Privacy Policy bagi1 — Protection of Your Personal Data

1 Introduction

Bagi1 is committed to protecting the privacy of all users on our platform. This Privacy Policy has been prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and transparently explains how we manage your personal data throughout your use of our services at bagi1.win.

This document forms part of the overall agreement between you and bagi1, together with Terms and Conditions us. We encourage you to read both documents carefully so that you fully understand your rights and responsibilities as a member of our platform.

2 Data Collected

Bagi1 collects your personal data through several methods, including during account registration, platform usage, and interactions with our support team. The following are the categories of data we collect:

3 Purpose Data Usage

The personal data we collect is used for lawful and transparent purposes. bagi1 will not use your data for purposes unrelated to the provision of platform services without your prior consent.

• Create and manage your member account on the bagi1 platform.
• Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Verifying your identity as part of the mandatory KYC process.
• Providing responsive and effective customer support.
• Sending important notifications relating to your account, promotions, and platform updates.
• Analysing usage patterns to improve your gaming experience.
• Detecting and preventing any fraudulent activity or unauthorised use.
• Complying with legal and regulatory obligations in force in Malaysia.

4 Sharing Data

Bagi1 understands that your privacy is a trust we take seriously. We do not share your personal data with external parties except in the following limited and permitted situations:

• Payment service providers — to securely process your deposit and withdrawal transactions.
• Technical service providers — companies that assist us in managing platform infrastructure and security, subject to strict confidentiality agreements.
• Relevant authorities — when required by Malaysia law or by a valid court order.
• Business transfers — in the event of any merger or acquisition, with prior notice given to members.

5 Data Security

Bagi1 continuously invests in the latest security technologies and procedures to ensure your personal data is always protected. The security measures we employ include:

• Advanced data encryption using 256-bit SSL technology for all data communications.
• A multi-layered firewall system that continuously monitors and filters network traffic.
• Role-based access controls ensuring only authorised staff can access sensitive data.
• Regular security audits conducted by independent and certified third parties.
• An intrusion monitoring system operating 24 hours a day, 7 days a week.
• A clear incident response procedure to address any data breaches promptly.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe by ensuring your password is strong and not shared with anyone.

6 Cookies and Tracking Technology

Bagi1 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you browse our website.

• Essential Cookies — Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
• Performance Cookies — Helps us understand how users interact with the platform in order to improve the overall experience.
• Functional Cookies — Saves your preferences such as language and display settings for a more convenient repeat experience.
• Analytics Cookies — Collects anonymous statistical data to help us understand overall usage patterns.

You can manage or disable non-essential cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the bagi1 platform.

7 Rights You

As a bagi1 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right of Access — You may request a copy of the personal data we hold about you at any time.
• Right to Rectification — You may request that we correct any data that is inaccurate or incomplete.
• Right to Erasure — In certain circumstances, you may request the deletion of your personal data from our systems.
• Right to Restrict Processing — You may request that we restrict how we use your data in certain situations.
• Right to Object — You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of these rights, please contact the bagi1 customer support team through the available channels on the platform. We will process your request within 14 business days and inform you of the outcome.

8 Storage and Data Deletion

Bagi1 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. Retention periods vary by data type:

• Active account data is retained for the duration of your account's activity on the bagi1 platform.
• Financial transaction records are retained for a minimum of 7 years in line with Malaysia's financial regulatory requirements.
• Technical and security log data is retained for 12 months for security and investigation purposes.
• Following account closure, your personal data will be deleted or anonymised within 90 days, except for data that must be retained to fulfil legal obligations.

9 Data Children

The bagi1 platform is exclusively for users aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18. If we discover that a minor's personal data has been collected without our knowledge, the account in question will be immediately terminated and all related data will be deleted.

10 Changes Privacy Policy

Bagi1 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. All amendments will be published on this page with a clear update date.

For material amendments that may significantly affect your privacy rights, we will send a notification via email or an in-platform notice at least 14 days before the amendment takes effect. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated policy.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the bagi1 Data Protection Officer team is ready to assist you.

You may also refer to the FAQ us for answers to frequently asked questions about privacy and data security. All inquiries will be addressed within 3 to 5 business days.