Updated: 1 January 2026

Privacy Policy baba8 – Personal Data Protection for Malaysian Players

Baba8 is committed to protecting the privacy and personal data of every player in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. This document clearly explains how we manage your information.

256-bit
SSL Encryption
PDPA
Malaysia Compliance
0
Sale of Data to Third Parties
24/7
Security Monitoring

Baba8's Privacy Commitment

Six core principles that underpin how baba8 manages the personal data of Malaysian players.

Bank-Grade Encryption

All data transmitted between your device and baba8's servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's major banks such as Maybank and CIMB to secure online transactions.

Full PDPA 2010 Compliance

Baba8 operates in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. We collect only the data that is necessary, store it securely and do not use it beyond the purposes that have been defined and disclosed to you.

No Data Selling

Baba8 has never sold, rented or transferred players' personal data to third parties for marketing purposes. Your data belongs to you — we use it solely for the operational needs of the baba8 platform.

Restricted & Controlled Data Access

Only baba8 staff who genuinely require access to your data — such as our support and finance teams — are permitted to view it. All access is logged and audited regularly to ensure there is no misuse.

Right to Access & Rectify Data

As a baba8 player, you have the right to request a review, correction or deletion of your personal data at any time. Requests can be submitted by email to support@baba8.biz and will be processed within 14 business days.

Communication Preferences Control

You have full control over the types of communications you receive from baba8. Unsubscribe from promotional emails or SMS notifications at any time through your account settings or by contacting our support team.

Important Note

This Privacy Policy explains how baba8 collects, uses, stores and protects your personal data. By using the baba8 platform, you agree to the practices described in this document. Please read it carefully and contact us if you have any questions.

Section 1

Introduction & Scope of the Privacy Policy

This Privacy Policy is issued by baba8 ("Platform", "we", "us") and applies to all players, registered users, and visitors of baba8.biz. This document explains in detail how baba8 manages your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Baba8 acts as the data controller for all personal information collected through our platform. This means we are fully responsible for ensuring your data is processed lawfully, fairly, and transparently at all times. We do not process your personal data without a valid legal basis and a clearly defined purpose.

This Privacy Policy forms part of the overall agreement between you and baba8. It should be read together with Terms & Conditions us for a full understanding of the rights and obligations of both parties.

By registering an account with baba8 or continuing to use the platform after receiving notification of updates to this policy, you confirm that you have read, understood and agreed to this Privacy Policy in its entirety.

Section 2

Personal Data We Collect

Baba8 only collects personal data that is genuinely necessary to provide our platform services safely and effectively. We collect data through three main channels: information you provide directly, data generated automatically as you use the platform, and information from legitimate third parties.

Information you provide directly:

  • Full name as per MyKad (for KYC identity verification).
  • An active Malaysian mobile number (for verification and important communications).
  • Email address (for account notifications and transaction verification).
  • Bank account or e-wallet details for processing deposits and withdrawals.
  • Identity verification documents such as a copy of your MyKad when required for the KYC process.
  • Your communication preferences and responsible gaming settings as configured by you.

Automatically generated data:

  • IP address and device information (device type, operating system, web browser).
  • Gaming activity logs including bets placed, winnings, session duration and games played.
  • Records of all financial transactions including deposits made via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX.
  • Login data including time, date and approximate geographic location.
  • Records of interactions with our customer support team.
Note: baba8 will never ask for your account password via email, WhatsApp, or any other channel. If you receive such a request, it is a fraudulent attempt. Please contact support@baba8.biz immediately.
Section 3

How We Use Your Data

Baba8 uses your personal data only for clearly defined and lawful purposes. The table below outlines how your data is used and the legal basis that supports each purpose:

Purpose of Use Legal Basis
User account management and verification Contract performance
Processing deposits & financial withdrawals Contract performance
KYC identity verification & legal compliance Legal obligations
Fraud prevention & anti-money laundering Legal obligations & legitimate interests
24/7 customer support availability Contract performance
Delivery of important account notifications Contract performance
Delivery of promotional information & bonuses Your consent (withdrawable)
Platform improvements based on usage patterns Baba8's legitimate interests
VIP Rewards programme administration Contract performance
Internal audits and reporting Legal obligations & legitimate interests

Baba8 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent. If you would like to know more about the specific legal basis for any particular data processing activity, please contact us at support@baba8.biz.

