Privacy Policy

bata123 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every user ("you", "Player", "User") who accesses or interacts with the bata123 website at https://bata123.cam. This Privacy Policy ("Policy") sets out in clear terms how we collect, use, store, protect, share, and otherwise process your personal data in connection with your use of our online casino and sports betting services.

This Policy applies to all players who register an Account with bata123, including users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations where the Platform is available. By creating an Account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and bata123. Where this Policy and the Terms & Conditions address the same subject matter, this Policy takes precedence with respect to data protection matters.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information that directly or indirectly identifies a living individual, including names, email addresses, financial information, device identifiers, and location data.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, and deletion.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For this Platform, bata123 acts as the Data Controller.
• "Data Processor" — A third party that processes Personal Data on behalf of bata123 in accordance with our instructions and this Policy.
• "KYC" — Know Your Customer — the regulated identity verification process applied to all registered Accounts prior to the processing of withdrawals.
• "Cookies" — Small data files stored on your device that allow the Platform to recognise your browser, maintain session state, and gather usage analytics.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.

bata123 collects the categories of Personal Data described in the table below. Data is collected only to the extent required for the purposes identified in Section 5 of this Policy.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless explicitly required by applicable regulatory obligations, in which case we will seek your specific consent.

bata123 collects Personal Data through the following channels:

• Directly from you: When you complete the account registration form, upload KYC documents, make a deposit or withdrawal using Malaysian payment services such as DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, or Hong Leong Bank, contact our support team, or submit any other information through the Platform.
• Automatically through your use of the Platform: Our servers automatically log certain technical information when you visit bata123, including your IP address, device type, browser version, referring URL, and pages accessed. This information is collected using server logs and analytical tools.
• Through cookies and similar technologies: As described in Section 9 of this Policy, bata123 uses cookies to maintain session state, detect fraud, and gather aggregated usage analytics.
• From third-party service providers: Where permitted by applicable law and as necessary to verify your identity, prevent fraud, or comply with anti-money laundering obligations, we may receive Personal Data from third-party KYC verification providers, fraud prevention services, and payment network operators.

bata123 processes your Personal Data for the following specific purposes. We process data only for the purpose for which it was collected, and do not repurpose data in a manner incompatible with those original purposes without your prior consent.

• Account Registration and Management: To create and maintain your Account, verify your identity and age (21+), manage your profile settings, and administer your account security.
• Payment Processing: To process deposits and withdrawals via supported Malaysian payment methods and to maintain accurate records of all financial transactions.
• Identity and Age Verification (KYC): To comply with our international licensing requirements and applicable anti-money laundering obligations by verifying that players are genuine individuals of at least 21 years of age.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other illegal or prohibited activities.
• Service Delivery and Improvement: To provide, maintain, and improve the Platform, including personalising your gaming experience, optimising game performance, and developing new features based on aggregated user behaviour data.
• Customer Support: To respond to your queries, complaints, and requests via live chat and email, and to maintain a record of your communications with our support team.
• Responsible Gambling: To monitor account activity for signs of problem gambling behaviour, administer self-imposed limits and self-exclusion tools, and fulfil our obligations under our responsible gambling programme.
• Marketing Communications: Where you have provided consent, to send you information about promotions, bonuses, and new features on bata123. You may withdraw consent at any time by contacting our support team.
• Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and the obligations imposed by our international gaming licence.

bata123 processes Personal Data in accordance with one or more of the following recognised legal bases, applied on a purpose-by-purpose basis:

• Contractual Necessity: Processing required to perform the contract between you and bata123, including providing your Account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering procedures, and reporting obligations under our international licence.
• Legitimate Interests: Processing carried out for bata123's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, Platform security, analytics for service improvement, and responsible gambling monitoring.
• Consent: Processing for marketing communications, non-essential cookies, or other optional purposes where we have obtained your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bata123 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following circumstances:

