Bajifair Privacy Policy – Data Protection & Player Privacy in Malaysia

1Introduction – Bajifair's Commitment to Your Privacy

Bajifair ("we", "the platform") operates through the website bajifair.best and is fully responsible for the processing of personal data of all players who register and use our services. This Privacy Policy is written to comply with applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA).

We believe privacy is not merely a legal obligation — it is a fundamental right of every user on a digital platform. When you register a bajifair account, make a deposit via Touch 'n Go eWallet, GrabPay, Boost, DuitNow, ShopeePay, FPX Maybank2u, or CIMB Clicks, or simply browse our platform, you are entrusting us with your personal information. We take that trust very seriously.

This Privacy Policy clearly sets out what we collect, why we need it, how we protect it, with whom we may share it (and why), and what your rights are as a data subject under Malaysian law. Please read this policy carefully. By continuing to use the bajifair platform after reading this policy, you confirm your acceptance of the practices described herein.

2Personal Information We Collect

Bajifair collects personal information from players through several methods. Below are the main categories of data we collect and the purposes for which they are collected:

A. Information You Provide Directly

• Registration Information: Full name, Malaysian identity card number (MyKad), date of birth, email address, mobile number, and account password upon registering with bajifair.
• Identity Verification Information (KYC): A copy of your MyKad or passport, a verification selfie, and any other supporting documents requested during the bajifair KYC process.
• Financial Information: Payment method details associated with your account — including e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow information, or bank account numbers for FPX Maybank2u and CIMB Clicks. Please note: bajifair does not directly store credit or debit card numbers.
• Communication Information: Records of correspondence, live chat, email, and WhatsApp communications between you and the bajifair support team.

B. Information Collected Automatically

• Platform Usage Data: Betting records, game history, selected markets, stake amounts, winnings and losses at bajifair.
• Technical Data: IP address, web browser type and version, device operating system, screen resolution, and device information used to access bajifair.
• Location Data: General location information derived from your IP address for geography verification and legal compliance purposes.
• Session Data: The pages you visit, time spent in each section of the platform, and the clicks and actions you perform while using bajifair.

3How bajifair Uses Your Personal Information

Bajifair uses the personal data collected for specific, legitimate purposes. Below is a full explanation of how each data category is used in the day-to-day operations of our platform:

• Account Management & Identity Verification: Registration and KYC data is used to create and manage your bajifair account, verify your identity in fulfilment of AML and compliance requirements, and prevent fraud and the creation of multiple accounts.
• Financial Transaction Processing: Financial information is used to process deposits and withdrawals via your chosen Malaysian payment method — all in Malaysian Ringgit (MYR) with no currency conversion.
• Provision of Betting Services: Betting records and game history are used to manage your betting slips, calculate winnings, and ensure that all betting transactions on bajifair are accurately recorded.
• Customer Support: Communication records help bajifair's support team understand the context of each enquiry, enabling them to provide more effective and accurate responses.
• Security & Fraud Prevention: Technical and session data is used by bajifair's security systems to detect suspicious activity, unauthorised login attempts, or patterns that suggest platform misuse.
• Legal Compliance: This includes reporting required under Malaysia's AML legislation, compliance with PDPA 2010, and cooperation with authorities where required by a court order or direction from a legitimate regulatory body.
• Platform Improvements: Anonymised usage data is used to understand how players interact with bajifair for the purposes of product improvement, user interface refinement, and overall platform experience enhancement.
• Account-Related Communications: Emails, SMS, and important notices regarding your bajifair account — including transaction confirmations, security alerts, policy updates, and responsible gambling information.

4Sharing of Information with Third Parties

Bajifair does not sell, rent, or share players' personal information with third parties for marketing or commercial gain. However, there are specific situations where we may need to share information with certain parties, as described below:

• Payment Service Providers: To process your deposits and withdrawals, bajifair is required to share the necessary transaction information with Malaysian payment service providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network. This sharing is limited strictly to the information needed to complete the transaction.
• Technology Service Providers: Bajifair uses trusted third-party service providers for server hosting, data processing, and technical infrastructure. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the purposes specified in their service contracts with bajifair.
• Legal Authorities: Bajifair will disclose personal information to the police, courts, or Malaysian regulatory authorities when required to do so by applicable law, court order, or where disclosure is necessary to prevent serious crime or protect the public interest.
• Audit & Compliance: Independent audit firms conducting compliance reviews and security audits may be granted limited access to data strictly necessary for audit purposes, subject to strict confidentiality agreements.

5Data Security – How Bajifair Protects Your Information

Bajifair continually invests in robust technical and organisational security measures to protect all players' personal data from unauthorised access, loss, alteration, or accidental disclosure.