Section 4

Data Sharing with Third Parties

Baba8 does not sell, rent or trade players' personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share data with the following parties:

  • Payment processors: Minimal transaction information is shared with payment service providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX partner banks to process deposits and withdrawals. This sharing is necessary to fulfil our contract with you.
  • Gaming service providers: Third-party game software providers that supply slots, Live Casino, and other games may receive session data necessary for technical operations. They are bound by strict confidentiality agreements with baba8.
  • Legal authorities: baba8 will disclose data when required by court order, direction from a competent authority, or applicable Malaysian law. Any such disclosure will be limited strictly to the minimum necessary.
  • Auditors and professional advisors: Auditing firms, lawyers and tax advisors may require limited access to financial records during audit or legal advisory processes. They are bound by professional confidentiality obligations.
All third parties who receive your data from baba8 are required to protect that information to a security standard equal to or higher than baba8's own. We conduct regular security assessments of all third-party vendors.
Section 5

Data Security Measures

Baba8 continually invests in security infrastructure to keep your personal data protected at all times. Our technical and organisational measures include:

  • 256-bit SSL Encryption: All data transmitted between your web browser and baba8's servers is encrypted using the latest TLS protocols, making any intercepted data completely unreadable to unauthorised parties.
  • Data encryption at rest: Sensitive data stored in baba8's databases — including payment information and identity verification documents — is encrypted using AES-256 for an additional layer of protection.
  • Two-factor authentication (2FA): baba8 players can enable 2FA on their accounts. baba8's internal staff are required to use 2FA for all access to systems containing user data.
  • 24/7 Monitoring: baba8's systems are continuously monitored to detect any suspicious activity, intrusion attempts or unauthorised access. All threats are responded to in real time.
  • Regular penetration testing: baba8 conducts regular penetration testing carried out by independent security experts to identify and address vulnerabilities before they can be exploited.
  • Staff training: All baba8 staff with access to user data undergo comprehensive data protection training and are bound by confidentiality agreements.

While baba8 takes all reasonable steps to protect your data, no security system can guarantee 100% protection against all cyber threats. If you suspect your account has been compromised, please contact support@baba8.biz immediately.

Section 6

Cookies, Tracking Technologies & Analytics

Baba8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files that your web browser stores on your device when you visit the baba8 website.

The types of cookies we use are:

  • Essential Cookies: Required for core platform functions such as maintaining your login session, remembering language preferences and securing transactions. These cookies cannot be disabled as they are critical to platform operations.
  • Performance Cookies: Collects information about how you use the baba8 platform — pages visited, time spent and any errors encountered. This data is processed in aggregate form to improve platform performance.
  • Functional Cookies: Remembering your preferences and settings — such as font size, interface preferences, and game settings — to deliver a more personalised experience during your gaming sessions.
  • Analytics Cookies: baba8 uses internal analytics tools to understand overall platform usage patterns. This data is processed in aggregate form and does not reveal the identity of individual players.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the baba8 platform. To learn how to manage cookies on your browser, refer to your browser's help section.

