OFFICIAL DATA PROTECTION POLICY

Privacy Policy bara22 —
Data Protection & Member Security

Your privacy is our priority. This document clearly explains how bara22 collects, uses, stores, and protects the personal information of every member using our platform.

Updated: 1 January 2026
256-bit SSL Encryption
Data Not Sold to Third Parties
Right of Access & Data Deletion
Our Commitment: bara22 has never and will never sell member personal data to any third party for marketing purposes.
Have a privacy question? Contact our data protection team via 24/7 live chat on the platform.
This Privacy Policy ("Policy") explains how bara22 collect, use, disclose, and protect your personal information when you use the website https://bara22.fun and our mobile app. By using our platform, you agree to the privacy practices set out in this document.

At bara22, we understand that your trust is the most valuable asset we hold. That's why we've built a robust and transparent data protection system, so you can enjoy your gaming experience with complete peace of mind — knowing your personal information is always secure.

This Policy applies to all bara22 platform users regardless of whether you access it via a web browser, iOS app, or Android app. We encourage you to read this document carefully and contact our team if anything is unclear.

1Introduction & Scope of This Policy

Bara22 is an online entertainment platform operating in Malaysia, offering a range of services including casino games, sports betting, live casino, and a VIP membership programme. In operating these services, we need to collect and process certain personal data to ensure a safe, fair, and legally compliant user experience.

This Privacy Policy covers all aspects of data processing we carry out, namely:

  • Information collection during registration and platform use
  • How we use that data to improve our services
  • Terms and conditions for data sharing with trusted third parties
  • Technical and organizational security measures we implement
  • Your rights as a data owner and how to exercise them

2Types of Personal Data We Collect

We collect various types of information depending on how you interact with the bara22 platform. Here's a comprehensive overview of the data we collect and why:

Data Category Example Information Purpose of Collection
Personal Identity Full name, date of birth, ID card number, selfie photo Identity verification (KYC), fraud prevention
Contact Information Email address, phone number, residential address Account communications, transaction notifications
Financial Data Bank account number, bank name, transaction history Deposit and withdrawal processing
Technical Data IP address, browser type, operating system, device ID Account security, fraud detection
Usage Data Game history, bets, session duration, game preferences Platform improvements, personalized recommendations
Communication Data Live chat records, support emails, complaints Issue resolution, service quality improvement

We never collect sensitive data such as health information, religious beliefs, or political views without your explicit consent. All information we collect is limited to what is necessary to operate our services safely and lawfully.

3How We Use Your Data

Every piece of data we collect is used responsibly and in accordance with the purpose stated at the time of collection. Below is a detailed breakdown of how bara22 uses your personal information:

  • Account management: Creating, verifying, and managing your member account, including the KYC process required by platform regulations
  • Transaction processing: Processing deposits, withdrawals, bonus payments, and all financial transactions in your account safely and efficiently
  • Platform security: Detecting suspicious activity, preventing unauthorized access, and protecting your account from external threats
  • Service improvements: Analyzing usage patterns to improve the interface, reduce load times, and enrich your gaming experience
  • Marketing communications: Sending promotional information, the latest bonuses, and exclusive offers — only to members who have opted in to receive them
  • Legal compliance: Fulfilling legal obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements
  • Customer support: Providing effective technical assistance and account support whenever you need help
You may withdraw consent to receive marketing communications at any time by contacting our support team or through your account settings on the platform.

4Data Sharing With Third Parties

Bara22 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we may need to share your information with trusted parties, as follows:

  • Payment providers: Banking institutions, e-wallet operators, and payment processors required to securely execute your financial transactions
  • Technology provider: Companies that provide technical infrastructure, cloud services, and cybersecurity solutions supporting our platform's operations
  • Game providers: Game studios and software providers that supply game content to the bara22 platform, subject to strict confidentiality agreements
  • Authority: Law enforcement agencies, regulatory bodies, or courts when required by Malaysian law or a valid court order
  • Identity verifier: Third-party KYC verification service that helps us verify member identities to meet compliance requirements

Every third party that receives your data is bound by strict data protection agreements and is only permitted to use that information for the specified purpose. We actively monitor and audit these partners to ensure a level of data protection consistent with our own standards.

5Our Data Security Measures

The security of your data is a responsibility we take extremely seriously. bara22 continuously invests in the latest security infrastructure to ensure your information is always protected against a wide range of cyber threats.

  • 256-bit SSL Encryption: All communications between your device and bara22's servers are protected by military-grade SSL/TLS encryption that cannot be compromised
  • Data-at-rest encryption: All data stored in our databases is also encrypted using AES-256 standards, ensuring security even in the event of an unexpected physical breach
  • Two-factor authentication (2FA): 2FA is available for all accounts, adding an extra layer of security on top of your regular password
  • 24/7 Monitoring: Our security team continuously monitors systems to detect any unusual activity or unauthorized access attempts.
  • Regular penetration testing: We conduct regular security audits and penetration testing by independent experts to identify and address system vulnerabilities.
  • Internal access controls: Only specifically authorised personnel may access members' personal data, and all such access is strictly logged and audited
In the event of any security incident affecting your data, bara22 is committed to notifying affected members within 72 hours of the incident being confirmed.

