Updated: January 2026

BD Baji Privacy Policy – Our Commitment to Protecting Your Data Malaysian Player Privacy

Your privacy is BD Baji's priority. This document provides a detailed explanation of what data we collect, why we need it, how we protect it, and what rights you have as a Malaysian player regarding the personal data we hold.

Effective: 1 January 2026 Language: Malay (ms-MY) Jurisdiction: Malaysia
Document Contents
  • Data We Collect
  • Purpose of Data Use
  • Data Sharing with Third Parties
  • Data Security & Encryption
  • Your Rights as a User
  • Cookies & Tracking Technologies

BD Baji's Six Data Protection Principles

The way we handle your information is held to the highest standards in the industry

256-bit SSL Encryption

All personal data and financial transactions transmitted between your device and BD Baji's servers are protected by 256-bit SSL encryption — the same security standard used by leading Malaysian banking institutions such as Maybank and CIMB.

Never Sold to Advertisers

BD Baji does not sell, rent or trade members' personal data to advertisers or third-party data brokers. Your information is used solely for platform operations and is never treated as a commercial commodity.

Your Data, Your Control

As a BD Baji player, you have the full right to access, correct, export or request deletion of your personal data at any time, either through your account settings or by contacting our support team.

Secure & Protected Servers

BD Baji member data is stored on servers protected by multi-layered firewalls, strict access controls and round-the-clock security monitoring. Access to member data is granted exclusively to specifically authorised personnel.

Malaysia PDPA Compliance

The BD Baji Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to meeting all applicable data protection legal requirements under Malaysian law.

Marketing Communications Controls

You have full control over marketing communications from BD Baji. Choose to receive or opt out of promotional emails, SMS notifications or push messages based on your preferences — and update those preferences at any time in your account settings.

1. Introduction

BD Baji ("we", "our platform") is fully committed to the privacy of every individual who uses our platform. This Privacy Policy sets out in detail how BD Baji collects, processes, stores, shares and protects your personal data when you use our website, mobile application and other services we offer.

By registering or continuing to use the BD Baji platform, you agree to this Privacy Policy. Please read this document carefully. If you do not agree with any part of this policy, you should not use BD Baji's services.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy BD Baji. Together, these three documents constitute the entire agreement between you and BD Baji regarding your use of the platform.

2. Personal Data We Collect

BD Baji collects various categories of personal data from users of our platform. This data is collected directly from you during registration and platform use, or automatically through industry-standard tracking technologies.

2.1 Data You Provide Directly

Data Category Sample Information Date Collected
Identification Information Full name, MyKad/passport number, date of birth, gender, nationality During registration & KYC verification
Contact Information Malaysian phone number, email address, residential address During registration
Financial Information EWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), bank account details for FPX During deposits & withdrawals
Verification Documents MyKad copy, passport, utility bill (for address verification) During the KYC process
Communications Live chat message content, emails to support, form feedback During support interactions

2.2 Automatically Collected Data

When you use the BD Baji platform, our systems automatically log the following technical information:

  • Your device's IP address and estimated geographic location (state/city in Malaysia)
  • Device type, operating system and web browser version used
  • Date, time and duration of each platform session
  • Pages visited, searches made and matches viewed
  • Betting history and gaming activity on the BD Baji platform
  • Deposit and withdrawal transaction history
  • Cookie data and similar tracking technologies (see Section 8)

BD Baji does not store your PIN, full eWallet password, or full bank account number. Payment information is processed through certified third-party payment gateways and is not stored directly on BD Baji's servers.

3. Purposes of Personal Data Use

BD Baji uses the personal data collected for the purposes set out below. We are committed to not using your data for any other purpose not stated here without first obtaining your consent.

  • Account management: Creating and managing your BD Baji account, verifying your identity and ensuring account security.
  • Transaction processing: Processing deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX securely and accurately.
  • Service delivery: Providing access to all platform features, including Sports Betting on the Malaysia Super League, EPL, badminton, live blackjack and slots.
  • Legal compliance: Fulfilling legal obligations, including anti-money laundering (AML) requirements, KYC, and reporting to the relevant authorities.
  • Customer support: Resolving enquiries, complaints and disputes submitted to the BD Baji support team.
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering and platform abuse.
  • Personalisation: Personalising content, match recommendations and bonus offers based on your preferences and usage patterns.
  • Marketing communications: Sending you promotional information, bonus updates and platform announcements (with your consent).
  • Platform improvements: Analysing usage patterns to improve the overall BD Baji platform experience.
  • Responsible gaming: Monitoring betting patterns to identify players who may need responsible gaming support.

4. Legal Basis for Data Processing

BD Baji processes your personal data on one or more legal bases recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

4.1 Consent

For specific purposes such as marketing communications and personalisation, BD Baji processes your data based on the consent you explicitly provided during registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the validity of any processing that took place prior to withdrawal.

4.2 Contract Performance

Data processing required to manage your account, handle deposits and withdrawals, and provide betting services is necessary to fulfil the contract between you and BD Baji.

