Privacy Policy

This Privacy Policy ("Policy") is issued by Batik88 ("Batik88", "we", "us", "our"), the operator of the online gaming platform accessible at batik88.cam. This Policy explains how we collect, use, store, share, and protect personal data belonging to players, visitors, and other individuals who interact with the Batik88 platform.

Batik88 is committed to handling personal data responsibly, transparently, and in accordance with the applicable data protection principles governing our international licensing jurisdiction. We respect the privacy of our players across Malaysia — whether you are accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam — and we take our obligations as a data controller seriously.

By registering an account with Batik88, accessing the platform, or otherwise submitting personal information to us, you acknowledge that you have read and understood this Privacy Policy, and you consent to the collection and processing of your personal data in the manner described herein.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

The following definitions apply throughout this Privacy Policy:

Batik88 collects only the personal data necessary to provide our services, comply with legal obligations, and protect the integrity of the platform. The categories of personal data we may collect are described below.

3.1 Registration & Account Data

When you create a Batik88 account, we collect:

• Full name (as it appears on your government-issued identification document)
• Date of birth (to verify you are aged 21 or above)
• Email address (used as your primary account identifier and for communications)
• Mobile phone number (for two-factor authentication and account security)
• Residential address, including postcode and state (Kuala Lumpur, Penang, Johor, Selangor, and other Malaysian states)
• Username and encrypted password hash
• Account preferences and settings

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and responsible gambling requirements, we may collect:

• Copy of government-issued photo identification (Malaysian MyKad, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or government correspondence)
• Selfie or liveness verification image for identity matching purposes
• Source of funds or source of wealth documentation where applicable thresholds are triggered

3.3 Financial & Transaction Data

To process deposits and withdrawals, we collect:

• Deposit and withdrawal transaction records, including amounts, timestamps, and reference numbers
• Payment method identifiers — for example, the last four digits of a bank account number, e-wallet account reference (Touch 'n Go eWallet, Boost, GrabPay), FPX bank code (Maybank, CIMB, Public Bank, Hong Leong), or cryptocurrency wallet address
• Currency denomination (MYR or cryptocurrency equivalent)

Batik88 does not store full payment card numbers, CVV codes, or online banking credentials. Where card payments are processed, full card data is handled exclusively by certified PCI-DSS compliant payment processors.

3.4 Gaming & Betting Activity Data

• Game session logs, including games played, bet amounts, outcomes, and session duration
• Sports betting history, including markets selected, odds accepted, and settlement records (Liga Super Malaysia, EPL, Champions League, UFC, esports, and other markets)
• Bonus and promotion participation records
• Responsible gambling tool settings (deposit limits, session reminders, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Session identifiers, cookies, and similar tracking technologies
• Platform access logs (login timestamps, feature usage, error reports)

3.6 Communications Data

• Live chat transcripts and support ticket correspondence
• Email and notification interaction data (open rates, click-through records for communications you have opted into)
• Feedback, complaint, and dispute records

Batik88 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, session tracking, and server logs when you access and use the platform.
• From third-party service providers — including identity verification agencies, payment processors (DuitNow, FPX providers, e-wallet operators), fraud prevention services, and analytics providers — where such providers supply data to us as part of their contracted services.
• From public sources — in limited circumstances, from publicly available records where required for enhanced due diligence or AML compliance purposes.

Batik88 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

Batik88 uses collected personal data for the following purposes:

6.1 Platform Operations

• Creating and managing your Batik88 account
• Processing deposits and withdrawals via DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks
• Delivering game content and sports betting services
• Managing bonus, promotion, and loyalty programme participation
• Responding to support queries, disputes, and complaints

6.2 Compliance & Security

• Verifying your identity and age (minimum 21 years) through KYC procedures
• Conducting ongoing AML and fraud monitoring in accordance with our licensing obligations
• Maintaining audit trails required by our international licensing jurisdiction
• Detecting and preventing cheating, collusion, bot activity, and other prohibited conduct
• Geolocation checks to identify access from restricted jurisdictions

6.3 Responsible Gambling

• Administering responsible gambling tools including deposit limits, session reminders, and self-exclusion
• Monitoring player behaviour for patterns indicative of problem gambling and intervening where appropriate
• Maintaining self-exclusion records to prevent re-registration during exclusion periods

6.4 Communications

• Sending transactional communications — deposit confirmations, withdrawal notifications, security alerts
• Sending promotional communications where you have opted in — bonus offers, tournament announcements, new game alerts
• Sending platform updates that materially affect your account or these policies

6.5 Platform Improvement

• Analysing aggregated, anonymised usage data to improve platform design, game selection, and user experience
• Testing new features, payment integrations, and responsible gambling tools

Batik88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the limited circumstances described below.

