PERSONAL DATA PROTECTION FOR MALAYSIAN PLAYERS

Privacy Policy bdbaji – Our Commitment to Protecting Your Personal Information

Bdbaji takes our responsibility to protect every member's privacy seriously. This policy details the types of information we collect, how it is used, who can access it, and your rights as a bdbaji platform user in Malaysia.

Last updated: January 2026  |  Bahasa Melayu (ms-MY)

Protection Summary
Encryption256-bit SSL
Data StorageSecure servers
Data SharingNot Sold
Third-Party AccessLimited & controlled
User RightsAccess & deletion
Privacy ContactSupport@bdbaji.site

Bdbaji's Six Privacy Commitments to Every Member

This isn't just a policy statement — this is how bdbaji's data protection systems actually operate, every single day

Bank-Grade Encryption

All data transmitted between your device and bdbaji's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks such as Maybank and CIMB. This means no third party can read or intercept your information in transit.

Your Data Is Never Sold

Bdbaji never sells, rents or trades members' personal information to any third party for marketing or commercial purposes. Your data belongs to you — we use it only for the purposes stated in this policy and nothing more.

Secure Data Storage

All personal and financial information belonging to bdbaji members is stored on servers protected by multi-layered access controls, intrusion detection systems, and scheduled automatic backups. Both physical and digital access to these databases is strictly limited to authorised bdbaji staff only.

Control in Your Hands

As a bdbaji member, you have the right to access the personal data we hold about you, request corrections if anything is inaccurate, and under certain circumstances, request that your data be deleted. You can submit any of these requests to the bdbaji support team at any time.

Privacy in Gaming Activity

Your gaming history, betting records, and account activity are strictly confidential. bdbaji does not share individual activity records with anyone outside the organization unless required by law or necessary to resolve a dispute involving that account.

Marketing Communications Control

You can opt out of all marketing communications from bdbaji at any time — whether promotional emails, SMS notifications, or in-app alerts — by updating your communication preferences in your account settings or via the unsubscribe link included in every email we send.

Important Note: This Privacy Policy describes the data protection practices of bdbaji ("Platform", "we", "us"). By registering an account or using any bdbaji service, you agree to the collection and use of information as described in this policy. If you do not agree, please stop using the platform and contact us to close your account.

1

Personal Information We Collect

Bdbaji collects personal information from members through several means — directly when you complete the registration form, automatically through your use of the platform, and occasionally via authorized third parties such as payment service providers. We only collect information that is genuinely necessary to deliver bdbaji's services safely and effectively.

Types of information collected by bdbaji:

Identity Information
Full name, Malaysian identity card number (collected during the KYC verification process), date of birth and gender. This information is required to verify your identity and confirm that you meet the minimum age requirement of 18 years.
Contact Information
Malaysian phone number (used for OTP during registration and verification), email address, and where voluntarily provided, residential address. Phone number is a required field; email is optional but strongly recommended for account security.
Financial Information
Records of deposits and withdrawals, payment methods used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, or CIMB Clicks), transaction amounts, and full transaction history. bdbaji does not directly store credit or debit card numbers — payment processing is handled by licensed third-party payment providers.
Gaming Activity Data
Gaming history including games played, bet amounts, wins and losses, session duration, and favorite games. This data is used to provide relevant game recommendations and to monitor playing behavior for responsible gaming purposes.
Technical & Device Data
IP address, device type (Android, iOS, desktop), browser type and version, operating system, screen resolution, and login session information (time, IP location). This data is used for account security, fraud detection and optimising your user experience on your device.

Bdbaji does not collect sensitive data categories such as health information, criminal records, or biometric data, except in very specific circumstances required by international compliance laws and only with your explicit consent.