The key security measures employed by bajifair include:

• 256-Bit SSL Encryption: All data transmitted between your web browser or mobile app and bajifair's servers is encrypted using 256-bit SSL/TLS technology – the same standard used by Malaysia's leading banking institutions.
• Data-at-Rest Encryption: Sensitive personal data such as KYC information and payment details is stored in encrypted form on bajifair's servers, meaning it cannot be read even by unauthorised internal staff.
• Two-Factor Authentication (2FA): Bajifair offers 2FA protection for player accounts, requiring additional verification via SMS or an authenticator app each time you log in from a new device.
• Internal Access Controls: Access to player data within bajifair's internal systems is strictly limited and controlled under the principle of least privilege — staff can only access the data they need to carry out their specific duties.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or anomalies in data access patterns on the bajifair platform.
• Regular Security Audits: Bajifair undergoes periodic independent security audits conducted by qualified cybersecurity firms to identify and address potential vulnerabilities before they can be exploited.

While bajifair takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong password, do not share your login credentials, and notify bajifair immediately if you suspect any unauthorised access at support@bajifair.best.

6Cookies & Tracking Technologies

The bajifair platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and collect analytics data that helps us understand how players use our services.

Types of cookies used by bajifair:

• Essential Cookies (Strictly Necessary): Required for the core functionality of the bajifair platform — including maintaining your login session, remembering language preferences, and securing your betting session. These cookies cannot be disabled without affecting the platform's core functionality.
• Functional Cookies: Allows bajifair to remember your preferences — such as your preferred payment method, display settings, and other choices — to make your experience more personalised and convenient.
• Analytics Cookies: Collects information on how players interact with the bajifair platform — most-visited pages, navigation paths, and response times. This data is used in aggregate, non-identifiable form for platform improvement purposes.
• Security Cookies: Used by bajifair's security systems to detect suspicious activity, prevent cross-site request forgery (CSRF), and protect player accounts from cyber threats.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect your ability to use some features of the bajifair platform to their full extent.

7Data Storage & International Transfers

Bajifair player personal data is stored on servers located in regions that comply with strict data protection standards. Bajifair ensures that all personal data of Malaysian players is protected to a standard equal to or higher than that required under Malaysia's PDPA 2010, regardless of the physical location of the storage servers.

Bajifair's data retention periods are as follows:

• Active Account Data: Retained for the duration that your bajifair account remains active and in use.
• Betting Records Data: Retained for a minimum of five years for AML compliance and audit requirements applicable in Malaysia.
• Support Communication Data: Retained for three years from the date of last communication for reference and dispute resolution purposes.
• Closed Account Data: Following account closure, bajifair will retain records required by law for the specified retention period, after which data will be permanently deleted or anonymised.

8Your Rights as a Bajifair Player Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal information held by bajifair. Bajifair is committed to facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within a reasonable timeframe and in a readable format.
• Right to Rectification: If any personal information we hold is inaccurate or out of date, you have the right to request a correction. You can also update most of your personal information directly through your bajifair account settings.
• Right to Object to Processing: In certain circumstances, you have the right to object to bajifair's processing of your personal data, particularly for direct marketing purposes.
• Right to Information: You have the right to know the specific purposes for which your personal data is being processed by bajifair, all of which are explained in detail within this Privacy Policy.
• Right to Withdraw Consent: For processing activities that rely on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.

To exercise any of the rights above, please contact bajifair's Data Protection Officer at support@bajifair.best stating the specific right you wish to exercise and providing sufficient information for us to verify your identity. We will respond within 21 business days of receiving a complete request.

9Children's Data & Protection of Young Players

Bajifair's services are strictly for individuals aged 18 and above. Bajifair does not knowingly collect personal information from anyone under 18. If we find that personal data belonging to a minor has been collected without adequate age verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your underage child has registered an account on bajifair, please contact us immediately at support@bajifair.best. We will investigate the matter as a high priority and take appropriate action, including account closure and deletion of all associated data.

10Changes to This Privacy Policy

Bajifair reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements in how we handle players' personal data. The latest version of the Privacy Policy is always available on this page, with the updated effective date clearly indicated.

When material changes are made to this Privacy Policy — meaning changes that significantly affect how we handle your personal data — bajifair will notify you via email to the address registered to your account and/or through a prominent notice on the bajifair platform homepage at least 14 days before the changes take effect.

Continued use of the bajifair platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your bajifair account before they take effect by contacting our support team.

11Contact Us — Privacy-Related Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bajifair handles your personal data, please contact us through the following channels:

• Email: support@bajifair.best — For all privacy and personal data rights enquiries
• Live Chat: Available 24/7 directly on the bajifair platform
• WhatsApp: For immediate enquiries in Bahasa Melayu

Our team operates 24 hours a day, seven days a week, and all communications are conducted in Bahasa Melayu. We aim to respond to privacy-related enquiries within 3 business days, and to formal data rights requests within 21 business days of receiving a complete submission.