Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by BajiLive ("BajiLive", "we", "us", "our"), the operator of the online gaming platform accessible at https://bajilive.cam. This Policy governs the collection, storage, processing, and use of personal data submitted by or collected about registered Users ("you", "your") and visitors to the Platform.

BajiLive understands that the privacy of our players — many of whom are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia — is fundamental to the trust they place in our platform. We take that responsibility seriously. This Policy is designed to be transparent, accessible, and written in plain language so that every player can understand how their information is handled.

By registering an account, making a deposit via Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, or any other supported Malaysian payment method, or by otherwise using any feature of the Platform, you acknowledge that you have read and agree to the terms of this Privacy Policy.

This Policy should be read in conjunction with our Terms and Conditions and Responsible Gambling Policy, both of which are available on this Platform. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify a living individual, either directly or indirectly.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means BajiLive, which determines the purposes and means by which Personal Data is processed.
• "User" or "Player" means any person who has registered an account on the BajiLive Platform.
• "Visitor" means any person who accesses the Platform without registering an account.
• "Cookie" means a small text file placed on a User's device by the Platform for purposes of session management, analytics, or personalisation.
• "KYC" means Know Your Customer verification, the process by which BajiLive confirms the identity and age of a User prior to authorising withdrawals.
• "Third-Party Processor" means an external service provider that processes Personal Data on behalf of BajiLive pursuant to a data processing agreement.

3. Data We Collect

BajiLive collects personal data through three primary channels: (a) information you provide voluntarily, (b) information generated automatically through your use of the Platform, and (c) information obtained from third-party service providers where permitted by law.

3.1 Information You Provide

• Registration data: Full legal name, date of birth, email address, and contact number provided during account creation.
• Identity verification (KYC) documents: Copies of your Malaysian National Registration Identity Card (MyKad — front and back), passport, or other government-issued identification, submitted during the withdrawal verification process.
• Financial data: Payment method details (e-wallet identifiers, bank account numbers, card details) submitted when making deposits or requesting withdrawals. Full card numbers are not stored by BajiLive; payment processing is handled by certified third-party payment processors.
• Communications: Messages, queries, and feedback submitted via live chat or email to our support team.
• Responsible gambling declarations: Self-declared deposit limits, self-exclusion requests, or problem gambling disclosures submitted through our responsible gambling tools.

3.2 Automatically Collected Data

• IP address and approximate geolocation data derived therefrom.
• Device type, operating system, browser type, and version.
• Pages visited, session duration, and navigation patterns within the Platform.
• Game activity logs, betting history, and transaction records.
• Cookie and similar tracking technology identifiers (see Section 7).

3.3 Data from Third Parties

BajiLive may receive Personal Data from third-party payment processors (for transaction verification), fraud prevention services (for account security screening), and age/identity verification services (for KYC compliance). Any such data sharing is governed by data processing agreements requiring those parties to maintain adequate data protection standards.

4. How We Use Your Data

BajiLive processes your Personal Data for the following purposes:

BajiLive does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review, except where expressly required for fraud detection or anti-money laundering compliance.

5. Legal Basis for Processing

BajiLive relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered User — including account creation, transaction processing, and support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and record-keeping mandates.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent: Processing of your data for optional purposes, such as receiving promotional communications, where you have provided your express consent. You may withdraw consent at any time by contacting our support team.

6. Data Sharing & Disclosure

BajiLive does not sell, rent, or otherwise commercially disclose your Personal Data to third parties. We may, however, share your data in the following limited and controlled circumstances:

6.1 Service Providers

We engage trusted third-party service providers to assist with payment processing (including integration with Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and crypto processors), identity verification, fraud detection, customer support infrastructure, and platform analytics. These providers process data solely on our instruction and are contractually bound to maintain appropriate security standards.

