Privacy Policy baje999 — How We Protect Your Personal Data in Malaysia

This Privacy Policy explains how baje999 ("we", "the Platform") collects, uses, stores, discloses, and protects your personal information when you use the baje999.click platform and all related services.

Baje999 values the privacy of every player in Malaysia. We understand that your trust in how we handle your personal information is the foundation of our long-term relationship. That is why we are committed to being transparent and straightforward about our privacy practices — not merely because it is a legal requirement, but because we believe it is simply the right thing to do.

This Privacy Policy applies to all users of the baje999 platform, regardless of how they access it — whether through a web browser, mobile app, or any other access method we may offer in the future.

Baje999 collects various types of information to provide our players with a safe, fair, and quality service. Below are the categories of information we collect and the purposes for which they are used:

Baje999 only collects information that is genuinely necessary for legitimate purposes. We do not collect unrelated sensitive information such as religious beliefs, political views, or health status.

Every piece of information we collect is used for a specific, legitimate purpose. baje999 uses your personal information for the following:

• Account management — Creating and maintaining your baje999 account, including the login process, identity verification, and password management.
• Transaction processing — Processing deposits, withdrawals, and any other financial transactions you make through baje999's supported Malaysian payment methods.
• Service provision — Providing access to all baje999 games and services, including Sports Betting (football, badminton, cricket, e-sports), Live Casino, slots, roulette, and over 30 other game categories.
• Security & fraud prevention — Monitoring account activity to detect any unauthorised access, fraudulent attempts, or activity that violates baje999's Terms & Conditions.
• Customer support — Providing effective assistance when you reach our baje999 support team via live chat, WhatsApp, or email.
• Legal compliance — Comply with the requirements of Malaysia's Personal Data Protection Act 2010 and any other applicable legal obligations, including anti-money laundering (AML) requirements.
• Platform improvement — Analysing usage patterns on an aggregate (not individual) basis to improve the user experience, identify technical issues, and enhance the quality of baje999's services.
• Service communications — Sending important account-related information, terms updates, security notifications, and relevant baje999 promotions — you may unsubscribe from marketing communications at any time.

Baje999 does not use your personal information for any purpose other than those stated above without obtaining your consent first.

Baje999 does not sell, rent, or disclose your personal information to third parties for marketing purposes. However, there are limited circumstances in which we may need to share certain information with selected third parties:

• Game providers — Providers such as Evolution Gaming, Pragmatic Play Live, and NetEnt may receive only the minimum session data necessary for technical game operations. They do not receive any personally identifiable information that could directly identify you.
• Payment processors — Malaysian payment gateways (Touch 'n Go, GrabPay, DuitNow, FPX, and others) receive the transaction information required to process your deposits and withdrawals. They are governed by their own privacy policies and security standards.
• IT service providers — Companies providing technical infrastructure, cloud services, or cybersecurity services to baje999 may have limited access to data for technical operational purposes only, under strict confidentiality agreements.
• Legal authorities — baje999 may be required to disclose information to Malaysian authorities (such as PDRM or LHDN) when ordered by a court or as required under applicable laws, including those relating to anti-money laundering.

Baje999 continually invests in the latest security infrastructure to ensure the personal data of every Malaysian player is protected at all times. The key security measures we have in place are as follows:

• 256-bit SSL/TLS Encryption — All communications between your device and the baje999 platform are protected with industry-standard encryption protocols, ensuring no third party can read or alter your data in transit.
• Tiered access controls — Only authorised baje999 staff with a specific operational need are permitted to access user data. All access is logged and audited on a regular basis.
• Regular security testing — baje999 conducts regular penetration testing and security audits by independent security teams to identify and address any vulnerabilities before they can be exploited.
• 24/7 threat monitoring — baje999's automated monitoring system operates around the clock to detect any suspicious activity, unusual login attempts, or anomalies that may indicate a potential security breach.
• Two-factor authentication (2FA) — baje999 offers two-factor authentication for user accounts as an additional layer of security. We strongly encourage all players to enable this feature.
• Secure data backup — User data is backed up regularly to secure, separate locations to ensure data recovery in the event of an unexpected incident.

While baje999 takes all reasonable steps to protect your data, no security system in the world is completely impenetrable. That is why we also need your cooperation — keep your password safe, never share your login credentials with anyone, and report any suspicious activity to us immediately.