• Payment Service Providers: To process deposits and withdrawals, we share relevant financial data with payment network operators including FPX, DuitNow, and other approved Malaysian payment service providers. Each provider is subject to its own data protection obligations.
• KYC and Identity Verification Partners: To fulfil our age and identity verification obligations, we may share documentation you submit with independent KYC verification service providers who process data solely on our behalf under strict contractual controls.
• Fraud Prevention Services: We share certain technical and behavioural data with fraud detection platforms to identify and prevent suspicious activity that could harm you or other players.
• IT Infrastructure Providers: Our Platform is hosted on secure server infrastructure provided by third-party hosting partners. These partners access data only as necessary to provide infrastructure services and are bound by contractual data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or regulatory directive, bata123 may disclose Personal Data to competent authorities. We will notify you of any such disclosure where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, restructuring, or sale of all or part of bata123's business, Personal Data held by the Platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

bata123 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, taking into account any minimum retention periods mandated by applicable law or our licensing authority.

• Active Account Data: Retained for the duration of your Account's active status, plus a post-closure retention period as required by our licensing and legal obligations — typically a minimum of five (5) years from Account closure.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to satisfy anti-money laundering and financial record-keeping requirements.
• KYC Documentation: Retained for as long as your Account remains active and for a further period of at least five (5) years following Account closure, in line with standard regulatory expectations for online gaming operators.
• Customer Support Communications: Retained for up to three (3) years from the date of the communication, unless the subject matter requires longer retention for compliance or dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, following which your marketing preferences are updated within a reasonable timeframe.

At the expiry of the applicable retention period, Personal Data is either permanently and securely deleted from our systems or anonymised in a manner that prevents re-identification, whichever is more technically appropriate given the nature of the data.

bata123 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device that enables our servers to recognise your browser on subsequent visits. Cookies do not contain executable code and cannot access other data on your device.

The following categories of cookies are used on bata123:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your logged-in session, processing transactions, and applying your security settings. These cookies cannot be disabled without rendering key Platform functions inoperable.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience on repeat visits.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — pages visited, time on page, error reports — enabling us to improve performance and usability.
• Security Cookies: Assist our fraud detection systems in identifying unusual access patterns or potentially malicious activity against your Account.

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive alerts when a new cookie is set. Please note that disabling strictly necessary cookies may prevent access to parts of the Platform.

bata123 employs a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to:

• Encryption in Transit: All data transmitted between your device and bata123 servers is encrypted using TLS 1.2 or higher, represented by the HTTPS protocol and the padlock indicator in your browser.
• Encryption at Rest: Sensitive data held on our servers, including financial records and KYC documents, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to Personal Data within bata123 is restricted on a strict need-to-know basis. Staff and contractors with access to player data are subject to confidentiality obligations and background screening.
• Regular Security Audits: Our Platform infrastructure and data security practices are reviewed by independent third-party auditors on a regular schedule.
• Incident Response: bata123 maintains a documented data breach response plan. In the event of a significant data breach affecting your Personal Data, we will notify you and relevant authorities in accordance with applicable obligations.

As a data subject, you hold the following rights in relation to your Personal Data held by bata123. To exercise any of these rights, please contact our support team using the details in Section 14.

bata123 is strictly intended for adults aged 21 years and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. Our registration process requires age declaration, and all Accounts are subject to mandatory age verification through KYC procedures.

If bata123 discovers that an Account has been registered by or on behalf of a person under 21 years of age, the Account will be immediately suspended, all associated Personal Data will be deleted, and any funds held in the Account will be handled in accordance with our underage gambling policy as set out in our Terms & Conditions.

bata123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — meaning they substantially change how we collect, use, or share your Personal Data, or reduce your rights — we will provide prior notice to registered users by email or through a prominent notification on the Platform. Minor clarifications or non-material updates may be made without individual notice.

Your continued use of bata123 following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the updated Policy, you should close your Account and cease using the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by bata123, please contact us through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat function accessible throughout the Platform.
• Response Commitment: We aim to acknowledge all data-related enquiries within 5 business days and to provide a full substantive response within 30 calendar days.

For requests to exercise your data rights as described in Section 11, please specify in your message the right you wish to exercise and provide sufficient information for us to verify your identity and locate your Account.

For queries relating to our full contractual terms, please review our Terms & Conditions. For information about responsible gambling tools and support, please visit our Responsible Gambling page.