Chage88 Privacy Policy – Data Protection & User Privacy

Welcome to the chage88 Privacy Policy. This document explains in detail how the chage88 platform ("we", "Platform") collects, processes, stores and protects your personal data as a registered user or member. This Policy applies to all services provided through the chage88.pro website and our mobile app.

We take your privacy seriously. As a platform serving users in Malaysia, chage88 complies with the Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We do not sell, rent, or trade your personal data to any third party for marketing purposes without your explicit consent.

By registering and using the chage88 platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please stop using our services and contact the support team to close your account. We encourage you to read this document carefully and reach out to us if you have any questions.

Chage88 collects various categories of personal data to ensure a safe, seamless, and personalised gaming experience for every member. The data we collect is divided into several key categories:

Every piece of data we collect has a clear and lawful purpose. chage88 will not use your data for unrelated purposes without obtaining additional consent from you. The following are the primary purposes for which your personal data is used:

• Account management: Processing registrations, verifying identities, maintaining account records, and enabling secure platform access via login and two-factor authentication (2FA).
• Transaction processing: Processing deposits, withdrawals, and all financial transactions promptly and accurately, including maintaining transaction history for customer support.
• Legal compliance: Fulfilling anti-money laundering (AML) obligations, KYC verification, reporting to relevant authorities, and complying with court orders or official investigations.
• Platform security: Detecting and preventing fraud, account abuse, collusion, bot usage, and any suspicious activity that could compromise platform integrity.
• Service improvements: Analysing usage patterns, customer feedback, and performance data to improve platform features, introduce new games, and enhance the overall user experience.
• Service communications: Sending important account notifications, security updates, terms changes, transaction alerts, and responses to your support enquiries.
• Optional marketing: With your consent only, we send information about promotions, bonuses, and exclusive offers that may interest you. You may unsubscribe at any time.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and recommending appropriate self-control tools to members who may need them.

Chage88 does not sell or disclose your personal data to external parties for commercial purposes. However, there are certain situations where we need to share your information with trusted third parties to enable our services to function properly:

• Payment service providers: Payment gateways such as FPX, DuitNow, and e-wallet providers that process your financial transactions. They are bound by strict confidentiality agreements and only receive data necessary to process transactions.
• Game software providers: Game development companies providing slot games, live casino, and sports betting platforms receive the minimum session data required for game functionality.
• Identity verification service: Accredited third-party KYC providers assist us in verifying identity documents efficiently and securely.
• Relevant authorities: Law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law.
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations in situations requiring their advisory services.

All third parties we work with are bound by data processing agreements that require them to protect your information to the same high standards we uphold. We conduct regular due diligence reviews on all our service providers.

Chage88 continually invests in the latest cybersecurity infrastructure to ensure your personal and financial data is protected at all times. The following are the layers of protection we have implemented:

• 256-bit SSL/TLS Encryption: All communications between your browser and chage88 servers are encrypted using military-grade SSL/TLS protocols, ensuring data cannot be intercepted in transit.
• Static data encryption: Sensitive data stored in our databases is encrypted using AES-256 algorithms, making it unreadable even in the event of an unauthorised access attempt.
• Two-factor authentication (2FA): An additional security layer that requires a secondary verification code at login, protecting your account even if your password is compromised.
• 24/7 threat monitoring: Our automated security monitoring system operates 24/7 to detect suspicious activity, intrusion attempts, and anomalies in usage patterns.
• Network segregation: Production data servers, databases, and backup systems are isolated in separate network environments with strict access controls.
• Staff security training: All chage88 staff who handle user data undergo regular information security training and are subject to access controls based on the need-to-know principle.

While we take every reasonable measure to protect your data, no security system can be guaranteed 100% secure against all threats. In the event of a security incident involving your data, we are committed to notifying you within 72 hours of the incident being identified, in line with industry best practices.

Chage88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting statistical information on how visitors use our platform, such as most frequently visited pages and response times. This data is used in aggregate form for platform improvements.
• Functional cookies: Storing your preferences such as language selection, display settings, and saved login information for your convenience.
• Analytics cookies: Helping us understand platform usage patterns to plan improvements and develop more relevant new features.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or your experience on the chage88 platform. For more information on managing cookies, refer to your web browser's documentation.

As a data subject, you have certain rights regarding your personal data held by chage88. We fully respect these rights and make it easy for you to exercise them:

To exercise any of the above rights, contact our privacy team via 24/7 live chat or email at [email protected]. We will process your request within 30 calendar days. For complex requests, this period may be extended up to 60 days with prior notice given to you.

Chage88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active account data: Retained for the duration your account is active and up to 7 years after account closure for financial compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements.
• KYC documents: Retained for the period required by applicable AML legislation, typically between 5 and 7 years after the business relationship ends.
• Support communication logs: Retained for 3 years for quality control and dispute resolution purposes.
• Cookie & session data: Session cookies expire automatically when you close your browser; persistent cookies are stored for no more than 12 months.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your data will be securely deleted or anonymised using industry-standard methods, ensuring it cannot be recovered or reused.

Chage88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Each updated version of the Privacy Policy will include a clear effective date at the top of the document.

For changes deemed material — those that significantly affect your rights or how we use your data — we will:

• Sending a notification to your registered email address at least 14 days before any changes take effect.
• Displaying prominent notices on the platform's home page and within your account upon login.
• Requesting your re-confirmation of consent if changes involve processing your data for new purposes not previously agreed to.

Continued use of the chage88 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and withdraw any eligible balance before the effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the chage88 privacy team is here to help. We are committed to providing accurate and thorough responses to every privacy enquiry.

• Email: [email protected] (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the platform
• Target response time: 24–48 hours for email; instant for live chat

For complaints that cannot be resolved through our support channels, you have the right to escalate to the relevant data protection authority under Malaysian law. chage88 will fully cooperate with any investigation conducted by the relevant authority.