Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by Babe138 (hereinafter "Babe138", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from players, visitors, and registered users (hereinafter "you" or "Data Subject") of the website accessible at https://babe138.cam and all related services and features.

Babe138 takes the privacy of its players seriously. This Policy has been drafted to provide clear and transparent information about our data practices in accordance with applicable data protection laws. By accessing, registering on, or using any part of the Babe138 platform, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, all of which collectively govern your relationship with Babe138.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Babe138 collects Personal Data from you through your interactions with the platform. The categories of data we collect are set out in the table below. We collect only information that is necessary for the legitimate operation of the platform and compliance with our legal obligations.

Babe138 collects Personal Data through the following channels and methods:

• Direct interactions: When you register an account, complete the KYC process, make a deposit or withdrawal, contact customer support, or respond to a survey, you provide data directly to Babe138.
• Automated technologies: When you access the Babe138 platform, we automatically collect Technical Data through cookies, server logs, and similar tracking technologies. This data is used for security monitoring, session management, and platform performance analytics.
• Payment providers: When you deposit or withdraw funds using Malaysian payment methods — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, Visa/Mastercard, or cryptocurrency channels — those providers may share relevant transaction reference data with Babe138 for verification purposes.
• Third-party verification services: Babe138 may use licensed third-party KYC and identity verification providers to validate the documents you submit. These providers process your data strictly on behalf of Babe138 as Data Processors and are bound by appropriate data processing agreements.
• Fraud prevention partners: In cases of suspected fraudulent activity, Babe138 may receive or share data with specialist fraud detection services to protect the security of the platform and all its players.

Babe138 processes your Personal Data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including account operation, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and obligations arising from regulatory inquiries or court orders.
• Legitimate interests: Processing conducted in pursuit of Babe138's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and improvement of our services — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where Babe138 relies on your consent as the legal basis for processing — for example, for the sending of optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Babe138 uses the Personal Data it collects for the following purposes, always within the limits of the legal basis applicable to each processing activity:

• To establish, maintain, and manage your Babe138 account, including processing deposits and withdrawals in MYR.
• To verify your identity and age (21+ minimum requirement) as required by our operating standards and responsible gambling obligations.
• To process KYC documentation and ensure that only eligible players hold active accounts on the platform.
• To provide customer support in English, Bahasa Melayu, and Mandarin Chinese, and to maintain records of your support interactions for quality assurance purposes.
• To detect, investigate, and prevent fraudulent transactions, money laundering, account manipulation, and other prohibited activities.
• To monitor player activity for responsible gambling indicators and to intervene appropriately where problem gambling behaviour is identified — including reaching out to players who may need support.
• To send transactional notifications, including deposit confirmations, withdrawal updates, and account security alerts.
• To improve and optimise the platform, including diagnosing technical issues, conducting analytics, and testing new features.
• To comply with legal and regulatory requirements, including responding to lawful requests from Malaysian authorities or international regulatory bodies.
• Where you have given consent, to send promotional communications about bonuses, new games, or special offers.

Babe138 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: Personal and financial data is shared with licensed payment service providers — including those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, and Public Bank — solely for the purpose of processing transactions on your behalf.
• KYC and identity verification providers: Verification documents and identity data are shared with accredited third-party KYC providers under strict data processing agreements, for the purpose of conducting mandatory identity and age verification checks.
• Fraud prevention and security services: Technical and transaction data may be shared with specialist fraud detection partners to protect the integrity and security of the platform.
• Regulatory and law enforcement bodies: Babe138 may disclose Personal Data to competent authorities — including Malaysian government agencies, financial intelligence units, or international regulatory bodies — where required to do so by law, court order, or legitimate regulatory request.
• Professional advisers: Legal, financial, and compliance advisers engaged by Babe138 may access Personal Data to the extent necessary to provide their professional services, subject to confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of Babe138's business, Personal Data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy.

All third-party Data Processors engaged by Babe138 are required to process Personal Data solely in accordance with Babe138's written instructions and are prohibited from using your data for any independent or unrelated purpose.

The Babe138 platform uses cookies and similar tracking technologies to ensure proper platform functionality, maintain session security, and gather aggregate analytical data on how the platform is used. The following categories of cookies are used:

• Essential cookies: Strictly necessary for the operation of the platform. These cookies enable core functions such as login session management, security token authentication, and navigation. They cannot be disabled without materially impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as your chosen display language, and to personalise your experience on the platform. These cookies do not track your browsing activity outside of Babe138.
• Analytical cookies: Used to collect aggregate, anonymised data on how players interact with the platform — including page visits, session duration, and feature usage. This data helps Babe138 identify and resolve technical issues and improve the overall user experience.
• Security cookies: Used to detect and prevent fraudulent account activity, unauthorised login attempts, and bot traffic. These cookies are essential to maintaining the security of the platform for all players.

