Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by batik88 ("batik88", "we", "us", "our") and applies to all personal data collected from individuals ("Members", "Users", "you") who access or use the batik88 website at batik88.asia and all associated services, products, features, and communication channels.

batik88 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation. By registering an account, accessing the batik88 platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with the batik88 Terms & Conditions, which govern your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

2. Data Controller Information

For the purposes of applicable data protection law, batik88 is the data controller in respect of personal data collected through the batik88 platform. All data protection enquiries, requests to exercise data subject rights, and complaints should be directed to:

Data Protection Contact:
batik88 Data Privacy Team
Email: [email protected] (subject line: "Data Privacy Request")
Response time: Within 30 calendar days of receipt

3. Personal Data We Collect

batik88 collects the following categories of personal data:

3.1 Registration and Identity Data: Full legal name, date of birth, gender, nationality, residential address, email address, username, and password (stored in hashed form).

3.2 Identity Verification (KYC) Data: Government-issued identification documents (e.g., MyKad, passport), proof of address documents, selfie or biometric data where required for identity verification, and source of funds documentation.

3.3 Financial Data: Payment method details (e.g., Touch n Go eWallet account identifiers, Boost account identifiers, bank account numbers for Maybank, CIMB, and Public Bank), transaction history, deposit amounts, withdrawal requests, and account balances.

3.4 Usage Data: Login timestamps and IP addresses, session duration, game activity logs, betting history, pages visited, device type, operating system, browser type, and referral source.

3.5 Communications Data: Records of correspondence with batik88 via live chat, email, and any other communication channel, including support ticket content.

3.6 Responsible Gambling Data: Self-exclusion requests, deposit limits set, session time limits applied, and any notes recorded by the responsible gambling team following member interactions.

4. How We Collect Your Data

batik88 collects personal data through the following means:

• Direct provision: Data you submit during account registration, KYC verification, deposit or withdrawal requests, support enquiries, and any forms completed on the platform.
• Automated collection: Technical data collected automatically when you access the batik88 website, including through cookies, server logs, and similar tracking technologies (see Section 9).
• Third-party sources: Identity verification agencies, payment processors, fraud prevention databases, and publicly available sources where we are legally permitted to obtain data for KYC or anti-money-laundering purposes.

5. Purposes and Legal Basis for Processing

batik88 processes your personal data for the following purposes, each supported by a lawful basis:

5.1 Account Management and Service Delivery (Legal basis: Performance of contract) — To create and maintain your account, process deposits and withdrawals, provide access to games, and deliver customer support.

5.2 Identity Verification and KYC Compliance (Legal basis: Legal obligation) — To verify your identity, age (21+), and eligibility to use the platform in compliance with licensing and anti-money-laundering requirements.

5.3 Fraud Prevention and Security (Legal basis: Legitimate interests) — To detect, investigate, and prevent fraud, money laundering, account compromise, and other prohibited activities. This includes monitoring login activity, transaction patterns, and gameplay behaviour for anomalies.

5.4 Regulatory Compliance (Legal basis: Legal obligation) — To maintain transaction records, respond to lawful requests from regulatory or law enforcement authorities, and comply with licensing conditions imposed by our gaming regulator.

5.5 Responsible Gambling Monitoring (Legal basis: Legitimate interests / legal obligation) — To identify and respond to signs of problem gambling behaviour, process self-exclusion requests, and enforce responsible gambling limits applied by Members.

5.6 Platform Improvement (Legal basis: Legitimate interests) — To analyse aggregated usage patterns, diagnose technical issues, and improve the performance, features, and user experience of the batik88 platform.

5.7 Marketing Communications (Legal basis: Consent) — Where you have given explicit consent, to send you promotional offers, bonuses, and updates relevant to your account. You may withdraw consent at any time by contacting [email protected].

6. Disclosure of Personal Data to Third Parties

batik88 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in Section 5:

• Payment processors: Touch n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank) for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify identity documents and screen against sanction lists.
• Game software providers: Licensed game studios whose platforms are integrated into batik88, which may receive session-level data necessary to deliver and authenticate gameplay.
• IT and infrastructure service providers: Cloud hosting, data storage, and cybersecurity vendors operating under contractual data processing agreements that restrict the use of your data.
• Regulatory and law enforcement authorities: Where batik88 is legally required to disclose data in response to a valid court order, regulatory request, or law enforcement enquiry.

All third-party data processors engaged by batik88 are subject to contractual obligations that prohibit them from using your personal data for any purpose other than providing the specific service for which they have been engaged.

7. International Data Transfers

As an internationally licensed platform, some of batik88's service providers and game studios are located outside Malaysia. Where personal data is transferred to countries that may not have equivalent data protection laws, batik88 implements appropriate safeguards, including standard contractual clauses or equivalent contractual protections, to ensure that your data is handled with a standard of care consistent with this Policy.

8. Data Retention

batik88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation.

• Account data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in compliance with financial record-keeping obligations.
• Support communications: Retained for three (3) years following the resolution of the relevant issue.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with batik88's data disposal procedures.

9. Cookies and Tracking Technologies

batik88 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Performance cookies: Collect aggregated, anonymised data about how Members use the platform to identify areas for improvement. No personally identifiable information is collected through these cookies.
• Functional cookies: Remember your preferences, such as language settings and display configurations, to personalise your experience.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the batik88 platform. batik88 does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.

10. Your Data Subject Rights

Subject to applicable law, you have the following rights in respect of your personal data held by batik88:

• Right of access: To request a copy of the personal data batik88 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restriction of processing: To request that batik88 restrict the processing of your data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, commonly used format where processing is based on your consent or a contract.
• Right to object: To object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: To withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Privacy Request". We will respond within 30 calendar days. Identity verification may be required before we process your request.

11. Security Measures

batik88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the batik88 platform.
• Hashing and salting of passwords — your password is never stored in plain text.
• Role-based access controls limiting staff access to personal data to those with a business need.
• Regular security audits and penetration testing of the platform infrastructure.
• Login activity monitoring and anomaly detection to identify and respond to unauthorised access attempts.

While batik88 takes security seriously, no system is entirely immune to risk. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, batik88 will notify affected Members in accordance with applicable law.

12. Changes to This Policy

batik88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to Members via the registered email address and/or a prominent notice on the batik88 platform. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of the batik88 platform following publication of an updated Policy constitutes acceptance of the revised terms. Members who do not accept the amended Policy should cease using the platform and may request account closure.

13. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or batik88's data processing practices, please contact the Data Privacy Team at [email protected] with the subject line "Data Privacy Request".

If you believe that batik88 has not handled your personal data in accordance with this Policy or applicable data protection law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.