Privacy & Data Protection

Privacy Policy baba8 – How We Protect Your Data

Baba8 takes your privacy seriously. This document clearly outlines the types of data we collect, the purposes for which it is used, who may access it, and your full rights as a Malaysia member to control your personal information.

256-bit SSL
Updated 2026
Bahasa Melayu
No Data Selling
256-bit SSL Encryption No sale of data to third parties You can request data deletion at any time Data stored on secure servers Payment data fully encrypted

Baba8's Privacy Protection Commitment

Six core principles that shape how baba8 handles the personal data of Malaysian members.

Security
Bank-Grade Encryption

All data transmitted between your browser and the baba8 platform is protected by 256-bit SSL encryption — the same standard used by leading banking and financial institutions in Malaysia. This means your account information, payment details, and transaction history cannot be intercepted or read by unauthorised parties during transmission.

Transparency
No Data Sold to Third Parties

Baba8 has never and will never sell, rent, or trade members' personal data to any third party for marketing or any other commercial purpose. Your data belongs to you — we only use it for the purposes explicitly stated in this Privacy Policy and nothing beyond that.

User Controls
You're in Full Control

As a baba8 member, you have the full right to access the personal data we hold about you, request corrections to inaccurate information, and submit data deletion requests at any time. All such requests are handled by the baba8 privacy team within the stipulated timeframe, without unnecessary complications.

Data Minimisation
We Only Collect What's Necessary

Baba8 follows the principle of data minimisation — we only collect information that is genuinely necessary to provide our services to you. We do not collect excessive or irrelevant data. Each type of data collected has a clear purpose, as outlined in this policy.

Secure Payment
Secure Payment Processing

All financial transactions on baba8 — including deposits via DuitNow, Touch 'n Go eWallet, GrabPay, FPX, Boost, and ShopeePay — are processed through payment gateways that comply with PCI DSS standards. Your bank account numbers and e-wallet details are not stored in plain text on baba8's servers.

Active Monitoring
24-Hour Threat Detection System

Baba8's infrastructure is continuously monitored by our technical security team to detect and prevent any unauthorised access attempts, cyberattacks, or suspicious activity. In the event of a security incident affecting member data, baba8 will promptly notify the affected members in accordance with established procedures.

Types of Data baba8 Collects

A brief overview of the categories of information collected when you use the baba8 platform.

Identity Name, date of birth, ID
Contact Email, phone number
Finance Deposit & withdrawal records
Device Device type, OS, browser
Activity Game history, bets
Location IP address, general region

This Privacy Policy ("Policy") describes how baba8 collects, uses, stores, and protects your personal information when you use our platform at baba8.best. By registering for or using the baba8 platform, you agree to the data protection practices described in this Policy.

This Policy is written in Bahasa Melayu specifically for Malaysian members. For any privacy-related enquiries, please contact us at support@baba8.best.

01

Personal Data We Collect

Baba8 collects various types of personal information depending on how you interact with our platform. Below are the main categories of data we collect and the context in which they are collected.

Information You Provide Directly

  • Registration information: Full name, email address, mobile number, date of birth and the password you create when opening your baba8 account.
  • Identity verification (KYC): A copy of your identity document (MyKad), bank statement or utility bill as proof of address — collected only when required to process withdrawals or meet compliance obligations.
  • Payment information: The account holder's name, account number and registered payment method for your e-wallet or bank account (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay). This information is used to verify ownership and process transactions.
  • Communications with support: The content of any queries, complaints or feedback you submit to the baba8 customer support team via live chat or email.

Automatically Collected Information

  • Technical data: IP address, browser type, operating system, screen resolution, and the type of device you use to access baba8.
  • Usage data: Pages visited, time spent, games played, bets placed, and transaction history within the platform.
  • Cookie data: Login session information, preference settings, and analytics data collected through cookies and similar technologies.

Note: baba8 does not directly collect credit or debit card numbers. All payments are processed through third-party payment gateways that comply with PCI DSS standards. baba8 only receives transaction confirmation records — not your full card details.