When you access baba8 from a smartphone, device information such as device type, operating system and screen resolution may be collected to ensure the platform is properly optimised for the best display on your device.
Section 7

Data Retention Period

Baba8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet applicable legal requirements. Our retention policy is as follows:

Data Type Retention Period Reason
Active account information For the duration of the active account Service operations
Financial transaction records 7 years Legal & tax requirements
KYC Documents (MyKad, etc.) 5 years after account closure Anti-money laundering compliance
Game & betting logs 24 months Dispute resolution
Support communication logs 12 months Service quality
Marketing data (with consent) Until consent is withdrawn Promotional communications
Inactive accounts (>12 months) 3 years, then anonymised PDPA Compliance

Once the retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally. The deletion process is carried out in accordance with security standards that ensure the data cannot be recovered.

Section 8

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by baba8:

  • Right of access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 days of receipt.
  • Right to rectification: If your data is inaccurate or incomplete, you have the right to request a correction. Corrections will be carried out within 14 business days.
  • Right to withdraw consent: Where data processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting your core baba8 services.
  • Right to prevent marketing processing: You have the right to instruct baba8 to stop using your data for direct marketing purposes, either through your account settings or by contacting us.
  • Right to lodge a complaint: If you believe baba8 has violated your privacy rights, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.
To exercise any of the rights above, submit a written request to support@baba8.biz with the subject line "Personal Data Request", along with your full name and registered phone number for identity verification.

Please note that in certain circumstances, these rights may be limited by legal requirements — for example, we are unable to delete financial transaction records that must be retained for compliance with Malaysia's anti-money laundering laws.

Section 9

Children's Data Protection

The baba8 platform is strictly for adults aged 18 and above. baba8 does not knowingly collect any personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your minor child has provided personal information to baba8 without your consent, please contact us immediately at support@baba8.biz. We will take prompt steps to:

  • Verifying the age of the relevant user through the identity verification process.
  • Temporarily suspending the account while an investigation is conducted.
  • Deleting any personal data belonging to minors that may have been collected inadvertently.
  • Returning any associated funds in accordance with the applicable procedures.
Important: baba8 enforces age verification during the registration process. If there is evidence that a user is under 18 years of age, the account will be closed immediately and the matter will be reported to the relevant authorities as required by law.
Section 10

Privacy Policy Amendments

Baba8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, business practices or the security technologies we use.

When significant amendments are made that affect how we process your data, baba8 will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending email notifications to all registered players at least 14 days before any changes take effect.
  • Displaying a prominent notice on the baba8 platform homepage regarding the changes.
  • In cases of significant changes, we may request your renewed consent before continuing to process your data.

Continued use of the baba8 platform after the effective date of any amendment constitutes acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account by contacting our support team.

Section 11

Contact Our Data Protection Officer

If you have any questions, concerns or requests regarding this Privacy Policy or how baba8 processes your personal data, please reach us through the following channels:

Email: support@baba8.biz

Email Subject: "Privacy Policy Enquiry" or "Personal Data Request"

Response Time: Within 2 business days for general enquiries, 14–21 days for formal data access requests.

Baba8 support team members who handle privacy enquiries receive specialised training in Malaysia's PDPA legislation and data protection. They are available to assist you in both Bahasa Melayu and English, 24 hours a day, 7 days a week.

If you are not satisfied with our response to any privacy concern, you have the right to file a formal complaint with the Department of Personal Data Protection Malaysia, accessible through the official government portal.

This Version of the Privacy Policy

This document was last updated on 1 January 2026. Earlier versions are available upon request at support@baba8.biz.

Your Rights at a Glance

A summary of your data protection rights as a baba8 player in Malaysia.

Right to Access

Request a copy of all personal data baba8 holds about you. Processed within 21 days.

Right to Rectification

Correct any inaccurate or incomplete data held in your baba8 account records.

Right to Erasure

Request the deletion of your personal data when it is no longer needed or relevant, subject to legal requirements.

Right to Restriction

Restrict how baba8 uses your data in certain situations while a dispute or review is in progress.

Right to Object

Object to the processing of your data for direct marketing purposes or baba8's legitimate interests in certain circumstances.

Right to Portability

Receive a copy of your data in a machine-readable format for transfer to another platform upon request.