Babe138 does not embed third-party advertising cookies or cross-site tracking technologies on its platform. Most web browsers allow you to manage and delete cookies through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the Babe138 platform.

Babe138 retains Personal Data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of the player's active account relationship with Babe138, and for a minimum of five (5) years following account closure, in compliance with anti-money laundering and responsible gambling record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or such longer period as may be required by applicable regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for a minimum of three (3) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Technical and log data: Typically retained for up to twelve (12) months, unless required for ongoing security investigations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents its identification or reconstruction.

Babe138 implements robust technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Babe138's servers.
• Encryption of sensitive data at rest, including financial information and KYC documentation.
• Role-based access controls limiting employee access to Personal Data to the minimum necessary for their job functions.
• Two-factor authentication requirements for all internal administrative access to player data systems.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent specialists.
• A dedicated incident response team trained to identify, contain, and remediate data security incidents promptly.

In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, Babe138 will notify the relevant supervisory authorities and, where required by law, affected individuals, within the timeframes prescribed by applicable regulation.

Subject to applicable data protection legislation, you hold the following rights in respect of the Personal Data that Babe138 holds about you. To exercise any of these rights, please contact our Data Protection team via live chat or email.

Babe138 will respond to all verifiable data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior written notice provided to the requester. Identity verification will be required before any request is actioned to prevent unauthorised access to third-party data.

The operation of the Babe138 platform may require the transfer of Personal Data to servers or processors located outside Malaysia, including in jurisdictions that may not have data protection laws equivalent to those applicable in Malaysia. Where such transfers occur, Babe138 takes all reasonable steps to ensure that your data is afforded an adequate level of protection, including:

• Entering into data processing agreements with all international Data Processors that impose data protection standards consistent with the obligations set out in this Policy.
• Utilising standard contractual clauses or equivalent mechanisms approved by relevant data protection authorities.
• Conducting transfer impact assessments where required to assess the adequacy of protection in the destination jurisdiction.

By using the Babe138 platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Malaysia in the manner described above.

The Babe138 platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect, store, or process Personal Data relating to any person under the age of 21. Registration by a minor is expressly prohibited under our Terms & Conditions.

If Babe138 becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Babe138 platform, please notify our customer support team immediately.

Babe138's responsible gambling tools — including deposit limits, session controls, and self-exclusion options — are available to all registered players and are described in full on our Responsible Gambling page.

The Babe138 platform may contain references to or integrations with third-party payment services and game providers. Babe138 has no control over, and accepts no responsibility for, the privacy practices of any third party. The data handling practices of third-party service providers — including payment operators such as Touch 'n Go eWallet, Boost, DuitNow, and banking partners — are governed by their own respective privacy policies.

We encourage you to review the privacy policies of any third-party service provider whose services you access in connection with your use of the Babe138 platform. Babe138's Privacy Policy applies solely to data collected and processed directly by Babe138.

Babe138 reserves the right to amend, revise, or supplement this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, or our data processing practices. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Where amendments are material — particularly where they affect the legal basis for processing, the categories of data collected, or your rights as a Data Subject — Babe138 will notify registered players by email or through an on-platform notice prior to the change taking effect. Minor clarifications or administrative amendments may be made without separate notice.

Your continued use of the Babe138 platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree to any amended terms, you should close your account and discontinue use of the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy — including requests to exercise your data subject rights — please contact Babe138 through the following channels:

• Live Chat: Available 24/7 via the Babe138 platform. Our multilingual support team can assist you in English, Bahasa Melayu, or Mandarin Chinese. Average response time: 3–5 minutes.
• Email: [email protected] (plain text — not a clickable link). Email responses are typically provided within 2–4 business hours. For data subject requests, please include "Data Subject Request" in the subject line.

All data subject requests will be acknowledged within 72 hours of receipt. Identity verification will be required before any personal data is disclosed, amended, or deleted. Babe138 is committed to handling all privacy-related enquiries with the utmost care, confidentiality, and promptness.

For concerns about responsible gambling or account management, please also visit our Responsible Gambling page or consult our Frequently Asked Questions.