chage88 Privacy Policy

1. Introduction

chage88 ("we," "us," "our," "the Company") operates the online gaming platform accessible at chage88.org ("Platform"). We are committed to protecting the personal data of all individuals who access, register with, or use the chage88 Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, and throughout Malaysia.

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the legal bases that authorise such processing, the parties with whom we may share data, and the rights available to you as a data subject. This Policy forms part of, and should be read together with, the chage88 Terms & Conditions.

By registering for a chage88 account or continuing to use the Platform following publication of a revised version of this Policy, you acknowledge that you have read and understood its contents. If you do not agree with this Policy, you must not use the chage88 Platform.

2. Personal Data We Collect

chage88 collects personal data in the following categories:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information except where directly relevant to a responsible gaming intervention and with your explicit consent.

3. How We Collect Personal Data

chage88 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating account settings.
• Automated collection: Data collected automatically when you access the Platform, including cookies, server logs, and device fingerprinting technologies.
• Third-party sources: Identity verification and fraud screening providers, payment processors, and publicly available sources where permitted by applicable law.

4. Legal Basis for Processing

chage88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to open and manage your account, process payments, and settle bets — without which we cannot provide the chage88 service.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, age verification obligations, and tax reporting duties.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and analytical improvements to the chage88 Platform — where such interests are not overridden by your rights.
• Consent: Marketing communications and optional personalisation features, where you have given explicit, freely withdrawable consent.

5. How We Use Your Personal Data

chage88 uses collected personal data for the following purposes:

• Creating, verifying, and managing your chage88 account.
• Processing deposits, withdrawals, and bonus transactions in MYR.
• Verifying your identity and age (21+) in accordance with our KYC obligations.
• Detecting, preventing, and investigating fraud, money laundering, and platform abuse.
• Monitoring compliance with responsible gaming commitments and intervening where problem gambling indicators are detected.
• Providing customer support and resolving disputes.
• Personalising your experience on the chage88 Platform, including game recommendations, where you have consented.
• Sending promotional communications about chage88 offers, where you have opted in and not subsequently withdrawn consent.
• Analysing aggregated, anonymised usage data to improve Platform performance and game selection.
• Complying with applicable legal and regulatory requirements.

6. Data Retention

chage88 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods:

• Account and transaction records: A minimum of five (5) years from the date of the last transaction, in compliance with AML record-keeping requirements.
• KYC and identity documents: A minimum of five (5) years from the date of account closure or last verification event.
• Support communications: Three (3) years from the date of the communication, unless related to an ongoing dispute.
• Marketing consent records: Until consent is withdrawn, plus three (3) years thereafter as evidence of consent.

Following the expiry of applicable retention periods, chage88 will securely delete or irreversibly anonymise your personal data.

7. Sharing Your Personal Data

chage88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients:

• Payment service providers: Including banks (Maybank, CIMB, Public Bank) and eWallet operators (Touch n Go, Boost) for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services engaged to verify player identities and screen against sanctions and politically exposed persons (PEP) lists.
• Game content suppliers: Licensed game studios that supply casino and slot content to the chage88 Platform, where game session data must be transmitted to operate the game.
• Fraud prevention and security providers: Third-party platform integrity and anti-fraud services.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory direction.
• Professional advisers: Lawyers, auditors, and insurers, under confidentiality obligations.

All third-party service providers engaged by chage88 are contractually required to process personal data only on our instructions, maintain appropriate technical and organisational security measures, and not use your data for their own independent purposes.

8. Cookies & Tracking Technologies

chage88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — including session management, account authentication, and security tokens. These cannot be disabled.
• Performance cookies: Collect anonymised data on how the Platform is used, including page load times and error rates, to improve Platform performance.
• Functional cookies: Remember your preferences such as language settings and game lobby layout.
• Analytics cookies: Used to understand aggregate player behaviour on the chage88 Platform. Data is anonymised before analysis.

Non-essential cookies (performance, functional, analytics) are set only with your consent. You may withdraw cookie consent at any time by clearing your browser cookies and adjusting your browser settings. Note that disabling certain cookies may affect the functionality of the chage88 Platform.

9. Data Security

chage88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the chage88 Platform.
• Passwords stored in irreversibly hashed form — chage88 staff cannot view your password in plaintext.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular penetration testing and security audits of Platform infrastructure.
• Two-factor authentication available on all chage88 accounts — strongly recommended for all players.
• Intrusion detection systems and 24/7 security monitoring.

Notwithstanding the above, no digital transmission or storage system is entirely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, chage88 will notify affected players and relevant regulatory authorities in accordance with applicable requirements.

10. International Data Transfers

The chage88 Platform and its infrastructure are operated from data centres that may be located outside Malaysia. Where personal data is transferred outside your country of residence, chage88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. Such safeguards include contractual data protection clauses with all recipient entities and, where applicable, reliance on adequacy decisions or equivalent transfer mechanisms.

11. Your Data Subject Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by chage88:

• Right of access: To request a copy of the personal data chage88 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: To request that chage88 limits the processing of your personal data in certain circumstances.
• Right to data portability: To receive personal data you have provided in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: To object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the chage88 data privacy team at [email protected] (plain text only). We will respond to all verified requests within thirty (30) days.

12. Children's Privacy

The chage88 Platform is strictly intended for individuals who are 21 years of age or older. chage88 does not knowingly collect personal data from persons under 21. Age verification is performed as part of the KYC process for every account. If chage88 discovers that personal data has been collected from a person under 21, that account will be immediately suspended and all personal data associated with it deleted in accordance with our data retention policy.

If you are a parent or guardian and believe that a minor has provided personal data to chage88, please contact us immediately at [email protected] (plain text only).

13. Third-Party Links

The chage88 Platform may contain references to third-party content, game suppliers, or payment processors whose own privacy policies govern the treatment of any personal data you provide directly to those parties. chage88 is not responsible for the privacy practices of third-party organisations and encourages you to review the privacy policies of any third party with whom you interact.

14. Changes to This Privacy Policy

chage88 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players by email to the address on file and via a prominent notice on the Platform, not less than seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the chage88 Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

15. Contact & Data Privacy Enquiries

For all privacy-related questions, data subject access requests, or concerns regarding the handling of your personal data by chage88, please contact our data privacy team:

Email: [email protected] (plain text only — not a clickable link)
Live Chat: Available 24/7 via the chage88 Platform
Response time: Within 30 calendar days for formal data subject requests; within 48 hours for general privacy enquiries.