Malaysia PDPA 2010 — Updated 2026

Babe138 Privacy Policy – Personal Data Protection for Malaysian Players

Babe138 takes the privacy and security of every member's personal data seriously. This policy clearly explains how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) — written in plain language, not confusing legal jargon.

Document Contents
01Information We Collect
02Purpose of Data Collection
03Third-Party Disclosure
04Data Security
05Cookies & Tracking Technologies
06Your Rights as a Data Subject
07Data Retention & Deletion
08Privacy Policy Amendments
Updated: January 2026
0
SSL Encryption
0
Malaysian PDPA
0
to Third Parties
0
Query Response Time

Babe138's Commitment to Your Privacy

Six core principles that guide how babe138 handles the personal data of Malaysian members

Full 256-Bit SSL Encryption

Every login session, deposit and withdrawal transaction, and all communications between your device and babe138's servers are protected by military-grade 256-bit SSL encryption. This ensures that your personal and financial information cannot be intercepted by any unauthorised party at any time while you use the babe138 platform.

Full PDPA 2010 Compliance

Babe138 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary personal data protection law applicable to all entities that process the personal data of Malaysians. Every aspect of how babe138 collects, stores and uses member personal data is designed to comprehensively meet PDPA requirements.

No Data Sales to Third Parties

Babe138 has never and will never sell, lend or rent our members' personal data to any third party for marketing, advertising or any other commercial purpose without your explicit consent. Your data exists solely to improve your experience at babe138 — not to be treated as someone else's business commodity.

Full Control in Your Hands

As a babe138 member, you have the right to access, correct, amend, or request the deletion of your personal data at any time. You may also withdraw consent for specific uses of your data or request a copy of the data we hold about you — all of which can be done through babe138's 24/7 customer support.

Secure & Limited Data Storage

Your personal data is stored on secure servers with strict access controls — only babe138 staff who require access to carry out their authorised duties may view the relevant information. babe138 employs continuous security monitoring systems and conducts regular security audits to ensure optimal data protection.

Immediate Data Breach Notification

In the unlikely event of a data security breach involving members' personal information, babe138 is committed to notifying affected members and the relevant authorities within the timeframe stipulated by the PDPA 2010 — so that immediate protective action can be taken to minimise any potential harm.

Introduction — Why This Privacy Policy Matters to You

When you register a babe138 account and use our platform for Malaysia Super League sports betting, EPL, live casino, MPL Malaysia e-sports or any other service, you will naturally share some personal information with us — such as your name, phone number, e-wallet details and platform usage habits. babe138 understands that entrusting a platform with your personal information is a serious matter, not just clicking "Agree" on a terms box.

This privacy policy is written in plain, easy-to-understand language — not legal jargon that only lawyers can decipher. We want you to know exactly what we do with your data, who can access it, and how you can control your own information. This is not just a formality — it is our commitment to every babe138 member across Malaysia.

01

Personal Information We Collect

Babe138 collects personal information from you through several channels — primarily during the account registration process, when you conduct financial transactions, and while you actively use our platform. The following are the categories of information we may collect:

Account Registration Information:

  • Full name as per Malaysian identity card (MyKad)
  • An active Malaysian mobile number
  • A valid email address
  • Date of birth (for age verification — 18 years and above)
  • Your chosen username and password (passwords are stored in encrypted form)

Financial & Transaction Information:

  • Payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX account details via Maybank2u / CIMB Clicks)
  • Deposit and withdrawal history in Malaysian Ringgit (MYR)
  • Betting history and gaming activity on the babe138 platform
  • Current account balance and bonus balance

Technical & Platform Usage Information:

  • The IP address of your device when accessing babe138
  • The type of device and browser you are using
  • Login and logout session information
  • Pages you visit and the time spent in each section of the platform
  • Cookie data required for core platform functionality (as described in Section 05)

Identity Verification Documents (KYC):

  • Copy of Malaysian identity card (MyKad) — when required for the KYC process
  • Proof of payment method (e-wallet screenshot or bank slip) — for withdrawal verification
Data Minimisation Principle: babe138 only collects information that is genuinely necessary to provide our services to you. We do not collect personal information beyond what is required for platform operations and compliance with applicable laws.
02

Purpose of Data Collection & Processing

Babe138 uses collected personal data solely for the legitimate purposes stated below. We will not use your data for any other purpose without first obtaining your additional consent.

Purpose of Processing Data Used Legal Basis
Account management & identity verification Name, email, phone number, MyKad Contract, PDPA 2010
MYR deposit & withdrawal processing E-wallet information, transaction history Contract, Legal
Age verification (18 years and above) Date of birth, MyKad Legal obligations
Fraud prevention & anti-money laundering All account & transaction data Legal obligations
Customer support & complaint resolution Account history, communications Contract, Legitimate interests
Platform experience personalisation Usage habits, game preferences Consent
Babe138 promotional & bonus communications Email address, phone number Consent
PDPA & regulatory reporting compliance Relevant data Legal obligations

You may withdraw your consent to the use of your data for promotional purposes at any time by contacting babe138 customer support. Withdrawing consent for promotional purposes will not affect your ability to continue using the babe138 platform.