2

How bdbaji Uses Your Information

Bdbaji uses the information collected solely for legitimate purposes necessary to operate the platform. We do not use your data for anything unrelated to the services we provide. The following are the primary purposes for which bdbaji uses your data:

  • Service Provision: To create and manage your account, process deposits and withdrawals, enable access to all bdbaji games, and provide effective customer support.
  • Verification & Security: To verify your identity during registration and prior to processing high-value withdrawals, to identify and prevent fraud, detect duplicate accounts, and ensure that only eligible individuals (aged 18 and above) use the platform.
  • Legal Compliance: To fulfil our legal obligations under anti-money laundering (AML) regulations and Know Your Customer (KYC) requirements as mandated by the relevant regulatory authorities.
  • Platform Improvements: To analyse aggregated usage patterns in order to understand which features members enjoy most, identify areas for improvement, and plan new game or feature additions that are relevant to Malaysian players.
  • Service Communications: To send you important account-related notifications such as deposit confirmations, successful withdrawal notices, security alerts, and material policy updates.
  • Marketing Communications (with consent): To send information about promotions, bonuses, new games and exclusive bdbaji offers to members who have opted in to receive such communications. You may unsubscribe from marketing communications at any time.
  • Responsible Gaming: To monitor playing patterns in order to identify signs of problem gambling and reach out to members who may need support, in line with bdbaji's commitment to member well-being.
3

Sharing Information with Third Parties

Bdbaji does not sell, rent, or disclose members' personal information to third parties for their own marketing purposes. However, in the course of operating the platform, bdbaji may need to share certain data with the following categories of third parties — and in each case, such sharing is limited strictly to what is genuinely necessary:

  • Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX. These providers receive only the information needed to complete the transaction — bdbaji does not share your gaming records or any other data with them.
  • Game Providers: Pragmatic Play, PG Soft, Evolution Gaming, and other providers may receive non-personally identifiable session IDs for the technical purpose of delivering games. Your full name or identifying information is not shared with any game provider.
  • Technical Support Service Providers: Companies that assist bdbaji with server operations, cybersecurity, technical analytics and customer support — all bound by strict confidentiality agreements and prohibited from using your data for any purpose other than what bdbaji directs.
  • Competent Authorities: bdbaji will disclose information to the police, regulatory bodies, or courts when required by a valid court order, search warrant, or binding legal obligation. In such cases, bdbaji will endeavour to notify you if the law permits us to do so.

bdbaji's Guarantee: All third parties with whom we share data are bound by strict data protection agreements. They are required to handle your information to a security standard equal to or exceeding bdbaji's own, and are strictly prohibited from using that data for their own purposes.

4

Cookies and Tracking Technologies

Bdbaji uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how members interact with our platform. Cookies are small text files stored on your device when you visit the bdbaji website.

  • Essential Cookies: Required for core platform functions such as maintaining your login session, remembering your language preferences, and ensuring deposits are processed securely. These cookies cannot be disabled without affecting platform functionality.
  • Performance & Analytics Cookies: Collects information on how bdbaji pages are used — which pages are visited most frequently, how long users spend on each section, and where users encounter difficulties. This data is gathered in aggregate form and contains no personal identifiers.
  • Functional Cookies: Saves your preferences such as favourite games, display settings and notification options so you don't have to reconfigure them every time you log in to bdbaji.
  • Security Cookies: Used to detect suspicious login attempts, verify that the current session is legitimate, and protect your account from unauthorized access.

You can manage your cookie settings through your web browser at any time. However, disabling all cookies may affect certain functions on the bdbaji platform, including the ability to stay logged in between sessions.

5

Bdbaji Data Security

Bdbaji takes security infrastructure seriously to ensure every member's personal and financial data is fully protected. Our security approach is multi-layered — meaning that even if one line of defense is breached, additional layers remain in place to safeguard your data.

