Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") sets out the manner in which bae2u (hereinafter referred to as "bae2u", "we", "us", or "the Platform") collects, processes, stores, shares, and protects personal data obtained from users (hereinafter referred to as "you", "the User", or "the Data Subject") who access or use the bae2u online gaming and sports betting platform available at bae2u.cam.

bae2u is committed to handling all personal data with care, transparency, and in accordance with the privacy standards upheld under our international licensing obligations. We recognise that the personal information you provide to us — including identity documents submitted during KYC verification, financial transaction records, and account activity data — is sensitive and deserving of a high standard of protection.

By registering an account on bae2u, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not use the Platform.

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, date of birth, national identification number, financial account details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, deletion, or destruction.
• "Data Controller" refers to bae2u in its capacity as the entity that determines the purposes and means of processing personal data submitted by users.
• "Data Processor" means any third party engaged by bae2u to process personal data on our behalf under a binding data processing agreement.
• "KYC" (Know Your Customer) refers to the identity and age verification process required by our licensing obligations, involving the submission and review of government-issued identification documents.
• "Cookies" means small text files placed on a user's device by the Platform to enable functionality, analytics, and session management.
• "Sensitive Personal Data" includes financial account data, government-issued ID numbers, and any data from which a user's identity could be conclusively established.

bae2u collects only the personal data that is necessary for the operation of the Platform, fulfilment of our licensing obligations, and the provision of a secure gaming experience. We do not collect personal data beyond what is required for these purposes.

3.1 Registration & Account Data

When you create a bae2u account, we collect the information you provide, which includes:

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations regarding age verification, anti-money laundering, and fraud prevention, we collect:

3.3 Financial & Transaction Data

We collect records of all financial activity associated with your account — including deposits made via Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and other supported Malaysian payment methods — as well as withdrawal records, bonus transactions, and bet history. We do not store raw payment credential data (card numbers, full bank account numbers) on our servers.

3.4 Technical & Device Data

When you access the Platform, we automatically collect technical data including:

3.5 Communications Data

When you contact our support team via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

bae2u collects personal data through the following channels:

• Directly from you: Via the account registration form, KYC verification submission, deposit and withdrawal requests, support contact forms, and any other information you voluntarily provide during your use of the Platform.
• Automatically: Via server logs, cookies, pixel tags, and analytics tools that capture technical and behavioural data during your sessions on the Platform.
• From payment providers: When you initiate a transaction through a Malaysian payment method (such as DuitNow, FPX, Touch 'n Go eWallet, or Maybank2u), the relevant payment provider communicates transaction confirmation data to bae2u. We do not receive your full financial account credentials from these providers.
• From identity verification services: Third-party KYC and age-verification service providers may return verification results to bae2u following document checks. These results are stored in association with your account record.
• From fraud prevention and AML screening services: Where required under our licensing obligations, we may cross-reference account data against third-party risk databases as part of our anti-money laundering and fraud prevention programme.

bae2u processes your personal data only for clearly defined and legitimate purposes. The following table sets out the primary purposes for which your data is used and the legal basis for each:

bae2u does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We may share your personal data only in the following strictly defined circumstances:

• Payment processors: We share the minimum data necessary with Malaysian payment providers (including FPX gateway operators, e-wallet platforms, and banking institutions) to facilitate transaction processing. All payment processors engaged by bae2u are bound by appropriate data processing agreements.
• KYC and identity verification providers: Third-party verification services receive identity document data solely for the purpose of performing age and identity checks on our behalf. These providers are contractually prohibited from using your data for any other purpose.
• AML and fraud prevention services: Relevant account and transaction data may be shared with anti-money laundering screening and fraud prevention platforms as required by our licensing jurisdiction.
• Regulatory and licensing authorities: We may disclose account and transaction records to our licensing regulatory body or to other competent authorities where we are legally obligated to do so.
• Law enforcement: We will disclose personal data to law enforcement authorities where required by a valid court order, legal process, or applicable law. We will notify affected users where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of bae2u's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

bae2u retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, as required by our licensing jurisdiction's AML record-keeping obligations.
• KYC and identity verification records: Retained for a minimum of 5 years following account closure or the last transaction date, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years following the transaction date.
• Customer support records: Retained for a minimum of 2 years following the closure of each support case.
• Marketing communications consent records: Retained for as long as you remain opted in, plus a reasonable period thereafter to demonstrate consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

bae2u uses cookies and similar tracking technologies to provide essential platform functionality, maintain your login session, and analyse aggregated usage patterns to improve the Platform's performance. The following categories of cookies may be placed on your device:

• Strictly necessary cookies: Required for core Platform functionality including user authentication, session management, and security features. These cookies cannot be disabled without significantly impairing the Platform's operation.
• Performance and analytics cookies: Used to collect anonymised data about how users navigate the Platform — including which game categories are most accessed and how pages perform on different devices. This data is used solely to improve the Platform.
• Functional cookies: Enable the Platform to remember your preferences, such as language settings and display options, across sessions.
• Fraud prevention cookies: Used to identify device fingerprinting signals that assist in the detection of fraudulent account activity, multi-accounting, and bonus abuse.

You may configure your browser settings to refuse or delete cookies, though disabling strictly necessary cookies will prevent you from logging in or using the Platform. bae2u does not use cookies to serve third-party advertising content.

As a Data Subject, you hold the following rights in relation to the personal data that bae2u holds about you. You may exercise any of these rights by contacting us at [email protected]. We will respond to all rights requests within a reasonable timeframe, subject to identity verification requirements and any applicable legal limitations.

bae2u implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the bae2u Platform.
• Encrypted data storage for all sensitive personal data fields, including KYC document data and financial records, stored in encrypted databases with restricted access controls.
• Segregated payment data: Raw payment credentials (full bank account numbers, card numbers) are never stored on bae2u's servers. Payment processing is handled entirely by certified third-party payment processors.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for anomalous activity, unauthorised access attempts, and security incidents.
• Breach response: In the event of a personal data breach that poses a risk to affected users, bae2u will notify affected Data Subjects and relevant authorities in accordance with applicable legal obligations.

While bae2u takes all reasonable measures to protect your data, no internet transmission or electronic storage system is entirely without risk. You are encouraged to use a strong, unique password for your account and to contact us immediately if you suspect any unauthorised access.

bae2u enforces a strict minimum age requirement of 21 years old for all account registrations. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

All account registrations are subject to KYC age verification before full account activation. Any account found — at any stage — to belong to a person under 21 will be suspended immediately, access to the Platform will be revoked, all funds will be returned to the verified payment method on file, and all associated personal data will be processed in accordance with our legal obligations and then deleted as soon as permissible.

If you believe that a minor may have accessed or registered on the bae2u Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

bae2u reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal standards. The "Last Updated" date displayed at the top of this page will be revised to reflect the date of the most recent amendment.

Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your personal data — we will provide prior notice via a notification on the Platform and, where practicable, an email to your registered address before the changes take effect.

Your continued use of the bae2u Platform following the publication of an updated Policy constitutes your acknowledgment and acceptance of the revised terms. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bae2u, please contact our Data Support team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing. Responses within 2 business hours for urgent account matters; within 5 business days for rights requests.
• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week. Suitable for general privacy queries and immediate account concerns.
• Help Centre: Our FAQ page includes answers to common data-related questions including how to update your account information and how to manage your marketing communication preferences.

When exercising a data rights request, we may require you to verify your identity before processing the request. This is to ensure the security of your personal data and to prevent unauthorised third-party requests relating to your account.