4.3 Legal Obligations

BD Baji is required to process certain data to comply with applicable laws in Malaysia, including KYC/AML requirements and reporting to the relevant authorities.

Refusing to provide data required for KYC or legal compliance purposes may result in BD Baji being unable to provide services to you or restricting access to certain platform features, including fund withdrawals.

5. Data Sharing with Third Parties

BD Baji takes your privacy seriously and does not sell or rent your personal data to any third party for their own marketing purposes. That said, there are limited situations where we need to share your data with certain parties:

5.1 Trusted Service Providers

BD Baji works with carefully selected third-party service providers to handle specific platform functions. These providers are only permitted to use your data for the defined purposes and are bound by strict confidentiality agreements:

  • Payment gateway providers (for processing Touch 'n Go, GrabPay, FPX and other transactions)
  • Game providers (Evolution Gaming, Pragmatic Play, Playtech — to supply live dealer casino games and slots)
  • Identity verification providers (for the KYC process)
  • Cloud service and server hosting providers
  • Analytics and fraud detection tool providers

5.2 Legal Requirements

BD Baji may disclose your personal data to government authorities, law enforcement bodies or regulatory authorities when required to do so by applicable Malaysian law, court order or valid legal process. In every such case, BD Baji will disclose only the minimum data necessary to satisfy the relevant legal requirement.

5.3 Business Transfer

In the event of a business acquisition, merger or sale of BD Baji assets, members' personal data may be transferred as part of those assets. You will be notified in advance via your registered email and given the option to withdraw your consent if you do not agree to the change.

Some of BD Baji's third-party service providers may operate outside Malaysia. In such cases, BD Baji ensures that cross-border data transfers are carried out with protections equivalent to Malaysia's PDPA standards, through appropriate data transfer agreements.

6. Data Retention Period

BD Baji retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, subject to any longer retention periods required by law.

6.1 Active Account Data

For as long as your BD Baji account remains active, we retain all your personal data, transaction history and activity records. You may request access to this data at any time.

6.2 After Account Closure

After your account is closed, BD Baji retains your personal data for a minimum period of 5 years to comply with anti-money laundering laws and financial reporting requirements in Malaysia. After this period, data will be securely deleted or anonymised.

6.3 Transaction Records

Records of all financial transactions (deposits and withdrawals) are retained for a minimum of 7 years in accordance with applicable Malaysian accounting and financial legal requirements.

7. Data Security

BD Baji invests heavily in technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. Our key data protection safeguards include:

  • Encryption in transit: All communications between your device and BD Baji's servers are encrypted using TLS 1.3 protocol and 256-bit SSL certificates.
  • Stored data encryption: Sensitive data stored in our databases is encrypted using AES-256 standards.
  • Access controls: Internal BD Baji staff access to member data is strictly governed on a need-to-know basis.
  • Continuous monitoring: An intrusion detection system (IDS) monitors unusual activity across BD Baji's infrastructure 24 hours a day.
  • Regular security audits: BD Baji undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.
  • Two-factor authentication: Two-factor authentication (2FA) is available to all BD Baji member accounts as an additional layer of protection.

While BD Baji takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. In the event of any data security breach affecting your information, BD Baji is committed to notifying you within the timeframe required by applicable law.

8. Cookies and Tracking Technologies

BD Baji uses cookies — small text files stored on your device — and similar tracking technologies to enhance your experience on our platform.

8.1 Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as login authentication, account sessions and security. Cannot be disabled.
  • Performance cookies: Collects information on how you use the BD Baji platform to help us improve speed and stability.
  • Functional cookies: Saving your preferences such as language, display theme and other personal settings.
  • Analytics cookies: Helping us understand platform usage patterns in aggregate for service improvement purposes.

8.2 Managing Cookies

You can control and manage cookies through your web browser settings. Please be aware that disabling essential cookies may affect the functionality of the BD Baji platform, including your ability to log in and place bets. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

9. Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices, you have the following rights regarding personal data held by BD Baji:

Your Personal Data Rights at BD Baji

You are in full control — the following are rights we fully respect

1
Right to Access Your Data

You have the right to request a copy of all personal data BD Baji holds about you. We will provide this information in a readable format within 30 days of receiving your request. The first request is free of charge; subsequent requests within the same 12-month period may be subject to a reasonable administrative fee.

2
Right to Correct Data

If you find that any personal data BD Baji holds about you is inaccurate, incomplete or out of date, you have the right to request a correction. You can update most of your personal information directly through your BD Baji account settings or by contacting our support team.

3
Right to Erasure

Under certain circumstances, you have the right to request that BD Baji erase your personal data — for example, where the data is no longer needed for its original purpose or where you have withdrawn your consent. Please note that this right is subject to legal data retention obligations that take precedence over erasure requests.

4
Right to Object to Processing

You have the right to object to the processing of your personal data for certain purposes, including direct marketing. When you object to processing for marketing purposes, BD Baji will immediately stop using your data for that purpose, no questions asked.

