Barca888 Privacy Policy

Barca888 ("we", "us", "our", "the Platform") respects the privacy of every individual who visits, registers with, or interacts with our online casino and sports betting services at https://barca888.cam. This Privacy Policy sets out, in clear and structured terms, how we collect, use, store, share, and protect your personal data in connection with your use of the Platform.

This Policy applies to all users of the Barca888 Platform, including registered members, prospective registrants who interact with public-facing pages, and any individual who contacts us through our support channels. It covers personal data collected through the Website, any mobile-optimised version of the Platform, and any communications you send to Barca888.

By registering an account, making a deposit, placing a wager, or otherwise using Barca888's services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform.

For the purpose of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies an individual, including name, identification number, contact details, IP address, device identifiers, and financial information.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. Barca888 acts as Data Controller in respect of personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of Barca888 under a contractual obligation.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Data" means identity and verification documents submitted in fulfilment of Know Your Customer obligations, including government-issued identification, proof of address, and selfie photographs.
• "Cookies" means small text files placed on your device by the Platform to record session information, preferences, and usage behaviour.
• "Third Party" means any entity other than Barca888 and the User.

Barca888 is the Data Controller responsible for the personal data collected and processed through the Platform. Barca888 operates under international online gambling licensing (Curacao jurisdiction). Questions or requests relating to this Privacy Policy or the processing of your personal data should be directed to our support team using the contact details in Section 17 of this document.

Where Barca888 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or IT infrastructure partners), those providers act as Data Processors under contractual data processing agreements that limit their use of your data to the specified purpose.

Barca888 collects the following categories of personal data in connection with the provision of its services:

Barca888 collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering an account, completing your profile, submitting KYC documents, making deposits, requesting withdrawals, contacting our support team, or responding to surveys.
• Automated Technical Collection: Data collected automatically when you visit or interact with the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes IP addresses, device identifiers, and session data.
• Payment Processors: Transaction confirmation data and payment reference numbers received from FPX banking infrastructure (Maybank, CIMB, Public Bank, Hong Leong), DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks when you initiate financial transactions.
• KYC Verification Providers: Verification status and risk signals received from third-party identity verification services used to authenticate the documents you submit during the KYC process.
• Fraud Prevention Services: Risk scores and flagging data received from fraud detection and anti-money laundering (AML) screening services, used to protect the integrity of the Platform and our users.
• Publicly Available Sources: In limited circumstances and where permitted, information from publicly available sources may be used to verify identity claims or conduct due diligence as required by our licensing obligations.

Barca888 processes your personal data on the following legal grounds, depending on the specific purpose:

• Performance of a Contract: Processing necessary to fulfil the agreement between you and Barca888 — including account management, deposit processing, withdrawal execution, and gameplay facilitation.
• Legal Obligation: Processing required to comply with applicable laws and the conditions of our international operating licence, including KYC identity verification, anti-money laundering (AML) checks, and age verification.
• Legitimate Interests: Processing necessary to pursue Barca888's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security monitoring, responsible gambling oversight, and internal analytics for service improvement.
• Consent: Processing for purposes where your consent has been obtained — primarily in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Barca888 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and operating your registered account, including authentication, security notifications, and account communications.
• Transaction Processing: Facilitating deposits via FPX, DuitNow, and e-wallets, processing withdrawal requests, and maintaining accurate financial records.
• Identity Verification (KYC): Verifying your identity and age in fulfilment of our international licensing obligations and to enforce our 21+ age requirement.
• Fraud Prevention and AML Compliance: Monitoring transactions and account activity to detect and prevent fraud, money laundering, and other prohibited activities.
• Customer Support: Responding to your queries, complaints, and requests submitted via live chat or email.
• Responsible Gambling: Monitoring gameplay patterns to identify indicators of problem gambling behaviour and to apply any self-imposed limits or restrictions you have configured on your account.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game selection, platform performance, and user experience.
• Marketing (with consent): Sending promotional offers, bonus announcements, and relevant communications to users who have opted in. We do not send unsolicited marketing communications.
• Legal Compliance: Retaining records as required by our international licensing authority and any applicable regulatory obligations.