  • Data Encryption in Transit: All communications between your browser or app and bdbaji's servers are protected using TLS 1.3 (Transport Layer Security) with AES-256 encryption. This means your data cannot be read even if someone manages to intercept your network traffic.
  • Data Encryption at Rest: Sensitive data stored in bdbaji's databases — including identity information and financial records — is encrypted using AES-256 encryption at rest.
  • Access Controls: Access to databases containing members' personal information is restricted to bdbaji staff who require it for their specific duties, and every instance of access is logged in detail for audit purposes.
  • Two-Factor Authentication (2FA): bdbaji encourages all members to enable two-factor authentication on their accounts. With 2FA active, logging in requires an additional OTP verification via SMS, even if someone else knows your password.
  • Continuous Security Monitoring: bdbaji's systems are monitored around the clock to detect suspicious activity, intrusion attempts, or patterns that may indicate unauthorized access.

While bdbaji takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in keeping your account secure — particularly by using a strong password, not sharing your login credentials, and reporting any suspicious activity to bdbaji promptly.

6

Data Retention and Deletion

Bdbaji retains members' personal information only for as long as it is needed for the purposes stated in this policy, or as required by applicable law. Our core principle is — when data is no longer needed, it is securely deleted or anonymised.

  • Active Account: Personal data and transaction records are retained for as long as your account remains active with bdbaji, plus any mandatory retention period following account closure.
  • Game History: A complete record of every gaming session, round, and hand is retained for 90 days and is accessible through your account. Aggregate records (overall totals) are kept for longer periods for financial and compliance purposes.
  • Financial Records: All deposit and withdrawal records are retained for a minimum of 7 years, in line with international financial compliance legal requirements.
  • After Account Closure: When an account is closed at your request, bdbaji will delete or anonymise your personal data within 90 days, except for records that must be retained for legal compliance or the resolution of any outstanding disputes.
  • Deletion Requests: You may request deletion of your personal data by contacting the bdbaji team. Requests will be processed within 30 days and we will inform you of which data can be deleted and which must be retained for legal reasons.
7

Your Rights as a bdbaji User

As a bdbaji member, you have certain rights regarding the personal data we hold about you. bdbaji respects these rights and is committed to making them easy to exercise through a clear, straightforward process.

Right of Access

You have the right to request a copy of all personal data bdbaji holds about you. Requests will be processed within 30 days and the data will be provided in a readable format.

Right to Rectification

If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Updates can be made directly in your account profile settings or through bdbaji support.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data ("right to be forgotten"). Such requests will be evaluated against bdbaji's legal obligations before being processed.

Right to Object to Processing

You can object to the processing of your personal data for direct marketing purposes at any time — and your objection will be honored immediately, with no reason required.

Data Portability Rights

You have the right to receive your personal data in a structured, machine-readable format (such as CSV or JSON) so you can transfer it to another service should you choose to do so.

Right to Restrict Processing

In certain circumstances, such as when there is a dispute about the accuracy of your data, you may request that bdbaji temporarily restrict the processing of your data until the matter is resolved.

To exercise any of the above rights, contact the bdbaji team by email at support@bdbaji.site, stating the right you wish to exercise and your account details for identity verification. bdbaji will respond within 30 days of receiving your request.

8

Children's Data Protection

Bdbaji strictly prohibits the use of its platform by anyone under the age of 18. We do not knowingly collect or process personal data from minors below the stipulated age limit.

If bdbaji discovers that personal data has been collected from someone under the age of 18 without our knowledge, the account will be closed immediately, all associated betting activity will be voided, and the data will be deleted from our systems within a reasonable timeframe.

Parents or guardians who suspect their minor child may have registered an account with bdbaji should contact us immediately at support@bdbaji.site for prompt action. bdbaji takes the protection of minors seriously and will cooperate fully to resolve such situations as quickly as possible.

9

Changes to the Privacy Policy

Bdbaji may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the services we offer. We are committed to informing you of any significant changes before they take effect.

  • For minor changes that do not materially affect your rights, we will update the "Last updated" date at the top of this document without sending a specific notification.
  • For significant changes — such as changes to the types of data collected, how it is used, or your rights — bdbaji will notify you at least 14 days before the changes take effect, via in-account notifications and email (if you have provided an email address).
  • Your continued use of the bdbaji platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how bdbaji protects your information.

