Bagus44 Privacy Policy

Bagus44 ("the Platform", "we", "us", "our") is committed to protecting the personal data of every individual who interacts with our services. This Privacy Policy ("Policy") describes how Bagus44 collects, uses, stores, discloses, and safeguards personal data obtained from users ("you", "Player", "Data Subject") of the Bagus44 website located at https://bagus44.cam and all associated services.

This Policy is written in accordance with internationally recognised data protection principles, including those modelled on the General Data Protection Regulation (GDPR) framework and the Personal Data Protection Act 2010 of Malaysia (PDPA 2010). By registering an Account or accessing any part of the Bagus44 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, all of which together govern the relationship between you and Bagus44.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Data Controller" means Bagus44, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of Bagus44, subject to binding contractual obligations.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC Data" means identity verification documents and supporting materials submitted by a Player to fulfil Know Your Customer requirements, including government-issued identification documents, proof of address, and selfie verification images.
• "Sensitive Personal Data" means personal data relating to health, financial circumstances, or other categories that warrant heightened protection under applicable data protection law.
• "Platform" means the Bagus44 website, mobile-optimised interface, and all digital services operated under https://bagus44.cam.

Bagus44 collects personal data through several channels, including your Account registration, ongoing use of the platform, identity verification processes, and technical interactions with our website. The categories of personal data we collect include:

3.1 Registration Data

When you create a Bagus44 Account, we collect your full legal name, date of birth, email address, contact telephone number, and residential address. This information is required to establish and maintain your Account and verify your eligibility to use the platform.

3.2 Identity Verification (KYC) Data

In fulfilment of our licensing obligations, we require verified Players to submit government-issued identification documents. For Malaysian players, this typically includes a copy of your MyKad (National Identity Card), Driver's Licence, or Passport, along with a recent proof of address (such as a utility bill or bank statement issued within the past three months) and a selfie photograph holding your identification document. This data is collected solely for verification and anti-fraud purposes.

3.3 Financial Transaction Data

We record details of all deposit and withdrawal transactions processed through your Account, including the payment method used (e.g., Maybank2u, DuitNow, Touch 'n Go eWallet, FPX, Boost, GrabPay, CIMB Clicks, Public Bank), transaction amounts in Malaysian Ringgit (MYR), timestamps, and transaction reference numbers. We do not store full bank account numbers or card details on our servers.

3.4 Gameplay & Betting Activity

We collect records of all gameplay activity, including games played, bets placed, amounts wagered, outcomes, and bonus usage. This data is used for Account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.

3.5 Technical & Device Data

We automatically collect technical data when you access the platform, including your IP address, browser type and version, operating system, device identifiers, referring URLs, session duration, and pages viewed. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communications Data

If you contact Bagus44 Customer Support via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

Bagus44 processes your personal data only for specific, legitimate, and documented purposes. We do not process data beyond what is necessary for the purposes stated below (the principle of data minimisation):

• Account Creation and Management: To establish and maintain your player Account, verify your identity, process login authentication, and enable access to platform features.
• Payment Processing: To facilitate deposits and withdrawals via Malaysian payment methods including Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay. Transaction records are retained for financial reporting and regulatory compliance.
• Regulatory and Licensing Compliance: To meet obligations imposed by our international gaming licence, including anti-money-laundering (AML) checks, Know Your Customer (KYC) verification, age verification, and reporting requirements.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling Monitoring: To identify patterns of play that may indicate problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off tools in accordance with our Responsible Gambling Policy.
• Customer Support: To provide timely and effective responses to player queries, complaints, and dispute resolution requests.
• Marketing Communications (with consent): To send promotional offers, bonus notifications, and platform updates to Players who have opted in to receive marketing communications. You may withdraw this consent at any time.
• Platform Analytics and Improvement: To analyse usage patterns, identify technical issues, and improve the overall player experience on the platform.

Bagus44 relies on the following legal bases to process your personal data, as recognised under applicable data protection legislation:

• Contractual Necessity: Processing your registration data, financial transaction records, and Account activity data is necessary for the performance of the contract between you and Bagus44 (as set out in our Terms & Conditions).
• Legal Obligation: Processing KYC data, AML records, and certain financial transaction logs is required to comply with obligations imposed by our international gaming licence and applicable financial crime prevention regulations.
• Legitimate Interests: Processing technical and device data for fraud prevention, security monitoring, and platform improvement is undertaken on the basis of Bagus44's legitimate business interests, provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis — for example, for marketing communications — we will obtain that consent explicitly before commencing processing, and you may withdraw it at any time without detriment to your Account standing.

Bagus44 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data only in the following limited circumstances:

• Service Providers and Data Processors: We engage reputable third-party service providers to support platform operations, including payment processors (facilitating transactions via FPX, DuitNow, and e-wallet networks), identity verification providers, game software providers, cloud hosting and data storage providers, and customer support platform providers. All such processors are contractually bound to process your data only on Bagus44's instructions and to implement appropriate security measures.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to our licensing authority, financial intelligence units, law enforcement agencies, or other competent regulatory bodies where required by law, court order, or in furtherance of our obligations to prevent financial crime. Such disclosures will be documented and limited to what is strictly necessary.
• Fraud Prevention and Industry Databases: We may share data with industry-wide fraud prevention databases and responsible gambling self-exclusion registries to protect players and prevent prohibited conduct across the sector.
• Corporate Restructuring: In the event of a merger, acquisition, or sale of all or substantially all of Bagus44's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by that entity.

