Privacy Policy bdbaje — How We Protect Your Personal Data

This Privacy Policy explains how bdbaje ("Platform", "We") collects, uses, stores, and protects your personal data ("Member", "User") when you use the bdbaje online betting platform in Malaysia.

This policy applies to all bdbaje services — including the bdbaje.my website, any associated mobile applications, customer support services, email communications, and all other interactions between you and bdbaje. It is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the Terms & Conditions binding on bdbaje.

We update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The latest version is always available on this page, with the update date clearly stated.

Bdbaje collects personal data from several sources — directly from you during registration or use, automatically through platform technology, and in limited circumstances, from legitimate third-party sources.

Every piece of data we collect has a clear purpose. bdbaje does not use your data for anything beyond what is stated below without first obtaining your consent.

• Service Delivery: Managing your account, processing deposits and withdrawals via local Malaysian payment methods such as Touch 'n Go, GrabPay, and DuitNow, settling bets, and crediting winnings to your bdbaje account.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 18 years, confirming your identity for anti-money laundering (AML) compliance purposes, and ensuring one account per individual in accordance with bdbaje's policy.
• Account Security: Detecting and preventing unauthorised access, fraud, bonus abuse, and other suspicious activity that could compromise the integrity of the bdbaje platform or the security of other members.
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve interface design, platform speed, and overall user experience. For instance, understanding which sports are most popular among Malaysian users — such as the Super League or BWF badminton — to expand available markets.
• Service Communications: Sending important account notifications — deposit confirmations, successful withdrawals, changes to terms, security alerts, and promotional updates you have consented to receive.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need support, in line with bdbaje's commitment to Responsible Gaming.
• Legal Compliance: To comply with the legal and regulatory obligations applicable to bdbaje — including the PDPA 2010, AML laws, and other reporting requirements set by Malaysian authorities.

Bdbaje does not sell your personal data to anyone. There are, however, limited circumstances in which we need to share certain data with third parties in order to provide services to you.

• Payment Processors: bdbaje shares the necessary transaction information with Malaysia's local e-wallet and banking service providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks — solely for the purpose of processing your deposits and withdrawals. These processors are subject to their own data security standards.
• Technology Provider: bdbaje uses technical infrastructure services from carefully selected third-party providers — such as secure server hosting and limited analytics services. These providers only access data necessary for their technical functions and are bound by strict confidentiality agreements.
• Malaysian Authorities: bdbaje will disclose data to Malaysian authorities — including the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or any relevant regulatory body — when required to do so by law, court order, or in the course of a legitimate criminal investigation.
• Game Providers: Limited game information required to process bets and settle matches is shared with the casino and slots game providers that partner with bdbaje. No full identity information is shared — only the session IDs necessary for technical integration.

Bdbaje continuously invests in technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

• Data Encryption in Transit: All communications between your device and bdbaje's servers are encrypted using Transport Layer Security (TLS) with AES-256 encryption. This means your data cannot be intercepted or read by third parties during transmission.
• Secure Storage: Data stored on bdbaje servers is encrypted at rest. Database access is governed by strict role-based access controls — only staff who require access to perform their specific functions are permitted to access particular data.
• Two-Factor Authentication (2FA): bdbaje provides two-factor authentication for all member accounts as an added layer of security. We strongly encourage all members to enable 2FA through their account settings.
• Continuous Security Monitoring: bdbaje systems are actively monitored 24/7 to detect suspicious activity, unauthorised access attempts, and other cybersecurity threats. The bdbaje security team responds to security incidents within defined timeframes in accordance with bdbaje's incident response protocol.
• Periodic Security Assessments: bdbaje conducts regular security assessments and penetration testing to identify and address potential vulnerabilities before they can be exploited.

The bdbaje platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. This section explains exactly what we use and why.