03

Disclosure of Data to Third Parties

Babe138 does not sell or rent our members' personal data to any third party for marketing or commercial purposes. That said, there are certain situations where babe138 needs to share some of your information with specific parties in order to deliver our full range of services and meet legal requirements.

Accountable Service Providers:

Babe138 works with licensed and trusted third-party service providers to deliver certain aspects of our platform. These include:

  • Licensed Game Providers such as Evolution Gaming and Playtech for live casino tables — only the minimum data necessary for game operations is shared.
  • Payment processors which enables transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX — only the information necessary to complete the relevant transaction is shared.
  • Cloud infrastructure and security providers that help us securely host and protect the babe138 platform.

All third-party service providers are bound by strict confidentiality and data protection agreements, and may only use your data for the specific purposes related to the services they provide to babe138.

Legally Required Disclosures:

Babe138 may be required to disclose your personal data to Malaysian government authorities or law enforcement agencies where required by:

  • Valid Malaysian court order
  • Official requests from authorities relating to financial crime prevention or anti-money laundering
  • Reporting obligations under applicable Malaysian law
babe138 Guarantee: In all legitimate data-sharing situations, babe138 will disclose only the minimum information that is strictly necessary. We will never share more than what is required and will always prioritise the protection of our members' interests.
04

Babe138 Data Security Measures

Babe138 invests seriously in security infrastructure to ensure every member's personal data is consistently protected. The technical and organisational security measures we have implemented are as follows:

  • 256-bit SSL/TLS Encryption for all data transmitted between your device and babe138's servers — including login credentials, financial transactions, and personal communications.
  • Passwords stored in hashed form using strong cryptographic algorithms — meaning your password is never stored in plain text anywhere in babe138's systems, and even our internal team members cannot read your password.
  • Layered access controls which ensures that only babe138 staff with a legitimate work need are able to access specific data, with every access logged and monitored.
  • Continuous threat detection system which monitors suspicious account and platform activity in real time — including unauthorised login attempts and unusual transaction patterns.
  • Regular data backups to a secure, separate location to ensure data recovery is possible in the event of any unexpected technical disruption.
  • Regular security audits by our internal security team and external experts to identify and address any potential vulnerabilities.

While babe138 takes all reasonable steps to protect your data, no security system can be guaranteed 100% foolproof. You also play an important role in keeping your babe138 account secure — including using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to babe138 customer support.

05

Cookies, Sessions & Tracking Technologies

Babe138 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better user experience. Cookies are small data files stored on your device when you visit the babe138 platform.

Types of Cookies Used by babe138:

  • Essential Cookies (Required): Required for core platform functionality — such as maintaining your login session, saving your language preferences, and ensuring financial transactions run smoothly. These cookies cannot be disabled as they are critical to platform operations.
  • Performance Cookies: Helps us understand how members interact with the babe138 platform — the most frequently visited pages, time spent, and any errors encountered. This information is collected anonymously for platform improvement purposes.
  • Functional Cookies: Remembering your preferences and personal settings — such as your preferred odds format (decimal, fractional or American) on the babe138 Match Odds page, or your favourite sports.
  • Analytics Cookies: Helps the babe138 team understand overall platform usage trends for product development and member experience improvement purposes. This data is collected in aggregate and does not directly identify individuals.
Cookie Controls: You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the babe138 platform and you may be unable to log in or complete transactions properly. babe138 recommends keeping essential cookies enabled for the best experience.
06

Your Rights as a Data Subject under PDPA 2010

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you certain rights as an individual whose personal data is processed by babe138. babe138 is committed to fully respecting and facilitating the exercise of these rights.

07

Data Retention & Deletion

Babe138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law — whichever is longer. The following are the data retention guidelines we follow:

  • Active account data: Retained for as long as your babe138 account remains active, and for a reasonable period after closure for audit and legal compliance purposes.
  • Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable Malaysian accounting and tax legislation.
  • Customer support communication logs: Retained for two (2) years for reference purposes and resolution of any disputes that may arise.
  • Technical data and system logs: Retained for ninety (90) days for security and threat detection purposes, then automatically deleted.
  • KYC Documents: Retained for the period required under applicable Malaysian anti-money laundering laws.

When your data is no longer needed for any legitimate purpose, babe138 will securely delete it using irreversible deletion methods. You may request the deletion of data that is no longer required by contacting the babe138 customer support team — we will process such requests subject to any applicable legal retention obligations.