6.2 Legal and Regulatory Disclosure

BajiLive may disclose Personal Data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or where we have a good-faith belief that such disclosure is necessary to protect the rights, property, or safety of BajiLive, its Users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a part of BajiLive's business assets, Personal Data held by BajiLive may be transferred to the successor entity as part of that transaction. Users will be notified of any such change via the email address registered to their account.

7. Cookies & Tracking Technologies

BajiLive uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, and collect anonymised usage analytics. The categories of cookies we use are as follows:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect anonymised information about how visitors interact with the Platform — pages visited, session duration, and navigation paths — to help us improve the user experience.
• Preference cookies: Used to remember your settings and preferences, such as language or display options, across sessions.
• Security cookies: Used to detect and prevent fraudulent or malicious activity on the Platform.

Most web browsers allow you to control cookies through their settings. However, disabling essential cookies may prevent you from accessing certain features of the Platform, including account login and transaction functions. Please refer to your browser's help documentation for instructions on managing cookie settings.

8. Data Retention

BajiLive retains Personal Data for as long as necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations. The following general retention periods apply:

• Account data: Retained for the duration of the account relationship, plus a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, in accordance with applicable regulations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the most recent communication in a support thread.
• Analytics data: Retained in anonymised or aggregated form for up to two (2) years.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents its re-identification.

9. Your Rights Over Your Data

Subject to applicable law, you have the following rights in relation to the Personal Data that BajiLive holds about you:

• Right of Access: You may request a copy of the Personal Data BajiLive holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Account details such as your email address and contact number can be updated directly through your account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where technically feasible, you may request that we provide your Personal Data in a structured, commonly used machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Object: You may object to the processing of your Personal Data for direct marketing purposes at any time.

To exercise any of the rights above, please contact our support team via live chat or at [email protected]. We will acknowledge your request promptly and endeavour to respond in full within thirty (30) days.

10. Data Security

BajiLive employs a range of technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform.
• Encrypted storage of sensitive account and identity data on secured servers with restricted access controls.
• Two-factor authentication (2FA) available for all User accounts to add an additional layer of login security.
• Regular internal security audits and penetration testing to identify and remediate vulnerabilities.
• Strict access control policies ensuring that staff can only access the minimum data necessary for their role.
• Secure deletion protocols for data that has exceeded its retention period.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, BajiLive will notify affected Users without undue delay in accordance with applicable legal requirements.

11. Third-Party Services & External Links

The BajiLive Platform integrates with a number of third-party services in the ordinary course of its operations. These include payment processors (for handling MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Visa, Mastercard, and cryptocurrency networks), game content providers, and platform analytics tools.

Each third-party service provider operates under its own privacy policy and data processing terms. BajiLive requires all such providers to maintain data protection standards consistent with this Policy as a contractual condition of engagement. However, BajiLive cannot accept responsibility for the privacy practices of third-party services outside of our direct control.

The Platform does not contain links to external third-party websites. Should the Platform ever include such links in the future, BajiLive would not be responsible for the privacy practices of those external sites.

12. Minors & Age Policy

The BajiLive Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process Personal Data relating to persons under the age of 21. Registration by or on behalf of a minor is prohibited under our Terms and Conditions.

If BajiLive becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

BajiLive strongly encourages parents and guardians to make use of parental control software to prevent underage access to online gambling and gaming platforms.

13. Amendments to This Policy

BajiLive reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. The revised Policy will be published on this page with an updated "Last Updated" date at the top of the document.

Where changes are material — meaning they significantly affect how we collect or use your Personal Data, or affect your rights — we will provide advance notice via your registered email address no less than fourteen (14) days before the changes take effect. Your continued use of the Platform following the effective date of the revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically to stay informed about how BajiLive protects your information.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which BajiLive processes your Personal Data, please contact our Data Support team using the details below. All correspondence should be submitted in English.

When submitting a data-related request by email, please include your registered email address and a brief description of your request. We may need to ask additional questions or request identity verification before we can process certain requests.