage you to review this Privacy Policy periodically — at least once a year — to stay informed about how baje999 manages your personal data. Continued use of the baje999 platform after an amendment takes effect will be considered acceptance of the updated Privacy Policy.

If you do not agree with the changes made, you have the right to close your baje999 account and request deletion of your personal data (subject to applicable legal retention obligations) before the updated Policy takes effect.

For any enquiries, concerns, or requests relating to this Privacy Policy or the management of your personal data at baje999, please contact us through the following channels:

• Privacy Email: support@baje999.site – use the subject line "Privacy Policy Enquiry" or "Data Rights Request". Our typical response time is within 2–4 business days.
• Live Chat: For privacy enquiries requiring a prompt response, use the live chat function within the baje999 platform and indicate that your enquiry relates to data privacy — you will be connected with trained staff who can assist you.
• WhatsApp: The baje999 support WhatsApp number is available after you log in to your account for security purposes.

For formal complaints about how baje999 handles your personal data that cannot be resolved through the channels above, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital. That said, we encourage you to contact baje999 first so we have the opportunity to resolve any issues directly and promptly before external intervention becomes necessary.

Baje999 takes all privacy complaints seriously. Every complaint will be thoroughly investigated, and we are committed to providing a full and clear response within the stipulated timeframe.