10

Contact bdbaji About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by bdbaji, our team is here to help. We take every privacy inquiry seriously and will ensure it is handled properly.

Privacy Email
support@bdbaji.site — for data access requests, deletion requests or privacy enquiries. Response within 24 business hours.
24/7 Live Chat
For immediate or general privacy enquiries. The bdbaji support team is available around the clock, including public holidays.
Related Documents
Read the Terms & Conditions and Responsible Gaming page for more details on how bdbaji operates.

FAQ – Privacy & Data Security at bdbaji

The questions bdbaji members ask most about how their data is protected

No. bdbaji does not store credit card numbers, debit card numbers or bank account numbers directly in our systems. When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, all payment processing is handled entirely by licensed and certified third-party payment providers. bdbaji only receives confirmation that a transaction was successful — not your actual payment details. This is an industry security standard that ensures your sensitive financial information never resides within bdbaji's systems.

Yes, you may request the deletion of your personal data after closing your account. However, please note that bdbaji has legal obligations to retain certain financial records — particularly deposit, withdrawal, and transaction records — for a minimum of 7 years for anti-money laundering compliance and audit purposes. Where possible, this data will be anonymised (replacing your personal details with neutral identifiers) while retaining the necessary transaction records. Personal information not subject to legal retention requirements — such as your account profile, marketing preferences, and older gaming history — will be deleted within 90 days of the request being received.

bdbaji does not share your full name, phone number, email address, or any identifying information with game providers. When you play games from Pragmatic Play, PG Soft, Evolution Gaming, or any other provider on the bdbaji platform, only a unique, non-personally identifiable session ID is shared — just enough to allow the game system to function correctly, record round outcomes, and support technical dispute resolution if needed. Game providers do not know your name or your financial details; they only know that "session X" from the bdbaji platform is playing their game.

bdbaji maintains a full login history log in your account that you can review at any time — including the date, time, device type, and IP location for each login session. You can access this information under "Account Security" in your profile settings. If you notice a login session you don't recognize, change your password immediately and contact bdbaji's support team to temporarily freeze your account while an investigation is carried out. bdbaji also sends automatic notifications to your registered phone number whenever a login is detected from an unfamiliar device or location — make sure the phone number in your profile is always kept up to date.

bdbaji uses your gameplay activity data internally to provide more relevant game recommendations within our own platform — for example, if you frequently play Pragmatic Play slots, we may highlight new Pragmatic Play slots in your recommendations section. However, bdbaji does not use or share your gameplay activity data with third-party advertisers for behavioural advertising on other websites or platforms. We also do not participate in any advertising networks that allow external advertisers to target you based on your gaming activity on bdbaji.

Other Important bdbaji Policies & Documents

These documents complement the Privacy Policy and form the foundation of bdbaji's transparent operating framework

Terms & Conditions

The full terms governing use of the bdbaji platform — registration, deposits, withdrawals, bonuses and game rules for all Malaysian members.

Responsible Gaming

Self-exclusion tools, deposit limits, break options, and support resources provided by bdbaji for the well-being of all members.

About Us

Get to know bdbaji — who we are, our mission, core values, and our commitment to the Malaysian players who have made bdbaji their platform of choice.

FAQ

Answers to the most frequently asked questions about accounts, deposits, withdrawals, bonuses, games and privacy at bdbaji.

YOUR DATA IS SAFE WITH BDBAJI

Play with Peace of Mind — bdbaji Protects Your Privacy

Your privacy and data security are a top priority at bdbaji. Register for free today, enjoy over 500 top games, and play with the confidence that your information is fully protected to the highest industry standards.

* Gaming involves financial risk. Please set your spending limits. Must be 18+ to play. Responsible Gaming.

Bahasa Melayu