Barca888 does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: Financial transaction data is shared with payment providers (including FPX banking infrastructure, DuitNow, Touch 'n Go eWallet operator, Boost, GrabPay, and cryptocurrency networks) to the extent necessary to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Identity documents and verification data are shared with our contracted KYC partners to authenticate your identity and age as required under our licensing conditions.
• Fraud Detection and AML Screening Services: Transaction and account data may be shared with fraud prevention and anti-money laundering services to protect the Platform and its users.
• IT Infrastructure and Cloud Providers: Data is hosted and processed on secure third-party server infrastructure operated by our contracted IT service providers under strict data processing agreements.
• Game Software Providers: Limited gameplay data (such as wager amounts and game outcomes) may be shared with our licensed game software providers (e.g., Pragmatic Play, Evolution Gaming, Habanero, JILI) to the extent necessary for game operation and dispute resolution.
• Regulatory and Legal Authorities: Where required by law, by court order, or by the terms of our operating licence, Barca888 may disclose personal data to regulatory authorities or law enforcement agencies.
• Business Transfers: In the event of a corporate restructuring, merger, or acquisition, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Barca888 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns, and maintain your session preferences. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the Platform, including authentication cookies that keep you logged in during a session, security tokens, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language, currency display, and previously visited sections of the Platform to provide a more personalised experience.
• Analytical / Performance Cookies: Collect anonymised data about how users interact with the Platform — including pages visited, session duration, and error reports — to help us improve performance and user experience.
• Session Tracking: Used for responsible gambling monitoring purposes to track session duration and gameplay patterns, enabling delivery of session time reminders and loss alerts as configured by you.

Most web browsers allow you to manage cookie settings through their preferences menus. Disabling non-essential cookies will not prevent you from using the core Platform, but may affect certain preference-based features. For full details on managing cookies in your browser, refer to your browser's help documentation.

Barca888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data aggregated for statistical purposes may be retained indefinitely as it can no longer identify an individual.

Barca888 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. This applies to account logins, game sessions, and all financial transactions including FPX, DuitNow, and e-wallet operations.
• Encryption at Rest: Sensitive data stored on our servers, including KYC documents and financial records, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within Barca888 is governed by a strict role-based access control policy. Only personnel with a legitimate operational need are authorised to access specific categories of data.
• Audit Logging: Access to and modifications of sensitive personal data are logged and subject to regular audit review to detect and investigate any anomalies.
• Security Testing: The Platform undergoes regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Incident Response: Barca888 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected users within the timeframe required by applicable standards.

While we implement these measures rigorously, no system is completely immune to security threats. We encourage you to use a strong, unique password for your account and to enable any available two-factor authentication features.

As an internationally licensed operator, Barca888 may transfer and process personal data in jurisdictions outside Malaysia. Such transfers may occur in connection with our use of cloud hosting infrastructure, KYC verification services, payment processors, and game software providers, which may be located in various countries.

Where personal data is transferred internationally, Barca888 takes appropriate steps to ensure that adequate protections are in place, including the use of standard contractual clauses, vendor due diligence assessments, and contractual obligations requiring recipient parties to maintain security standards equivalent to those described in this Policy.

By registering an account and using the Platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Malaysia. We process such transfers only where necessary and with appropriate safeguards in place.

Subject to applicable law, you have the following rights in relation to your personal data held by Barca888:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. You may also update certain account details directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to our legal and regulatory retention obligations — we are required to retain certain data for defined periods as described in Section 10.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another controller where technically feasible, in respect of data processed on the basis of consent or contract.
• Right to Restrict Processing: You may request that we restrict our processing of your personal data in certain circumstances — for example, while a rectification request is pending or where processing is unlawful but you prefer restriction over deletion.
• Right to Object: You may object at any time to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. Upon receipt of a valid marketing opt-out request, we will cease sending marketing communications promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Barca888 is an adult entertainment platform. Access to and use of the Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.

If we discover or have reason to believe that personal data has been submitted by a user under the age of 21, we will:

• Immediately suspend the relevant account pending investigation.
• Permanently close the account upon confirmation of underage status.
• Delete all personal data associated with the underage account in accordance with our data minimisation obligations.
• Return any real-money balance (net of fraudulently claimed bonuses) to the payment method used for deposit, as appropriate.

Parents and guardians are encouraged to use parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. If you believe your child may have registered an account with Barca888, contact our 24/7 support team immediately.

The Barca888 Platform does not contain links to third-party websites for commercial or affiliate purposes. However, to the extent that any external resources are referenced within the Platform (for example, in the context of responsible gambling support organisations), Barca888 is not responsible for the privacy practices of those third-party sites.

We encourage you to review the privacy policies of any third-party sites you visit independently of Barca888. This Privacy Policy applies solely to the Barca888 Platform and the data collected through it.

Barca888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Material changes will be communicated to registered users via email to the address on file and/or through a prominent notice on the Platform, at least 14 days before the revised Policy takes effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept any revised terms, you should cease using the Platform and contact our support team to discuss account closure.

We encourage you to review this Privacy Policy periodically. A current version is always accessible at https://barca888.cam/privacy-policy.

For any questions, concerns, access requests, or complaints regarding this Privacy Policy or the handling of your personal data by Barca888, please contact us using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week directly through the Platform interface
• Subject Line: Please include "Privacy Request" or "Data Protection Query" in the subject line of email enquiries to ensure prompt routing to our data handling team

All privacy-related requests will be acknowledged within 5 business days and fully addressed within 30 days. Where a request is complex or voluminous, we may extend the response period by a further 30 days and will notify you accordingly.