02

How We Use Your Data

Baba8 only uses your personal data for legitimate purposes directly related to delivering our platform services. We do not use your data beyond the scope described here without obtaining your additional consent.

Purpose of Use Types of Data Used Legal Basis
Account management & identity verification Identity, contact details, KYC Service contract
Deposit & withdrawal processing Financial, identity Service contract
Customer support & complaint resolution Relationships, communications, activity Legitimate interests
Fraud Detection & Account Security Location, device, activity Legitimate interests
Legal compliance & anti-money laundering Identity, financial, KYC Legal obligations
Platform analytics & service improvement Anonymised usage data Legitimate interests
Promotional communications & personalised offers Email, phone, activity Your consent

Regarding marketing communications: baba8 only sends promotional messages — such as bonus offers, Hari Raya promotions or new game notifications — to members who have given their consent at registration or through their account settings. You may withdraw this consent at any time via the "Notification Settings" section in your account.

03

Data Sharing & Disclosure

Baba8 does not sell or rent members' personal data to any party for marketing purposes. However, there are certain situations where baba8 needs to share your data with selected third parties in order to deliver our services fully.

Third Parties That May Receive Your Data

  • Licensed game providers: Such as Evolution Gaming, Pragmatic Play, and other providers — they only receive the data necessary to load and run games within your session. These providers are bound by strict data confidentiality agreements with baba8.
  • Payment gateway: Processors such as DuitNow, Touch 'n Go eWallet, GrabPay, FPX and others receive the transaction information required to process your deposits and withdrawals. All these gateways comply with PCI DSS standards.
  • Technical service providers: Companies that provide hosting infrastructure, cybersecurity, analytics and technical support to baba8 may access data in the course of their work, subject to binding data processing agreements.
  • Competent authority: baba8 will disclose data where required by court order, legal obligation, or a legitimate request from law enforcement authorities. In all such cases, baba8 discloses only the minimum data necessary.

Important: In the event that baba8 undergoes a business merger, acquisition, or asset sale, members' personal data may be transferred to the new entity. In such circumstances, baba8 will notify members via email or an in-platform notice before the data is transferred and before any differing privacy policy takes effect.

04

Data Storage & Security

Baba8 invests seriously in data security infrastructure to ensure that members' personal information remains protected at all times. Below are the technical and organisational measures we employ.

Technical Security Measures

  • 256-bit SSL/TLS encryption for all data in transit between your browser and baba8's servers.
  • Passwords are stored using strong hashing algorithms — baba8 never stores your password in plain text.
  • Application-level firewall and DDoS protection to block unauthorised access to our servers.
  • An intrusion detection system that monitors suspicious activity in real time, 24 hours a day.
  • Regular encrypted data backups to ensure data recovery in the event of a system failure.
  • Environment segregation — member production data is never used in testing or development environments.

Data Retention Period

Baba8 retains your personal data for as long as your account is active or as long as is necessary to provide our services. Following account closure, we may retain certain records for the period required by law or legitimate business needs. In general:

  • Financial transaction records are retained for a minimum of seven (7) years in accordance with standard financial compliance requirements.
  • Customer support communication logs are retained for two (2) years for reference and dispute resolution purposes.
  • Platform usage analytics data is retained in anonymised form for three (3) years.
  • KYC documents are retained for the period required by applicable anti-money laundering compliance regulations.

Security notice: While baba8 takes every security measure seriously, no online system can be guaranteed 100% safe from all threats. We encourage you to also protect your account by using a strong password, keeping your login details confidential, and enabling two-factor authentication where available.

05

Cookies & Tracking Technologies

Baba8 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. Below is an overview of the types of cookies we use.