Data Deletion Requests: If you request the closure of your babe138 account, we will process the deletion of personal data that is no longer required within 30 days of all outstanding betting and financial commitments being settled. Records required by law to be retained will be kept for the applicable statutory retention period.
08

Privacy Policy Amendments & Contact Us

Babe138 reserves the right to amend this privacy policy from time to time to reflect changes in our data processing practices, new legal requirements, or feedback from our member community. Amendments take effect once the latest version is published on the babe138 platform.

For material amendments that significantly affect your rights or how we process your data, babe138 will endeavour to notify you via an in-platform notification or your registered email within a reasonable period before the amendment takes effect. It remains your responsibility to review this Privacy Policy page periodically.

If you have any questions, concerns or requests relating to babe138's privacy policy, your rights as a data subject, or how we handle your personal data, please contact us via:

  • Live Chat: Available 24 hours a day, 7 days a week, directly from the babe138 platform in Bahasa Melayu — the fastest way to get a response.
  • Email: support@babe138.best — for more detailed enquiries or where written documentation is required. We aim to respond within 24 business hours.
Current Version: This Privacy Policy was last updated on January 2026 and supersedes all previous versions. In the event of any conflict between a translated version and the original Malay version, the Malay version shall prevail.

Your Rights as a babe138 Member Under PDPA

Six data protection rights you hold as a data subject in Malaysia

Data Access Rights

You have the right to request a copy of all personal data babe138 holds about you, including your account history, transactions, and communications.

Right to Data Correction

If your personal data held by babe138 is inaccurate or out of date, you have the right to request an immediate correction or update.

Right to Data Erasure

You may request the deletion of your personal data that is no longer required, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing or babe138 promotional purposes at any time, with no penalty.

Right to Restrict Processing

In certain situations, you may request that babe138 restrict the processing of your data while a specific issue or dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer purposes, subject to reasonable technical limitations.

To exercise any of the above rights, contact babe138 customer support via live chat or email at support@babe138.best

How Your Data Is Protected at babe138

From registration to withdrawal — every step is designed with security in mind

1
Secure Registration

Your registration details are transmitted over an encrypted HTTPS connection. Passwords are stored in hashed form — never as plain text anywhere in babe138's systems.

2
Identity Verification

The KYC process is conducted through secure channels. Verification documents such as MyKad are stored in an encrypted system with access restricted to authorised personnel only.

3
Encrypted MYR Transactions

Every deposit via TNG, GrabPay, DuitNow or FPX and every withdrawal is processed through an encrypted payment gateway. babe138 does not store your card details or e-wallet passwords.

4
Continuous Monitoring

Babe138's threat detection system monitors account activity 24/7. Any unusual patterns — such as logins from a new location or irregular transactions — are flagged for immediate security review.

Frequently Asked Questions – babe138 Privacy Policy

Answers to the most frequently asked questions about privacy and data security at babe138

No. babe138 does not store your bank card details, PIN numbers, or e-wallet passwords — such as Touch 'n Go, GrabPay, or DuitNow — anywhere in our systems. All financial transactions are processed through licensed, encrypted third-party payment gateways. babe138 only receives confirmation of whether a transaction was successful or failed; we never receive your sensitive financial information. This is an industry-standard security practice that protects you from the risk of financial data theft.

Yes, you may request the deletion of your personal data by contacting babe138 customer support. However, there are certain limitations to be aware of: financial transaction records must be retained for a minimum of seven years in accordance with applicable Malaysian legal requirements, and data required for anti-money laundering compliance cannot be deleted before the mandatory retention period expires. Data not subject to legal retention requirements will be processed for deletion within 30 days of your request being received and verified.

You can opt out of promotional communications from babe138 in two simple ways: click the "unsubscribe" link found at the bottom of any promotional email you receive, or contact babe138 customer support via live chat and request to be removed from our marketing list. Withdrawing your consent will not affect your ability to continue using the babe138 platform — you will still receive important communications related to your account and transactions.

If you suspect your babe138 account has been accessed without your authorisation, take the following steps immediately: first, contact babe138 customer support via 24/7 live chat and report the situation — our team will help you suspend your account while an investigation is carried out. Second, change your account password right away if you are still able to log in. Third, review your account login history and transaction records to identify any activity you did not perform. babe138 will investigate the matter and take appropriate action to protect your interests. Please note that babe138 will never ask for your password through any communication channel.
256-Bit SSL
PDPA 2010 Compliant
No Data Sales
24/7 Support
Licensed Platform
Guaranteed Data Rights

Your Data Is Safe. Play with Confidence at babe138.

Register a free babe138 account today — your personal data is fully protected under Malaysia's PDPA 2010 with 256-bit SSL encryption. Minimum deposit RM 30 via Touch 'n Go, GrabPay or DuitNow.

SSL 256-bit protected data PDPA 2010 Compliance No sale of data to third parties Guaranteed data subject rights
Responsible Gaming at babe138

All activity on babe138 is for entertainment purposes. Set your daily limits, play within your means, and make use of the self-control tools we provide. Find Out More.

Learn More
Bahasa Melayu