Baje999 uses cookies and similar tracking technologies to enhance the user experience on our platform. Below are the types of cookies we use and their purposes:

• Session Cookies — Temporary cookies that exist only for the duration of your browsing session. They are used to maintain your login state and ensure a seamless experience while you use the baje999 platform. These cookies are automatically deleted when you close your browser.
• Preference Cookies — Saving your preferences such as interface language and favourite sports so you do not have to reconfigure them each time you visit baje999.
• Security Cookies — Used to detect suspicious logins, protect your account from unauthorised access, and prevent CSRF (Cross-Site Request Forgery) attacks.
• Analytics Cookies — Collects aggregate data on how users interact with the baje999 platform — pages visited, session duration, and navigation patterns. This data is used to improve the platform and contains no personally identifiable information.

You can manage your cookie settings through your web browser. Do note that disabling certain cookies may affect the functionality of the baje999 platform — in particular, session cookies required for secure login.

Baje999 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable law — whichever is longer.

• Active account data — Retained for as long as your account remains active on baje999. If you have not logged in for more than 24 consecutive months, baje999 will contact you before taking any action.
• Financial transaction history — Retained for a minimum of seven (7) years in accordance with Malaysian legal requirements on financial records and anti-money laundering.
• Security logs — Retained for 12 months for security incident investigation and fraud detection purposes.
• Support communication data — Customer support conversation records are retained for 12 months for quality control purposes and for reference in the event of any subsequent dispute.

When data is no longer needed, baje999 will delete or anonymise it in accordance with secure procedures. Anonymised data can no longer be linked to any individual and is no longer subject to this Privacy Policy.

As a baje999 user in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010:

• Right to access — You have the right to request a copy of the personal data we hold about you. baje999 will process data access requests within 21 business days from the date the request is received.
• Right to rectification — If you find that any personal information in baje999's records is inaccurate or out of date, you have the right to request a correction.
• Right to withdraw consent — For data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.
• Right to object — You have the right to object to the processing of your personal data for specific purposes, subject to applicable legal requirements and contractual obligations.
• Right to erasure — Under certain circumstances, you may request the deletion of your personal data. However, such requests may not be fully fulfilled where there is a legal or contractual requirement to retain the data.

To exercise any of the above rights, please contact the baje999 Privacy Officer by email at support@baje999.click with the subject line "Data Privacy Rights Request", along with proof of your identity. baje999 will process your request within the timeframe stipulated under Malaysian law.

Protecting your baje999 account is a shared responsibility. While baje999 implements a range of sophisticated technical security measures, there are important steps you need to take yourself to safeguard your account and personal data:

• Use a strong, unique password for your baje999 account — a combination of uppercase letters, lowercase letters, numbers, and symbols. Do not reuse the same password from other accounts such as your email or e-wallet.
• Never share your baje999 account password with anyone — including family members, friends, or anyone claiming to be a baje999 representative. baje999 will never ask for your password through any communication channel.
• Enable two-factor authentication (2FA) for an extra layer of security on your baje999 account.
• Always log out of your baje999 account when you are done, especially when using a shared device or public WiFi network.
• Review your baje999 account activity regularly. If you notice any transactions or activity you don't recognise, contact the baje999 support team immediately.
• Be cautious of emails or messages that appear to be from baje999 but ask for your login credentials or financial information — these may be phishing attempts and are in no way associated with baje999.

Baje999 is not liable for any losses arising from a user's own negligence in safeguarding their login credentials. That said, if you suspect your account has been accessed without authorisation, baje999 will assist you promptly to investigate and take the necessary remedial action.

The baje999 platform is strictly for individuals aged 18 and above. baje999 does not knowingly collect any personal information from individuals under the age of 18. If you are a parent or guardian and believe your minor child has registered for or used the baje999 platform, please contact us immediately at support@baje999.click and we will take prompt action to close the account and delete all collected data.

Baje999 has appointed a dedicated Data Protection Officer responsible for ensuring compliance with this Privacy Policy and handling all privacy-related enquiries and complaints. If you have any questions, concerns, or complaints about how baje999 handles your personal data, you may contact us via:

Baje999 is committed to responding to all privacy-related inquiries within 5 business days from the date the inquiry is received. For complex complaints or those involving formal data access requests, processing may take up to 21 business days in accordance with Malaysian legal requirements.