Types of Cookies Used by baba8

  • Essential cookies: Required for core platform functions such as maintaining your login session, remembering language preferences, and keeping your account secure. These cookies cannot be disabled as the platform will not function properly without them.
  • Preference cookies: Saves your personal settings such as preferred betting limits, table display preferences and notification settings, so you do not need to reconfigure them each time you log in.
  • Analytics cookies: Collects anonymised data on how members use the platform — most frequently visited pages, session duration, and more. This information helps baba8 identify areas of the platform that can be improved.
  • Security cookies: Used to detect and prevent fraudulent activity, verify your identity during active sessions and protect your account from takeover.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the baba8 platform and your login experience.

Mobile browser: If you access baba8 through a browser on an Android or iOS device, cookie settings can be managed under the "Privacy" section in your browser settings. Keep in mind that each browser handles cookie management differently — refer to your browser's help guide for specific instructions.

06

Your Rights as a baba8 Member

As a baba8 member, you have specific rights regarding the personal data we hold about you. baba8 is committed to making it straightforward for you to exercise these rights without unnecessary hassle.

Your Rights at a Glance

  • Right to access: You may request a copy of the personal data baba8 holds about you. Such requests will be processed within 30 business days.
  • Right to rectify: If any personal information held in baba8's records is inaccurate or out of date, you may request a correction and we will update it promptly.
  • Right to erasure ("right to be forgotten"): You may request the deletion of your personal data from baba8's systems. Such requests will be processed subject to applicable legal retention obligations — for example, financial transaction records may need to be retained for a specified period under financial laws.
  • Right to restrict processing: In certain situations, you may request that baba8 restrict how your data is processed — for example, while you are disputing the accuracy of your data or while a complaint investigation is in progress.
  • Right to data portability: You may request your personal data in a machine-readable format for transfer to another service provider if needed.
  • Right to withdraw consent: For any data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights above, please contact the baba8 privacy team by email support@baba8.best with the subject line "Data Privacy Request", along with your full name and registered account email. We will verify your identity before processing any request in order to protect your privacy.

07

Children's Data

The baba8 platform is strictly for individuals aged 18 and above. baba8 does not knowingly collect or process personal data from anyone under the age of 18.

Should baba8 discover that a child's personal data has been collected without appropriate age verification, we will take immediate action to delete that information and close the account in question. Parents or guardians who believe their child may have registered a baba8 account without permission are encouraged to contact us immediately at support@baba8.best.

A note for parents: If you share a device with children, please ensure you log out of your baba8 account after every session and that your account is protected with a password unknown to underage family members. baba8 is fully committed to ensuring that online entertainment platforms are accessed only by eligible adults.

08

Privacy Policy Changes

Baba8 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the way our platform operates. The latest version of this Privacy Policy will always be available on the baba8.best/privacy-policy.

When significant changes are made to this Policy, baba8 will notify members through one or more of the following methods:

  • An email notification will be sent to the member's registered email address.
  • A pop-up notice or banner on the baba8 platform homepage when you log in.
  • In-app notifications or platform interface alerts.

Your continued use of the baba8 platform after any Privacy Policy changes have been published and you have been notified will be taken as your acceptance of the updated version. We encourage you to review this page periodically to stay informed of the latest updates.

This Privacy Policy was last updated on January 2026.

09

Contact Us

If you have any questions, concerns, or complaints regarding how baba8 handles your personal data, or if you wish to exercise any of the privacy rights outlined in this Policy, please contact us through the following channels.

  • Privacy Email: support@baba8.best (subject: "Data Privacy Request")
  • Live Chat: Available 24 hours a day via the chat icon on the baba8 platform
  • Email response time: Within 12 hours on working days; 24 hours on weekends and public holidays

For information on the platform's general terms of use, please refer to Terms & Conditions us. For information on responsible gaming tools, please visit the Responsible Gaming.

This Privacy Policy forms part of the overall agreement between you ("Member") and baba8 ("Platform"). It should be read together with Terms & Conditions and page Responsible Gaming for a full understanding of your rights and responsibilities as a baba8 member.

