Privacy Policy

1Introduction

barbar365 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at barbar365.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, prospective users, and visitors to our website.

This Privacy Policy ("Policy") sets out how barbar365 collects, uses, stores, discloses, and otherwise processes personal data in connection with our services. It also describes the rights available to you in relation to your personal data and how you may exercise those rights.

            ℹ️ Scope of This Policy
            This Privacy Policy applies to all personal data collected by barbar365 through the website barbar365.cam, our customer support channels, and any other means by which you interact with us. By registering an account or otherwise using our services, you acknowledge that you have read and understood this Policy.
          

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the barbar365 platform. Where any conflict exists between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail.

2Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person — including name, identification number, contact details, location data, online identifiers, or any combination of data that could identify an individual.
"Processing"	Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
"Data Controller"	barbar365, as the entity that determines the purposes and means by which personal data is processed.
"Data Subject"	Any natural person whose personal data is being processed — in this context, primarily registered players and website visitors.
"Consent"	Freely given, specific, informed, and unambiguous indication of the data subject's agreement to processing of their personal data for a stated purpose.
"Third Party"	Any natural or legal person other than barbar365 and the data subject, including payment processors, game providers, and technology vendors.
"Cookies"	Small text files placed on a device by a website to store information about the user's browsing preferences and session activity.

3Personal Data We Collect

barbar365 collects only the personal data that is necessary to provide our services, comply with legal obligations, and protect the integrity of our platform. The categories of personal data we collect include the following:

Category	Examples
Identity Data	Full legal name, date of birth, gender, Malaysian National Identity Card (MyKad) number, passport number, or other government-issued identification details.
Contact Data	Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru).
Account Data	Username, encrypted password, account preferences, communication settings, and self-imposed gambling limits.
Financial Data	Payment method details (e-wallet account identifiers, bank account numbers for FPX or DuitNow, partial card numbers where applicable), deposit and withdrawal history, and transaction records in MYR.
Gaming Data	Game history, wagering records, session durations, sports betting activity (including Liga Super Malaysia and EPL betting), bonus usage, and win/loss records.
Technical Data	IP address, browser type and version, operating system, device identifiers, time zone settings, and pages visited on the Platform.
Communications Data	Records of your interactions with our customer support team via live chat, email, or any other communication channel.
KYC Verification Data	Scanned copies or photographs of identity documents and proof of address submitted during the identity verification process.

            ✅ Minimum Necessary Principle
            barbar365 applies the principle of data minimisation — we collect only what is genuinely required for the specific purpose identified. We do not request or retain personal data in excess of operational and legal requirements.
          

4How We Collect Your Data

barbar365 collects personal data through the following channels and mechanisms:

Direct Submissions: Data you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting customer support, or participating in promotions.
Automated Technical Collection: Data gathered automatically when you visit or interact with the Platform, including via cookies, server logs, and analytics tools. This includes IP addresses, browser fingerprints, session data, and clickstream information.
Payment Processors: Transaction-related data received from third-party payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong when you conduct financial transactions on the Platform.
Identity Verification Providers: Where barbar365 uses a third-party KYC service to verify the identity or age of a player, data may be shared with and received from that provider for verification purposes.
Game Providers: Technical and gaming session data may be passed between barbar365 and its licensed game providers to facilitate gameplay, resolve disputes, and maintain audit trails.
Fraud Prevention Services: Data may be shared with and received from fraud detection and anti-money laundering (AML) screening providers in order to verify the integrity of transactions and player accounts.

5Purpose of Data Processing

barbar365 processes your personal data for the following specific and legitimate purposes:

Account Management: To create, maintain, and administer your player account, including verifying your identity, processing login credentials, and managing your account settings and preferences.
Service Delivery: To provide access to our casino games, sports betting markets, live dealer tables, and other features of the Platform in accordance with the Terms & Conditions.
Financial Transactions: To process deposits, withdrawals, and refunds in Malaysian Ringgit (MYR) through your selected payment method, and to maintain accurate financial records.
KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity as required by our operational policies and responsible gambling obligations.
Regulatory Compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations.
Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct on the Platform.
Customer Support: To respond to your queries, resolve disputes, and provide assistance through our 24/7 support channels.
Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings.
Platform Improvement: To analyse usage patterns, conduct internal audits, and improve the functionality, performance, and user experience of the Platform.
Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling and to administer responsible gambling tools such as deposit limits, cooling-off periods, and self-exclusion.

6Legal Basis for Processing

barbar365 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

Contractual Necessity: Processing is necessary to perform the contract between barbar365 and the Player — i.e., to provide the gaming and betting services you have registered to use, and to process your deposits and withdrawals.
Legal Obligation: Processing is necessary for barbar365 to comply with applicable legal and regulatory obligations, including KYC/AML requirements and age verification obligations.
Legitimate Interests: Processing is necessary for barbar365's legitimate business interests — including fraud prevention, platform security, internal analytics, and responsible gambling monitoring — provided those interests are not overridden by your rights and freedoms.
Consent: Where we rely on your consent as the legal basis for processing — primarily for direct marketing communications — we will obtain that consent explicitly and maintain a record of it. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

            ⚠️ Marketing Opt-Out
            If you no longer wish to receive promotional communications from barbar365, you may update your communication preferences in your account settings or contact our support team to be removed from marketing lists. Opting out of marketing communications does not affect your access to the Platform or your account.
          

