Badu88 Privacy Policy — Personal Data Protection for Malaysian Members

Badu88 ("we", "Platform", "company") deeply values the trust you place in us when you choose to become a member of our online gaming platform. This Privacy Policy explains in detail how we collect, use, store, protect, and in certain circumstances, share your personal information.

This policy applies to all users who access or use badu88 services through the official website at badu88.bio, the badu88 mobile app for Android and iOS, and any of our official communication channels including Live Chat, email, and Telegram.

Badu88 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We take seriously every responsibility arising from the processing of our members' personal data, and we are committed to ensuring your data is handled with the highest level of care.

We collect data from two main sources: information you provide directly to us, and information collected automatically when you use our platform.

We never collect sensitive data such as your medical information, criminal records, or political views. Every category of data we collect has a clear and legitimate purpose, and we do not collect data beyond what is required for that purpose.

Every piece of data we collect is used for specific, legitimate purposes. Below is a detailed breakdown of how your data is used in the day-to-day operations of badu88:

• Account management: Registering, verifying, and maintaining your account, including KYC processing and identity verification as required by law.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions you make through our platform securely and efficiently.
• Security and fraud prevention: Monitoring suspicious activity, detecting unauthorized access attempts, and protecting your account from misuse.
• Customer support: Providing technical assistance and resolving inquiries or complaints you submit through any of our support channels.
• Platform improvement: Analyzing aggregate usage patterns to improve the user experience, identify technical bugs, and develop new features.
• Legal compliance: Meeting reporting and compliance requirements with relevant authorities, including anti-money laundering (AML) obligations.
• Marketing communications: Sending information about promotions, bonuses, and exclusive offers — only to members who have consented to receive marketing communications.

Badu88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the following limited circumstances, we may share your data with trusted parties:

• Payment service providers: Required financial information is shared with approved payment processors (such as banks and e-wallet operators) solely to facilitate your transactions.
• Game providers: Minimum necessary data is shared with third-party game software providers to enable access to their games on our platform. These providers are bound by strict confidentiality agreements.
• Authorities and regulatory bodies: We will disclose required data to government authorities, regulatory bodies, or law enforcement when mandated by law or court order.
• Technology providers: Our platform uses cloud computing services and technical infrastructure from trusted technology providers. All such providers are bound by data processing agreements that require them to safeguard your data.
• Professional advisors: In specific situations such as audits or legal proceedings, data may be shared with lawyers, accountants, or auditors who are subject to professional confidentiality obligations.

In all data-sharing cases, we ensure that only the minimum necessary data is shared, and all recipients are bound by data protection obligations equivalent to or stricter than those applicable to badu88.

Protecting your personal data is our top technical and operational priority. badu88 implements multiple layers of security controls to ensure your data is always protected from unauthorized access, disclosure, alteration, or destruction.

• Data encryption in transit: All communications between your device and our servers are protected with 256-bit SSL/TLS encryption — the same standard used by leading banking institutions in Malaysia.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are stored in encrypted format using the AES-256 algorithm.
• Layered access controls: Access to member data in our internal systems is restricted to staff who genuinely need it, and every access is recorded in a permanent audit log.
• Two-factor authentication (2FA): Our internal systems require 2FA for all staff access to databases containing member information.
• Regular security testing: We conduct regular penetration testing and vulnerability assessments with independent third parties to identify and address security weaknesses.
• Incident response plan: badu88 has a clear incident response procedure. In the event of a material data breach, we will notify affected members within 72 hours.

Badu88 uses cookies and similar tracking technologies to enhance user experience, understand usage patterns, and ensure platform security. The following are the types of cookies we use:

• Essential cookies (required): Required for core platform functions such as Login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use the platform — pages visited, time spent, errors encountered — to help us improve performance and usability.
• Functional cookies: Remembering your preferences such as language, display settings, and game preferences to deliver a more personalized experience.
• Analytics cookies: Helping us understand platform traffic in aggregate for business planning and service improvement purposes.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect some platform features, but core functions such as Login and gameplay will continue to work as long as essential cookies remain enabled.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by badu88. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact our Data Protection Officer by email at [email protected] or via the platform's Live Chat. We will acknowledge receipt of your request within 3 business days.

Badu88 retains your personal data for as long as your account is active and for the required period following account closure based on legitimate legal and operational requirements. Below are our data retention guidelines:

• Active account data: Retained for as long as your account remains active on the badu88 platform.
• Financial transaction records: Retained for a minimum of 7 years following the transaction date, in line with Malaysian financial and tax legal requirements.
• KYC documents: Retained for a minimum of 5 years following account closure, in line with AML/CFT (Anti-Money Laundering / Counter Financing of Terrorism) requirements.
• Support communication records: Retained for 3 years for quality control and dispute resolution purposes.
• Technical and security logs: Retained for 12 months for security and technical diagnostic purposes.
• Marketing data: Retained until you withdraw consent or request data deletion, whichever comes first.

Upon expiry of the applicable retention period, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or linked back to you.

The badu88 platform may contain links or integrations to third-party services such as game providers, payment processors, or social media channels. It is important that you understand:

• The badu88 Privacy Policy applies only to the platform and services operated directly by badu88.
• Each third-party platform has its own privacy policy, which you should review and understand separately.
• Badu88 is not responsible for the privacy practices or content of any third-party websites or applications you access via links on our platform.
• We recommend reading the privacy policy of each third-party platform before sharing any personal information with them.

Badu88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or operational improvements. Whenever we make significant changes, we will:

• Publishing the updated version on the official website with a new "Last Updated" date.
• Notifying all active members via their registered email at least 14 days before changes take effect.
• Displaying a clear notice on the platform's home page throughout the notice period.

Continued use of the badu88 platform after changes take effect constitutes your acceptance of the amended policy. If you do not agree with the changes, you have the right to close your account before the effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the badu88 Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (response within 5 business days)
• Live Chat: Available 24/7 on the badu88 platform in Bahasa Malaysia, English, and Mandarin
• Official Telegram: Via badu88's official verified Telegram channel

We take every privacy inquiry and complaint seriously. If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department (PDPA) of Malaysia or the relevant data protection authority in your jurisdiction.