To exercise any of the above rights, contact support@baba8.biz with the subject line "Personal Data Request".

Your Privacy Is More Than a Formality at baba8

In today's digital age, personal data is a valuable asset. Every time you sign up on an online platform, you entrust a portion of your personal information to them. At baba8, we take that trust very seriously. This Privacy Policy is not just a document that has to exist — it is a real agreement that governs how baba8 handles your information.

Malaysia's Personal Data Protection Act (PDPA) 2010 grants individuals specific rights over their personal data. baba8 not only complies with this Act — we strive to go beyond its minimum requirements, because we believe robust privacy protection is the foundation of player trust.

Why Does baba8 Collect Your Data?

One of the key reasons baba8 needs to collect certain data is for identity verification (KYC — Know Your Customer). This is not purely baba8's choice — it is a requirement under Malaysia's Anti-Money Laundering Act (AMLA), designed to prevent the platform from being misused for illicit activities and to protect all players using the same platform.

Financial transaction data — such as deposit records via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay or FPX — must be retained for seven years as required by law. This is not to monitor your activity, but to protect you should any dispute arise over past transactions. These records serve as evidence that safeguards your rights as a player.

How Is Your Data Used in baba8 Promotions?

When you register with baba8, you can choose whether or not to receive marketing communications from us. If you opt in, we may contact you about the latest promotions, deposit bonuses, upcoming poker tournaments, or exclusive VIP offers. This is based on your basic account data and does not involve aggressive profiling.

What matters most: we never sell or share your information with external advertisers for them to contact you directly. If you ever receive an email or call claiming to be from baba8 but asking for personal details or payment, it is a scam — baba8 does not operate that way. Official communications from baba8 relate solely to your account and our own services.

Cookies and a Better Gaming Experience

Baba8 cookies are not used to monitor your activity outside our platform. Their primary purpose is technical — to maintain your login session so you are not prompted to sign in again each time you navigate to a different page, to remember your preferences such as interface language, and to ensure your bets are processed correctly during a gaming session.

We also use internal analytics cookies to understand which parts of the platform are used most, where players encounter difficulties, and which new features generate the most interest. This data helps the baba8 development team continuously improve the platform. All analytics are processed in aggregate — we look at overall trends, not the detailed activity of individual players.

A Shared Responsibility in Protecting Privacy

Baba8 invests heavily in security technology — 256-bit SSL, encryption of data at rest, 24/7 monitoring and regular penetration testing. That said, the security of your account also depends in part on your own actions. Use a strong, unique password. Enable two-factor authentication, available in your baba8 account settings. Avoid logging in over unsecured public Wi-Fi networks.

If you have any concerns about how baba8 handles your data, we're always here to help. Reach us at support@baba8.biz — our team, trained in Malaysia's PDPA requirements, is available in both Bahasa Melayu and English, 24 hours a day, every day. Your privacy matters to us not because the law requires it, but because it's simply the right thing to do for every baba8 player who trusts us.

Related Policies & Information

Read the other policies that complement this baba8 Privacy Policy.

Terms & Conditions

The full terms governing use of the baba8 platform, including rules on accounts, bonuses, deposits and withdrawals.

Read More
Responsible Gaming

Tools and resources to help you play safely and responsibly at baba8.

Read More
FAQ

Answers to the most frequently asked questions about privacy, accounts and baba8 services.

View All FAQs
About Us

Learn more about baba8 — our mission, values and commitment to Malaysian players.

Read More
YOUR DATA IS SAFE WITH baba8

Ready to Join the baba8 Community?

Create a free account today and enjoy a platform built around your safety and privacy — with a welcome bonus of up to RM500 to kick off your gaming experience.

256-bit SSL Protection
PDPA 2010 Compliance
No Data Selling
24/7 Support in BM

By registering, you agree to the Terms & Conditions and Privacy Policy baba8. This platform is for users aged 18 and above only.

Bahasa Melayu