7Data Sharing & Third Parties

barbar365 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may, however, share your personal data with the following categories of third parties where strictly necessary:

Payment Processors: Financial data is shared with our payment partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong — solely to facilitate your deposit and withdrawal transactions.
Identity Verification Providers: Identity and KYC documents may be shared with third-party verification service providers to authenticate your identity and confirm your age (21+ requirement).
Game Providers: Limited technical data (such as session tokens and game outcomes) is shared with licensed third-party game studios to facilitate gameplay and resolve any disputes arising from gaming sessions.
Fraud & AML Screening Services: Transaction data and account information may be shared with fraud detection and anti-money laundering screening providers to ensure the integrity and security of financial activity on the Platform.
Technology & Infrastructure Providers: Data may be accessible to third-party service providers who supply the Platform's hosting, cloud infrastructure, analytics, or customer support software, acting strictly as data processors under contractual obligations.
Regulatory Authorities: barbar365 may be required by law to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction. Such disclosure will be made only to the extent required and with appropriate safeguards where permissible.

All third parties with whom barbar365 shares personal data are required to process that data in accordance with applicable data protection standards and solely for the purpose for which it was shared. barbar365 does not authorise any third-party processor to use your data for their own independent purposes.

8Cookies & Tracking Technologies

barbar365 uses cookies and similar tracking technologies on the Platform for the following purposes:

Cookie Type	Purpose
Strictly Necessary	Essential for the Platform to function correctly — including maintaining your login session, storing your game state, and processing transactions. These cannot be disabled without affecting core functionality.
Performance / Analytics	Used to collect aggregated, anonymised data about how players navigate and use the Platform, enabling us to identify performance issues and improve user experience.
Functional	Stores your preferences such as language, currency display (MYR), and notification settings so the Platform behaves consistently across sessions.
Security	Used to support fraud detection, bot mitigation, and session integrity checks to protect your account and the Platform from abuse.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the Platform. barbar365 does not use third-party advertising cookies or cross-site tracking for commercial advertising purposes.

9Data Retention

barbar365 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following general retention principles apply:

Active Accounts: Personal data associated with an active player account is retained for the duration of the account's existence, plus a reasonable post-closure period.
Closed Accounts: Following account closure, barbar365 retains transaction records, KYC documentation, and gaming history for a minimum period of five (5) years to comply with anti-money laundering recordkeeping obligations and to resolve any potential disputes.
Marketing Data: Where you have consented to receive marketing communications, your contact and preference data is retained until you withdraw consent or request deletion.
Support Records: Customer support interaction records are retained for a period of two (2) years following resolution of the relevant query.
Technical Logs: Server and access logs are typically retained for a maximum of twelve (12) months for security and operational monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the individual.

10Data Security

barbar365 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

Encryption in Transit: All data transmitted between your device and the barbar365 Platform is encrypted using SSL/TLS protocols. We enforce HTTPS across all pages and API endpoints.
Encryption at Rest: Sensitive data — including passwords (stored as salted cryptographic hashes), KYC documents, and financial records — is encrypted at rest using industry-standard encryption algorithms.
Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal staff with access to player data are subject to confidentiality obligations and role-based access controls.
Two-Factor Authentication: barbar365 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of access security.
Vulnerability Management: The Platform undergoes regular security assessments, penetration testing, and vulnerability scanning. Critical security patches are applied on a priority basis.

            ℹ️ Your Responsibility
            While barbar365 takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying our support team immediately if you suspect any unauthorised access to your account.
          

11Your Data Rights

As a data subject, you have the following rights in relation to the personal data that barbar365 holds about you. To exercise any of these rights, please contact our support team via live chat or the email address provided in Section 14.

Right of Access

You have the right to request a copy of the personal data barbar365 holds about you, along with information about how it is being processed.

Right to Rectification

You have the right to request correction of any personal data held by barbar365 that is inaccurate or incomplete.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to legal retention obligations.

Right to Restrict Processing

You may request that barbar365 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being verified.

Right to Data Portability

Where processing is based on your consent or a contract, you may request that your personal data be provided to you in a structured, machine-readable format.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests, including objecting to direct marketing communications at any time.

barbar365 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days with prior notice. We may require verification of your identity before processing any request.

12Children's Privacy

The barbar365 Platform is strictly for adults aged 21 years and above. barbar365 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If barbar365 becomes aware that personal data has been collected from an individual under the age of 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any winnings or funds associated with such an account will be handled in accordance with our Terms & Conditions.

            ⚠️ Parental Controls
            If you are a parent or guardian and believe that your child has registered an account on the barbar365 Platform, please contact our support team immediately. We will investigate and take appropriate action, including account closure and data deletion, as swiftly as possible.
          

13Changes to This Privacy Policy

barbar365 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we provide. When material changes are made, we will notify registered Players via the Platform or by email to the address registered on your account.

The updated Privacy Policy will take effect from the date indicated in the "Last updated" notice at the top of the Table of Contents. We encourage you to review this Policy periodically to stay informed about how your personal data is being handled. Continued use of the barbar365 Platform following any update constitutes your acceptance of the revised Policy.

Historical versions of this Privacy Policy are available upon written request to our support team.

14Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how barbar365 handles your personal data, please contact us through the following channels:

Fastest Response

Live Chat Support (24/7)

Access live chat directly from any page on the barbar365 Platform. Available around the clock.

Email (Plain Text — Not a Link)

[email protected]

For formal written data rights requests. Please include your username and registered email address. Response within 2 business days.

When submitting a data rights request by email, please indicate clearly which right you are exercising (e.g., "Right of Access Request"), provide your full name and registered username, and attach a copy of your identification document for verification purposes.

Data Protection

No Third-Party Sale

Your Rights

Compliant Processing

Contents