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• Payment processors — e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), FPX gateway providers, cryptocurrency payment processors, and card payment acquirers
• Identity verification providers — for automated KYC and liveness verification
• Fraud prevention services — for real-time transaction screening and risk scoring
• Cloud infrastructure providers — for secure hosting of platform data and services
• Live chat and customer support platforms — for managing player support interactions
• Game studio providers — who may receive session and outcome data necessary to operate their games within our platform

All data processors are contractually obligated to process personal data only as directed by Batik88, to maintain appropriate technical and organisational security measures, and not to sub-process data without our written authorisation.

7.2 Legal & Regulatory Disclosure

Batik88 may disclose personal data to competent authorities, law enforcement agencies, or regulators where required to do so by applicable law, court order, or licensing obligation. Where legally permissible, Batik88 will notify the affected player of any such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of Batik88's business or assets, personal data held by Batik88 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being assumed by the successor entity.

Batik88 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate and improve the platform. Cookies are small text files stored on your device that help us recognise returning users, maintain session state, and understand how the platform is used.

8.1 Types of Cookies We Use

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use core platform features. Batik88 does not use third-party advertising cookies or retargeting trackers.

Batik88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal and licensing retention requirements. Our general retention schedule is as follows:

• Account and registration data: Retained for the lifetime of your active account, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, in accordance with international anti-money laundering standards applicable to our licensing jurisdiction.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Game and betting history: Retained for a minimum of three (3) years from the date of each session.
• Support communications: Retained for two (2) years from the date of the last interaction, unless the matter involves an unresolved dispute or regulatory inquiry, in which case records are retained until resolution.
• Self-exclusion records: Retained indefinitely to prevent re-registration of self-excluded individuals, in line with responsible gambling best practice.
• Marketing consent records: Retained for the duration of the consent period and for six (6) months thereafter as evidence of consent management.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymised data (which cannot be used to identify any individual) may be retained indefinitely for statistical analysis and platform improvement purposes.

Batik88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. Our security measures include:

• Encryption in transit: All data transmitted between your device and the Batik88 platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data stored on Batik88 servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Personal data is accessible only to authorised Batik88 personnel on a strictly need-to-know basis, governed by role-based access controls and enforced by multi-factor authentication.
• Infrastructure security: Platform infrastructure is hosted in certified data centres with physical access controls, redundant systems, and regular third-party penetration testing.
• Incident response: Batik88 maintains a documented data breach incident response procedure. In the event of a personal data breach posing a risk to your rights, we will notify you without undue delay.

Batik88 respects your rights in relation to your personal data. The following rights are available to all registered players:

To exercise any of the above rights, please contact our Data Protection team via the support channels listed in Section 16. We will respond to all verified requests within 30 calendar days. In complex cases, this may be extended by a further two months, and we will notify you accordingly.

Please note that certain rights are subject to limitations where processing is required for legal compliance, the defence of legal claims, or the ongoing provision of contracted services. We will always explain clearly if a requested right cannot be fully exercised and the reason why.

The Batik88 platform is strictly prohibited to persons under the age of 21 years. We do not knowingly collect personal data from individuals under 21. All account registrations are subject to mandatory age verification as part of our KYC process.

If Batik88 discovers that personal data has been collected from a person under 21 without verified parental or guardian consent, we will delete that data immediately, permanently close the associated account, and return any remaining balance in accordance with our verification procedures. Any winnings generated while an account was held by an underage user will be forfeited.

Batik88 operates as an international platform and may transfer personal data to, and process it in, countries outside Malaysia. Such transfers may occur when using cloud infrastructure providers, international KYC verification services, or game studio partners headquartered in other jurisdictions.

Where personal data is transferred internationally, Batik88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by our licensing obligations. Safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions with recognised equivalent data protection frameworks.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact our Data Protection team as described in Section 16.

The Batik88 platform may contain references to third-party services — such as payment gateways (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, FPX providers) — whose own privacy policies govern the personal data you provide to them directly. Batik88 is not responsible for the privacy practices of third-party services that operate outside the Batik88 platform.

We encourage you to review the privacy policies of any third-party service provider before providing them with personal data. Batik88's Privacy Policy applies solely to data collected by and processed by Batik88 in connection with the operation of the batik88.cam platform.

Batik88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. Where changes are material, we will notify registered players by email or through a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this page will be revised whenever the Policy is updated. We encourage you to review this Policy periodically to stay informed about how Batik88 protects your personal data.

Continued use of the Batik88 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Policy, you may request account closure and withdrawal of your verified real-money balance before the revised Policy takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact Batik88 through the following channels:

• Live Chat: Available 24/7 on the Batik88 platform. Our support agents can escalate data protection queries to the appropriate team.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered account email address and a description of your request.

Our Data Protection team aims to acknowledge all privacy-related requests within 48 hours and to resolve straightforward requests within 30 calendar days. Complex requests — such as full subject access requests or erasure requests involving extensive data — may take longer, and we will keep you informed of progress throughout.