The Bagus44 platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session continuity, support security functions, and analyse platform usage. Cookies are small text files stored on your device when you visit our website.

7.1 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the platform — including maintaining your login session, remembering items in your Account preferences, and enabling secure payment processing. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your language preferences, display settings, and other personalisation choices to improve your experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve platform performance.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking, bot traffic, and suspicious access patterns.

7.2 Managing Cookies

Most web browsers are set to accept cookies by default. You may adjust your browser settings to refuse some or all cookies; however, disabling strictly necessary cookies will affect your ability to log in and use core platform features. For detailed instructions on managing cookies in your specific browser, please consult your browser's help documentation.

Bagus44 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements.

• Active Account Data: Retained throughout the duration of your registered Account and for a minimum period of five (5) years following Account closure, in accordance with our licensing authority's record-keeping requirements.
• KYC and AML Records: Retained for a minimum of five (5) years following the end of the business relationship, as required under applicable anti-money-laundering obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Marketing Consent Records: Retained for as long as you remain opted-in to marketing communications, and for a reasonable period thereafter to evidence compliance.
• Customer Support Communications: Retained for up to three (3) years, unless subject to ongoing disputes requiring a longer retention period.
• Technical and Session Logs: Retained for a maximum of twelve (12) months unless required for ongoing security investigations.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with industry best practices.

Bagus44 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major financial institutions across Malaysia, including Maybank and CIMB.
• Encrypted Data Storage: Sensitive personal data stored on our servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection and Monitoring: Our systems are continuously monitored for anomalous activity, potential breaches, and security vulnerabilities. Automated intrusion detection systems operate around the clock.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their Accounts to provide an additional layer of protection against unauthorised access.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and remediate vulnerabilities proactively.

In the event of a personal data breach that poses a risk to your rights and freedoms, Bagus44 will notify affected Players and relevant authorities in accordance with applicable data breach notification requirements, without undue delay.

Subject to applicable data protection legislation, you hold the following rights in relation to your personal data held by Bagus44. You may exercise any of these rights by contacting our Data Protection team via the contact details in Section 15.

• Right of Access: You have the right to request confirmation of whether Bagus44 processes your personal data and, if so, to receive a copy of that data along with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You may also update certain Account details directly through your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to legal retention obligations and overriding legitimate interests.
• Right to Restriction of Processing: You may request that Bagus44 restrict processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to Data Portability: Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including the right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid data rights requests within thirty (30) days of receipt. We may request proof of identity before fulfilling any access, rectification, or erasure request to protect against fraudulent requests.

As an internationally licensed online gaming platform, Bagus44 may transfer your personal data to countries outside Malaysia for the purposes of processing, storage, and service delivery. Such transfers may occur in the following contexts:

• Data processed by our cloud hosting and infrastructure providers, which may operate data centres in multiple jurisdictions.
• Data shared with game software providers and RNG testing laboratories operating internationally.
• Data transmitted to identity verification service providers with operations across multiple regions.

Where personal data is transferred to a country that does not provide an equivalent level of data protection to that available in Malaysia, Bagus44 will take appropriate safeguards to ensure that your data remains protected. Such safeguards may include contractual clauses binding the recipient to equivalent data protection standards, compliance with the recipient jurisdiction's applicable data protection law, or other lawful transfer mechanisms.

Bagus44 strictly prohibits the registration, deposit, or participation in any gaming activity by persons under the age of 21. We do not knowingly collect personal data from individuals who are under 21 years of age.

As part of our KYC verification process, all Players are required to submit proof of age. Any Account found to belong to a person under 21 will be immediately suspended, all associated data will be flagged for review, and any funds deposited will be returned to the original payment source after completion of appropriate verification.

If you believe that Bagus44 has inadvertently collected personal data from an individual under the age of 21, please notify us immediately via the contact details in Section 15. We will investigate and take appropriate action promptly.

The Bagus44 platform integrates with a number of third-party services necessary for its operation. Where your use of these services involves the transfer or processing of your personal data by third parties, this Privacy Policy does not govern how those third parties handle your data. You are encouraged to review the privacy policies of any third-party service providers whose services you use in connection with the Bagus44 platform.

Third-party services integrated into or accessed through the Bagus44 platform may include:

• Malaysian payment gateways and financial institutions (including banks supporting FPX and DuitNow infrastructure).
• Electronic money institutions supporting e-wallet payment methods (Touch 'n Go eWallet, Boost, GrabPay).
• Game software and live streaming providers whose titles are featured on the platform.
• Customer communication and live chat platform providers.

Bagus44 does not control and is not responsible for the data practices of these third parties beyond our contractual obligations as Data Controller.

Bagus44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our business operations. Material changes to this Policy will be communicated to registered Players via email notification and/or a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page reflects the effective date of the current version. We recommend reviewing this Policy periodically to remain informed of how we protect your personal data. Continued use of the Bagus44 platform following publication of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the Bagus44 Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy Enquiry" or "Data Rights Request" for faster routing
• Live Chat: Available on-site 24 hours a day, 7 days a week in English and Bahasa Melayu
• Response Time: We aim to acknowledge all data rights requests within 5 business days and resolve them within 30 calendar days

For queries relating to responsible gambling, self-exclusion, or player protection tools, please visit our Responsible Gambling page for dedicated resources and contact details.