barca888 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes the data processing practices of barca888 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at barca888.club and associated interfaces. It applies to all personal data collected from or about individuals who visit, register on, or use the barca888 platform ("you", "User", "Player").

barca888 acts as the data controller in respect of personal data collected through the platform. We process personal data in accordance with applicable data protection legislation and our obligations under the conditions of our international gaming authority operating licence, which independently mandates data governance standards.

By registering an account or using the barca888 platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the barca888 platform.

02 Personal Data We Collect

barca888 collects personal data through multiple channels — directly from you during registration and account use, automatically through platform interaction, and in limited circumstances from third-party verification providers. The categories of data collected include:

barca888 does not collect or process special category data (such as biometric data, health data, or data concerning racial or ethnic origin) unless specifically required to fulfil a legal obligation and subject to additional safeguards.

03 How We Use Your Personal Data

barca888 uses personal data only for defined, legitimate purposes. The following table describes the primary purposes for which your data is used:

• Account Management: Creating, verifying, and administering your barca888 account, including processing deposits and withdrawals in Malaysian Ringgit (MYR);
• Identity & Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in accordance with KYC obligations under our licence;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account abuse, and other prohibited conduct;
• Regulatory Compliance: Meeting obligations under our international gaming authority licence, including responsible gaming requirements, AML/CTF reporting, and record-keeping;
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Platform Improvement: Analysing usage patterns to improve barca888's games, features, and user experience;
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling, apply self-exclusion restrictions, and enforce deposit limits set by you or mandated by our licence;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest (with opt-out available at any time).

barca888 does not use personal data for automated decision-making that produces significant legal effects without human oversight, except where required by applicable law or regulatory obligation.

04 Legal Basis for Processing

barca888 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable laws and our gaming licence conditions — including KYC verification, AML/CTF reporting, responsible gaming mandates, and record retention;
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregate analytics — where such interests do not override your fundamental data protection rights;
• Consent: Processing for direct marketing communications — where you have actively opted in to receive such communications. You may withdraw consent at any time by updating your account preferences or contacting customer support.

05 Data Sharing & Third-Party Disclosure

barca888 does not sell your personal data to third parties. Personal data is shared only in the following circumstances:

• Payment Processors: Transaction data is shared with your selected payment provider (e.g., Touch 'n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank) solely to process deposits and withdrawals. These providers act as independent data controllers in respect of their own services;
• Game Providers: Certain game providers (e.g., Pragmatic Play, PG Soft, Spadegaming) receive session tokens and anonymised game interaction data to deliver game content. No personally identifiable financial data is transmitted to game providers;
• KYC & Identity Verification Providers: Identity documents may be processed by approved third-party verification services engaged by barca888 to fulfil our KYC obligations. These services are bound by data processing agreements with equivalent protections;
• Regulatory & Law Enforcement Authorities: barca888 will disclose personal data to competent authorities where required by law, court order, or regulatory directive — including disclosures required under our gaming licence conditions;
• Professional Advisors: Legal, accounting, and audit professionals engaged by barca888 may access personal data on a need-to-know basis, subject to professional confidentiality obligations.

06 Cookies & Tracking Technologies

The barca888 platform uses cookies and similar tracking technologies to support platform functionality, security, and analytics. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for login session management, security token validation, and core platform functionality. These cannot be disabled without impairing your ability to use barca888;
• Functional Cookies: Remember your preferences such as language settings and display preferences to improve your experience between sessions;
• Analytics Cookies: Collect anonymised data about how users navigate the barca888 platform — pages visited, time spent, features used — to support platform improvement;
• Security Cookies: Detect and prevent fraudulent login attempts, bot activity, and other security threats.

barca888 does not deploy third-party advertising cookies or tracking pixels that share your data with advertising networks. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may affect your ability to log in and use the platform.