A Summary of Your Privacy Rights at baba8

Six key rights you hold as a baba8 member regarding your personal data.

Right to Access Data

Request a copy of your personal data held by baba8 at any time. Processed within 30 business days upon identity verification.

Right to Rectify Data

Request the prompt correction of any inaccurate or outdated information in your baba8 account records.

Right to Erasure

Request the deletion of your personal data, subject to any applicable legal retention obligations for financial records.

Right to Restrict Processing

Request that baba8 restrict how your data is processed in certain situations while a query or complaint is being resolved.

Right to Data Portability

Obtain your personal data in a machine-readable format for transfer to another service provider if needed.

Right to Withdraw Consent

Withdraw consent for marketing communications or optional data processing at any time through your account settings.

To exercise any of the rights above, please contact us at support@baba8.best with the subject line "Data Privacy Request".

Baba8's Data Security Commitment

Baba8 protects every member's personal information with 256-bit SSL encryption, 24-hour security monitoring, and a strict policy against sharing data with third parties without consent. You have the right to access, correct, or request the deletion of your data at any time. For full details, please refer to Terms & Conditions us or visit Responsible Gaming for safe play guidance.

Frequently Asked Questions About baba8's Privacy Policy

The most frequently asked questions from Malaysian members about how baba8 handles their personal data.

Absolutely not. baba8 has never and will never sell, rent or trade members' personal data to any party for marketing or other commercial purposes. Your data is used exclusively to provide baba8 platform services to you — including account management, transaction processing, customer support and platform security. Third parties with whom we share data (such as game providers and payment gateways) are bound by strict confidentiality agreements and may only use the data for the specific purposes defined.

All financial transactions on baba8 — including deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost and ShopeePay — are processed through payment gateways that comply with the PCI DSS (Payment Card Industry Data Security Standard). baba8 does not store your full e-wallet account number or bank details on our servers — we only receive confirmation of whether a transaction was successful or failed. Data transmitted during the payment process is protected with 256-bit SSL encryption, preventing any third party from intercepting that information.

Yes, you can submit a data deletion request ("right to be forgotten") to baba8 at any time by contacting us at support@baba8.best with the subject line "Data Privacy Request — Deletion". Before deleting your data, baba8 will verify your identity and confirm that there are no pending balances in your account. Please note that certain records cannot be deleted due to legal requirements — for example, financial transaction records must be retained for at least seven years under financial compliance regulations. All other data not subject to these retention obligations will be deleted within 30 working days of verification.

A baba8 account that has been inactive for an extended period (generally more than 12 months with no logins or transactions) may be classified as "dormant". baba8 will send an email notification to members with dormant accounts before taking any action. Your data is not automatically deleted — it remains securely in our systems until you submit a deletion request or until the retention period required by law has lapsed. You can reactivate a dormant account simply by logging back in and verifying your identity.

No. baba8 only uses cookies within our own platform at baba8.best — we do not use cross-site tracking cookies to monitor your activity on other websites. The cookies we use serve specific purposes: maintaining your login session, saving your preferences, ensuring account security and collecting usage analytics solely within the baba8 platform. All active cookies in your browser will expire automatically when your session ends or on their set expiry date.

When your baba8 account is closed at your request or for other valid reasons, baba8 will begin a staged data reduction process. Data not subject to any legal retention obligations will be deleted within 90 days of account closure. Financial transaction records will be retained for the period required by law (typically seven years) in a secure, access-restricted form. After this mandatory retention period, all remaining data will be permanently deleted from baba8's systems. If you would like a full data record statement before closing your account, please contact us to obtain a copy of your data before the closure process begins.

Your Privacy Is Protected. Ready to Play?

Register a baba8 account for free and enjoy a platform built with security and privacy as top priorities for Malaysian players.

256-bit SSL
No Data Selling
Payment in 1–3 Minutes
Play Without Download

By registering, you agree to the Terms & Conditions and baba8's Privacy Policy. For players aged 18 and above only.

Bahasa Melayu