Privacy Policy

This Privacy Policy ("Policy") is issued by bajet2cuti ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting website accessible at https://bajet2cuti.cam. It governs the collection, processing, storage, and disclosure of personal data relating to users ("you", "Player", "User") of the bajet2cuti Service.

We understand that privacy matters deeply to our players, particularly those accessing our Service from Malaysia — a market we serve with dedicated payment integrations, localised customer support in Bahasa Melayu, Mandarin, and English, and a platform designed around Malaysian player expectations. This Policy is our commitment to you that your personal data will always be handled with care, respect, and transparency.

By registering an account on bajet2cuti, making a deposit, or otherwise using our Service, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

bajet2cuti collects Personal Data in the following categories, depending on your level of interaction with the Service:

3.1 Registration & Account Data

• Full legal name and date of birth
• Email address and contact telephone number
• Residential address (including city, state, and postcode — relevant for Malaysian players in locations such as Kuala Lumpur, Petaling Jaya, Penang, Shah Alam, and Johor Bahru)
• Username and encrypted password credentials
• Preferred currency and language settings

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Malaysian MyKad, international passport)
• Proof of address documentation
• Proof of payment method ownership (e.g., bank statement, e-wallet screenshot)
• Source of funds documentation where required by our AML compliance programme

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history, amounts, and timestamps
• Payment method details (e.g., partial bank account numbers, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX)
• Cryptocurrency wallet addresses used for BTC, ETH, USDT, or LTC transactions
• Bonus credit and wagering activity records

3.4 Technical & Usage Data

• IP address, device type, operating system, and browser version
• Session duration, pages visited, game history, and betting activity logs
• Login timestamps and geographic location derived from IP address
• Referral source and campaign tracking identifiers (where applicable)

3.5 Communications Data

• Records of support conversations via live chat, email, or WhatsApp
• Feedback, complaints, and dispute correspondence
• Marketing preference settings and communication opt-in/opt-out history

We collect Personal Data through the following methods:

• Directly from you: When you register an account, complete KYC verification, make a deposit, request a withdrawal, contact support, or submit any form on the Platform.
• Automatically: Through cookies, session tracking technologies, and server logs when you access and use the Service.
• From third-party payment processors: When transaction confirmations, fraud signals, or verification outcomes are transmitted to us by providers such as DuitNow, FPX, or cryptocurrency network validators.
• From identity verification partners: Where we engage third-party KYC service providers to assist with document verification and age confirmation.
• From fraud prevention and AML screening services: Which may return risk scores or watchlist matches associated with your submitted personal data.

bajet2cuti processes your Personal Data for the following specific, legitimate purposes:

bajet2cuti processes your Personal Data on the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to perform the agreement with you — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and our licensing conditions, including KYC verification, AML screening, and responsible gambling obligations.
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, platform analytics, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications and non-essential cookie categories, where we have obtained your explicit consent. You may withdraw consent at any time.

bajet2cuti does not sell, rent, or trade your Personal Data to third parties for marketing purposes. We may share your data in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include payment processors (e.g., DuitNow, FPX, and e-wallet providers), KYC verification platforms, fraud detection services, cloud hosting providers, and customer support tooling. All processors are contractually required to maintain appropriate security standards and process data only as directed by bajet2cuti.

7.2 Regulatory & Legal Disclosure

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law, court order, or regulatory demand — including requests arising from our international licensing obligations.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring involving bajet2cuti, Personal Data held on our systems may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

bajet2cuti retains Personal Data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and licensing obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to satisfy AML and licensing record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification process, or such longer period as required by applicable law.
• Transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Support communications: Retained for a minimum of three (3) years for dispute resolution and quality assurance purposes.
• Technical and usage logs: Generally retained for up to twelve (12) months for security and analytics purposes, unless a longer period is required for an ongoing investigation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

bajet2cuti implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using 256-bit TLS/SSL protocols.
• Encryption at rest: Sensitive data stored on our systems, including KYC documents and financial records, is encrypted using industry-standard algorithms.
• Access controls: Access to Personal Data is restricted to authorised personnel who require it to perform their job functions, on a strict need-to-know basis.
• Two-factor authentication: Available for all player accounts and required for internal administrative systems.
• Regular security audits: Our systems undergo periodic penetration testing and vulnerability assessments.
• Incident response: We maintain a documented data breach response procedure. In the event of a breach that poses a significant risk to your rights, we will notify affected users in a timely manner.

bajet2cuti uses cookies and similar technologies to operate the Platform effectively, maintain your session, and analyse usage patterns. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your use of the Service. Withdrawing consent for optional cookies will not affect your ability to use core Platform features.

bajet2cuti is an international platform. Your Personal Data may be processed and stored in countries outside Malaysia, including the jurisdiction in which our licensing authority is located and the countries where our service providers operate their infrastructure.

Where Personal Data is transferred internationally, bajet2cuti takes steps to ensure that appropriate safeguards are in place, including contractual protections with data processors that require equivalent data security and privacy standards to those described in this Policy.

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights with respect to your Personal Data held by bajet2cuti:

To exercise any of the above rights, please contact our support team via live chat or email at the address provided in Section 16. We will respond to all verified requests within a reasonable timeframe — typically within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days with prior notification.

We may require verification of your identity before processing certain requests to protect against unauthorised access to your data.

bajet2cuti is strictly an adult platform. The Service is intended exclusively for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from any person under the age of 21.

Age is verified through our KYC process, which requires submission of valid government-issued identification. If bajet2cuti discovers that Personal Data has been collected from a person under the age of 21, that data will be deleted immediately, the Account will be permanently closed, and any funds credited to the Account will be handled in accordance with applicable law.

The bajet2cuti Platform may reference third-party services, payment providers, or support resources by name for informational purposes. bajet2cuti does not include outbound links to external websites within its main content pages.

bajet2cuti is not responsible for the privacy practices of any third-party payment processors, e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay), or other external services that you interact with independently as part of completing a transaction. We recommend reviewing the privacy policies of those services directly.

bajet2cuti reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered Players via the email address associated with their Account or through a prominent notice on the Platform prior to the changes taking effect.

We recommend that you review this Policy periodically. The "Last updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the Service following any update constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bajet2cuti handles your Personal Data, please reach out to us through the following channels. Note that all contact information is presented as plain text — no clickable email or telephone links are provided.

• Support Email: [email protected] — for privacy queries, data subject access requests, and complaints. Please include "Privacy Request" in your subject line.
• Live Chat: Available 24/7 through the Platform interface. Our support team handles privacy queries in English, Bahasa Melayu, and Mandarin. Average response time: 3–5 minutes.
• Response Timeframe: We aim to acknowledge all privacy-related queries within 48 hours and provide a substantive response within 30 calendar days.