5
Right to Export Data (Portability)

You have the right to receive your personal data in a structured, commonly used and machine-readable format, allowing you to transfer it to another platform if needed. Data portability requests can be submitted by emailing the BD Baji support team.

6
Right to Withdraw Consent

Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any of our emails or contact our support team.

To submit any request relating to your privacy rights, please contact the BD Baji Data Privacy Officer by email at support@bdbaji.online with the subject line "Privacy Rights Request". We are committed to responding to all requests within 30 business days.

10. Children's Privacy

The BD Baji platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered an account on BD Baji or has provided us with personal data, please contact us immediately at support@bdbaji.online. We will take prompt action to delete the account and all associated data upon verification.

BD Baji strictly enforces a minimum age policy of 18 years through its KYC verification process. Any account suspected of belonging to a minor will be suspended immediately pending investigation. Parents and guardians are encouraged to monitor their children's internet usage.

11. Links to Third-Party Sites

The BD Baji platform may contain links to or integrations with third-party websites or services, such as game providers and payment gateways. When you access a third-party website via a link from the BD Baji platform, our Privacy Policy does not apply to that website.

BD Baji is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of each third-party site you visit separately. This includes game providers such as Evolution Gaming, Pragmatic Play and Playtech, each of which maintains its own privacy policy that applies when you play their games.

12. Amendments to the Privacy Policy

BD Baji reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or industry developments. You will be notified of any material amendments through:

  • Notice prominently displayed on the BD Baji platform homepage
  • An email to your registered email address at least 14 days before the amendment takes effect
  • An in-account notification on your platform dashboard upon your next login

The "Updated" date shown at the top of this document reflects when it was last revised. Your continued use of the BD Baji platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy.

13. How to Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how BD Baji handles your personal data, we encourage you to reach out to us directly:

  • Email: support@bdbaji.online (Please use the subject line "Privacy Enquiry" or "Privacy Rights Request")
  • Live Chat: Available 24/7 directly on the BD Baji platform
  • Response time: We are committed to responding to all privacy-related enquiries within 2 business days

If you are not satisfied with BD Baji's response to your privacy concern, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body under the Personal Data Protection Act 2010.

This Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions. The latest version of this Privacy Policy is always available on the bdbaji.online/privacy-policy.

FAQ – BD Baji Privacy Policy

Answers to the most frequently asked questions about our data protection practices

Absolutely not. BD Baji never sells, rents or trades members' personal data to any third party for their own marketing purposes. Your data may be shared with service providers we use to operate the platform — such as payment gateway providers to process your Touch 'n Go, GrabPay or FPX transactions, or game providers to deliver live casino games. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific operational purposes defined.

BD Baji does not store your full bank account number, PIN or eWallet password on our servers. All financial transactions are processed through PCI-DSS certified third-party payment gateways — the highest security standard for online payment processing. When you make a deposit using Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow or FPX, you are redirected to a secure payment gateway where the transaction is completed. BD Baji only receives confirmation that the transaction was successful, not your full payment details.

Yes, you have the right to request deletion of your personal data. However, this right is subject to certain limitations. BD Baji is legally required to retain financial transaction records and KYC data for a minimum of 5–7 years to comply with Malaysia's anti-money laundering (AML) and accounting regulations. Data subject to these legal retention obligations cannot be deleted upon request, even if your account has been closed. All other data not covered by such obligations will be deleted or anonymised within 30 days of a valid request. Please contact support@bdbaji.online to submit a data deletion request.

When your account is closed, BD Baji will cease all data processing activities related to service delivery, marketing and personalisation. However, certain data will be retained for as long as required by law — transaction records and KYC data are kept for a minimum of 5–7 years in accordance with Malaysia's AML and accounting requirements. After this mandatory retention period, your data will be securely deleted or anonymised so that it can no longer be linked back to you. You will receive an account closure confirmation at your registered email address.

Yes, you can opt out of promotional emails from BD Baji at any time by clicking the "Unsubscribe" link found at the bottom of any marketing email we send. You can also update your communication preferences directly in your BD Baji account settings under the "Notifications & Communications" section, or by reaching out to our support team via live chat or email. Once your unsubscribe request is received, we will stop sending marketing emails within 5 business days. Please note that opting out of marketing emails does not affect essential account-related communications, such as transaction confirmations and security notices, which we are required to send.

Your Data Is Safe with BD Baji – Sign Up with Confidence!

We protect your privacy with 256-bit SSL encryption and full compliance with Malaysia's PDPA. Sign up for free today, with a minimum deposit of RM20, and enjoy a welcome bonus of up to RM500 on a platform you can trust.

Register for Free Now Log In

BD Baji Cares About You — Not Just Your Data

Privacy is one aspect of how we care for our members. We are equally committed to your wellbeing as a player. If you need support with managing your betting activity, please visit our Responsible Gaming us for guidance and available self-control tools.

BD Baji is for users aged 18 and above only. Please bet responsibly.

Bahasa Melayu