07 Data Retention

barca888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by our gaming licence and applicable regulations:

• Account Data & KYC Documents: Retained for a minimum of five (5) years following account closure, as required by our gaming licence and AML/CTF obligations;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years for regulatory compliance purposes;
• Gaming Records: Game history and session logs are retained for a minimum of three (3) years;
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction;
• Marketing Preferences: Consent records and marketing preference data are retained for the duration of your account plus three (3) years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

08 Data Security

barca888 implements a layered security framework to protect personal data against unauthorised access, loss, destruction, or alteration. Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and barca888 servers;
• Password hashing using cryptographically strong one-way algorithms with individual salting — barca888 cannot recover your password in plain text;
• Access controls restricting personal data access to authorised personnel on a need-to-know basis;
• Two-factor authentication (SMS OTP) for account login and withdrawal authorisation;
• Regular security vulnerability assessments and penetration testing;
• Incident response procedures with mandatory notification timelines in the event of a data breach affecting your personal data.

While barca888 takes all reasonable technical and organisational measures to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your barca888 login credentials.

09 Your Data Subject Rights

Subject to applicable law and the conditions of our gaming licence, you hold the following rights in respect of your personal data held by barca888:

• Right of Access: Request a copy of the personal data barca888 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of personal data where there is no legal basis for continued retention — noting that certain data must be retained for regulatory compliance and cannot be deleted on request;
• Right to Restriction: Request that processing of your data be restricted while a correction or objection request is being resolved;
• Right to Data Portability: Request a structured, machine-readable copy of personal data you have provided to barca888 directly;
• Right to Object: Object to processing of your data on the basis of legitimate interests, including for direct marketing purposes — an objection to marketing will be actioned immediately;
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact barca888 via live chat or at [email protected]. barca888 will respond to data subject requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days with notification to you.

10 Children's Privacy

The barca888 platform is strictly restricted to individuals aged 21 years and above. barca888 does not knowingly collect, process, or store personal data from any person under the age of 21. If barca888 becomes aware that personal data from a person under 21 has been collected, it will be deleted immediately and the associated account suspended without liability to barca888.

If you are a parent or guardian and have reason to believe that a person under 21 has used the barca888 platform using your or their own details, please contact barca888 customer support immediately at [email protected].

11 International Data Transfers

barca888's platform infrastructure may involve processing of personal data in jurisdictions outside Malaysia, including the jurisdiction in which our gaming licence is held and jurisdictions where our game provider and payment processing partners operate.

Where personal data is transferred outside your country of residence, barca888 ensures that appropriate safeguards are in place — including contractual protections (data processing agreements incorporating standard contractual clauses) and, where applicable, reliance on adequacy decisions. Your data will not be transferred to any jurisdiction that does not offer an adequate level of data protection.

12 Third-Party Websites & Services

The barca888 platform may contain references to or integrations with third-party services, including payment providers and game studios. This Privacy Policy applies only to data processed by barca888 in its capacity as data controller. barca888 is not responsible for the privacy practices of third-party services, and you should review the privacy policies of those services independently.

barca888 does not integrate third-party social media plugins, advertising networks, or tracking pixels into the platform that would result in third parties collecting your personal data through the barca888 site.

13 Changes to This Privacy Policy

barca888 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via email or platform notification at least seven (7) days before the updated Policy takes effect.

Your continued use of the barca888 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

The version of the Privacy Policy current at the time of any dispute shall be the version that applies. Previous versions are available upon request from customer support.

This Privacy Policy was last reviewed and updated on 1 June 2026. Version: PP-2026.06.01.

14 Contact & Data Protection Enquiries

For all privacy-related enquiries, data subject rights requests, or complaints about barca888's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 within the barca888 platform — the fastest channel for urgent data concerns
• Email: [email protected] — use the subject line "Privacy Enquiry" for prioritised routing

barca888 targets written responses to privacy enquiries within five (5) business days. Data subject rights requests will be acknowledged within seventy-two (72) hours and substantively responded to within thirty (30) days.

If you are not satisfied with barca888's response to a privacy complaint, you may submit a formal complaint to the relevant data protection authority in your jurisdiction, or to the regulator associated with barca888's gaming licence.