• Essential Cookies: These cookies are required for the core functionality of the bdbaje platform — maintaining your login session, saving your language preferences, and ensuring security features work properly. Without them, the platform cannot function. Disabling these cookies will affect platform usability.
• Performance Cookies: These cookies help bdbaje understand how the platform is used in aggregate — which pages are visited most, how long users spend on a given page, and where they encounter difficulties. This information is used to improve the platform's design and performance.
• Functional Cookies: These cookies save your preferences — such as your favourite sports, preferred odds display, and display settings — so you do not have to reconfigure them each time you log in to bdbaje.
• Cookie Controls: You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the bdbaje platform. bdbaje does not use third-party cookies for advertising purposes.

Bdbaje does not retain your personal data for longer than is necessary for the purpose it was collected, or as required under Malaysian law.

• Active Account Data: For as long as your bdbaje account remains active, the associated personal data will be retained to enable ongoing service delivery. This includes profile information, transaction history, and game records.
• After Account Closure: When a bdbaje account is closed, your personal data will be retained for the minimum period required under Malaysian law — typically 7 years for financial records in accordance with anti-money laundering requirements — before being permanently deleted or fully anonymised.
• Support Communication Data: Customer support conversation records are retained for 3 years after the last interaction for reference and service quality improvement purposes.
• Early Deletion Upon Request: You may request early deletion of your personal data before the standard retention period, subject to any legal obligations that prevent such deletion. bdbaje will process deletion requests within 30 days and notify you of the outcome.

Under Malaysia's PDPA 2010 and bdbaje's Privacy Policy, you hold several important rights regarding your personal data. These rights can be exercised at any time by contacting bdbaje.

• Right of Access: You have the right to request a copy of the personal data we hold about you. bdbaje will provide this in a readable format within 14 business days of receiving a valid request.
• Right to Rectification: If the personal data bdbaje holds about you is inaccurate or incomplete, you have the right to request a correction. You may also update most of your profile information directly through your bdbaje account settings.
• Right to Erasure: You may request the deletion of your personal data, subject to applicable legal retention obligations. bdbaje will inform you which data can be deleted immediately and which must be retained for a specified period.
• Right to Restrict Processing: In certain circumstances, you may request that bdbaje restrict the processing of your data — for example, while a dispute regarding data accuracy is being resolved.
• Right to Object to Marketing: You have the right to object to the use of your personal data for direct marketing purposes at any time, without providing a reason. Such requests will be processed immediately.
• Data Portability Right: You may request a copy of your personal data in a portable format (such as CSV or JSON) for your own use or for transfer to another party.

To exercise any of these rights, contact the bdbaje privacy team at support@bdbaje.my with the subject line "Privacy Rights Request" and specify the right you wish to exercise. We will acknowledge receipt within 3 business days and fulfil the request within 30 calendar days.

Bdbaje is a betting platform strictly restricted to individuals aged 18 and above. We do not knowingly collect, store, or process the personal data of any individual under the legal age.

• Age Verification Process: bdbaje applies an age verification process during registration — including date of birth verification and, in certain cases, identity document verification — to prevent individuals under the legal age from registering.
• Underage Account Discovery: If bdbaje discovers that an account has been registered by or on behalf of an underage individual, the account will be closed immediately, all funds returned (less any winnings obtained), and all associated data removed from bdbaje's systems.
• Reporting Underage Accounts: If you become aware of any individual under the legal age using the bdbaje platform, please report it to us immediately at support@bdbaje.my. All reports will be investigated promptly and handled with complete confidentiality.

Bdbaje reserves the right to update this Privacy Policy from time to time to reflect changes in how we handle data, changes to bdbaje's services, or new legal requirements.

• Amendment Notice: For material changes to how we use or share your personal data, bdbaje will send a notification to your registered email address at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether to continue using the bdbaje platform.
• Minor Amendments: Minor amendments that do not change how we fundamentally handle your data — such as language corrections or additional clarifications — may take effect immediately without prior notice.
• Effective Date: All versions of the bdbaje Privacy Policy clearly state the effective date at the top of the page. The version you are reading is effective from 1 January 2026.
• Version History: If you wish to review a previous version of the bdbaje Privacy Policy, contact us at support@bdbaje.my and we will provide the requested version within a reasonable timeframe.