6Cookies, Analytics & Tracking Technologies

The bara22 website and app use cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and deliver more relevant content to you. Here are the types of cookies we use:

  • Essential cookies: Required for core platform operations such as login session verification, security controls, and language preferences — these cookies cannot be disabled
  • Performance cookies: Collecting information about how you use our website, such as the most frequently visited pages and load times, to help us improve the platform
  • Functional cookies: Saving your preferences such as display settings, preferred currency, and language to deliver a more personalized experience
  • Analytics cookies: Anonymised usage data is used to understand overall usage patterns and make better product development decisions

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some platform features. For more information on managing cookies, refer to your browser's help section.

7Your Rights as a Data Owner

As a bara22 member, you have full rights over your personal data. We fully respect and uphold these rights. Below is a list of rights you may exercise at any time:

Right of Access

Request a copy of all personal data we hold about you in a readable format.

Right to Rectification

Request corrections to inaccurate or incomplete data in your account.

Right to Erasure

Request the deletion of your personal data ("right to be forgotten"), subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing or profiling purposes at any time.

Right to Data Portability

Receive your data in a structured, machine-readable format for transfer to another platform.

Right to Restrict Processing

Request that we restrict the processing of your data in certain situations permitted by law.

To exercise any of the above rights, please contact our data protection team via live chat within the platform. We will process your request within 30 business days.

8Data Retention Period

Bara22 does not retain your personal data longer than necessary for the stated purpose or as required by Malaysian law. Below are our data retention guidelines:

  • Active account data: Retained for the duration your account is active and up to 5 years after account closure for audit and compliance purposes
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements
  • Support communication logs: Retained for 2 years for reference and service quality improvement
  • Technical log data: Access and security logs are retained for 90 days for the purpose of security incident investigations.
  • KYC Documents: Retained for 5 years after termination of the business relationship in accordance with anti-money laundering requirements

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

9Third-Party Links & Services

The bara22 platform may contain links to websites or services operated by third parties, including game providers, payment providers, and technology partners. When you access those links or services, the relevant third party's Privacy Policy will apply — not bara22's Privacy Policy.

We are not responsible for the privacy practices of third-party websites or services. We encourage you to read the privacy policy of each platform you visit separately. That said, we always strive to work only with third parties whose data protection standards are equivalent to our own.

10Changes to This Privacy Policy

Bara22 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other relevant operational reasons.

Any significant changes will be communicated to members via:

  • In-platform notification upon your next login
  • Email notification to the address registered in your account
  • Notice displayed on the bara22 website homepage

The "Updated" date at the top of this document will always reflect the date of the last revision. Continued use of the platform after changes are published will be considered your acceptance of the updated policy.

Recommendation: Bookmark this page and revisit our Privacy Policy periodically to ensure you are always informed about how your data is protected.

11Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact bara22's Data Protection Officer (DPO) through the following channels:

  • 24/7 Live Chat: The fastest way — directly within the bara22 platform, with an average response time of under 15 minutes
  • Email: [email protected] (displayed as text, not a link)
  • Telegram: Official bara22 support channel — for general enquiries and case follow-ups
  • Processing time: Data rights requests will be processed within 30 business days of receipt

We value your feedback and are committed to addressing every privacy inquiry with seriousness and respect. Your trust is the foundation of everything we do at bara22.

Why Your Privacy Secure With bara22?

We don't just meet legal requirements — we go beyond the minimum standards to ensure your personal data is genuinely protected at every level.

Military-Grade Encryption

256-bit SSL and AES-256 technology protects all your data both in transit and at rest on our servers. This is the same technology used by leading banking institutions worldwide.

Data Not Sold to Anyone

Bara22 has never and will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely for the operation of our platform.

Secure & Trusted KYC

Our identity verification process uses a fully encrypted KYC system. Your IC document and selfie are stored in a restricted-access environment and deleted once verification is successfully completed.

Two-Factor Authentication (2FA)

An additional security layer that requires verification through your device each time you log in. Even if your password is compromised, your account remains strongly protected against unauthorized access.

24/7 Security Monitoring

Our cybersecurity team operates around the clock to monitor for any unusual activity. Any detected threat is addressed immediately before it can impact member data.

Full Rights Over Your Data

You are in full control — request access, correction, or deletion of your data at any time. Our data protection team will process your request within 30 business days.

MALAYSIA'S TRUSTED ENTERTAINMENT PLATFORM

Enjoy Unlimited Entertainment with
Guaranteed Data Security

With world-class data protection systems and our commitment to your privacy, play with confidence at bara22 — a platform that truly puts member security and trust first.

100% Data Security 256-bit SSL 24/7 Support Register for Free
Bahasa Melayu