chage88 Privacy Policy

01 Introduction

1.1 chage88 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the chage88 online casino and sportsbook platform available at chage88.net ("Platform").

1.2 This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which it is processed, the legal bases relied upon, the parties with whom it may be shared, and the rights available to you as a data subject.

1.3 This Policy should be read alongside the chage88 Terms & Conditions, which are available at /terms-conditions, and any specific terms applicable to individual services or promotions.

1.4 By registering an account on the Platform, completing the KYC process, or otherwise providing personal data to chage88, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

02 Data Controller

2.1 chage88 is the data controller responsible for the personal data collected through the Platform. As data controller, chage88 determines the purposes and means of processing personal data obtained in connection with the operation of the chage88 online gambling platform.

2.2 For all privacy-related queries, requests, and complaints, please contact the chage88 Data Protection team via the contact details set out in Section 15 of this Policy.

03 Personal Data We Collect

3.1 chage88 collects personal data across several categories depending on your interaction with the Platform. The categories of personal data we may collect include:

3.2 We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or medical information) unless explicitly required for responsible gaming interventions or as required by law.

3.3 Data from Third Parties. chage88 may receive personal data about you from third-party identity verification providers, payment processors, fraud detection services, and credit reference agencies in connection with KYC and anti-money laundering obligations.

04 How We Use Your Personal Data

4.1 chage88 uses personal data for the following purposes:

• Account registration and management — to create, maintain, and administer your chage88 Account, verify your identity, and authenticate your login sessions;
• Payment processing — to process deposits, withdrawals, and refunds in MYR via your linked Touch 'n Go eWallet, Boost, FPX, or bank accounts;
• Regulatory compliance — to fulfil obligations under applicable anti-money laundering, counter-terrorism financing, and gambling regulations, including record-keeping and regulatory reporting;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other prohibited conduct;
• Responsible gaming — to monitor gaming behaviour for indicators of problem gambling, administer player-imposed limits and self-exclusion, and fulfil responsible gaming obligations;
• Customer support — to respond to Account queries, complaints, and support requests submitted via live chat or email;
• Platform improvement — to analyse aggregated usage data and improve Platform functionality, game library, and user experience;
• Marketing — to send promotional offers, bonuses, and platform updates where you have opted in to receive marketing communications from chage88.

4.2 chage88 does not use personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where expressly required by anti-money laundering screening obligations.

05 Legal Basis for Processing

5.1 chage88 relies on the following legal bases for processing your personal data:

• Contractual necessity — processing required to perform the contract between you and chage88, including account operation, payment processing, and providing access to games and betting markets;
• Legal obligation — processing required to comply with applicable laws, including KYC, anti-money laundering, data retention, and gambling regulatory requirements;
• Legitimate interests — processing conducted for chage88's legitimate business interests, including fraud prevention, Platform security, and responsible gaming monitoring, where those interests are not overridden by your fundamental rights;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Third Parties

6.1 chage88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

6.2 chage88 may share personal data with the following categories of third parties where necessary and proportionate:

• Identity verification providers — to conduct KYC checks against government identity databases and document verification services;
• Payment processors — including Touch 'n Go, Boost, FPX network participants (Maybank, CIMB, Public Bank), Visa, and Mastercard, to process financial transactions;
• Game providers — certified game studios (including but not limited to Pragmatic Play, PG Soft, Evolution Gaming) receive anonymised session data necessary to deliver game functionality;
• Fraud and AML service providers — third-party services engaged to assist with anti-fraud screening and anti-money laundering compliance;
• Regulatory and law enforcement authorities — where required by applicable law or court order, chage88 will disclose personal data to competent authorities;
• Professional advisors — lawyers, auditors, and compliance consultants operating under confidentiality obligations.

6.3 All third-party service providers engaged by chage88 are subject to data processing agreements requiring them to process personal data only for the specific purposes instructed and to maintain appropriate security standards.

07 Cookies & Tracking Technologies

7.1 The chage88 Platform uses cookies and similar tracking technologies to maintain session authentication, remember user preferences, and analyse Platform usage patterns.

7.2 The categories of cookies used by chage88 include:

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled without breaking core Platform functionality;
• Functional cookies — used to remember your preferences such as language and display settings;
• Analytics cookies — used to collect aggregated, anonymised data about how Players interact with the Platform, enabling chage88 to identify and address usability issues;
• Marketing cookies — used to track the effectiveness of promotional campaigns and deliver relevant offers where you have consented to receive marketing from chage88.

7.3 You may control non-essential cookies through your browser settings. Disabling analytics or marketing cookies will not affect your ability to use the Platform's core gambling functions.

08 Data Retention

8.1 chage88 retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable law.

8.2 The following general retention periods apply:

• Account data and transaction records — retained for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC documents — retained for a minimum of 5 years from the date of submission or account closure, whichever is later;
• Communication records (support transcripts, email correspondence) — retained for 2 years from the date of the communication;
• Marketing preferences — retained until you withdraw consent or close your Account;
• Technical and log data — retained for 12 months for security and fraud investigation purposes.

8.3 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

09 Data Security

9.1 chage88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 / 256-bit SSL encryption for all data transmitted between your device and chage88 servers;
• Encrypted storage for sensitive personal data including identity documents and payment references;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Two-factor authentication options for player account access;
• Regular security assessments and penetration testing of Platform infrastructure.

9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, chage88 will notify affected individuals and the relevant supervisory authority in accordance with applicable legal requirements.

10 Your Data Rights

10.1 Subject to applicable law and the limitations described below, you have the following rights in relation to your personal data held by chage88:

• Right of access — the right to request a copy of the personal data chage88 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations;
• Right to restriction — the right to request that processing of your personal data be restricted in certain circumstances;
• Right to data portability — the right to receive personal data you have provided to chage88 in a structured, commonly used machine-readable format;
• Right to object — the right to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent — where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, please contact the chage88 Data Protection team using the contact details in Section 15. chage88 will respond to all legitimate requests within 30 calendar days. Where the request is complex or numerous, this period may be extended by a further two months, with notice provided to you.

10.3 Certain rights may be limited where fulfilment would conflict with chage88's legal obligations — for example, anti-money laundering record-keeping requirements may prevent immediate deletion of transaction history upon request.

11 Children's Privacy

If you have reason to believe that a person under the age of 21 has registered on the chage88 Platform, please report this to chage88 immediately via the contact details in Section 15.

12 International Data Transfers

12.1 Some of the third parties with whom chage88 shares personal data — including game providers, payment processors, and identity verification services — may operate from, or process data in, jurisdictions outside Malaysia.

12.2 Where personal data is transferred outside Malaysia, chage88 ensures that such transfers are subject to appropriate safeguards, including contractual data protection obligations that require the recipient to apply protection standards equivalent to those applied by chage88.

13 Marketing Communications

13.1 chage88 may send promotional emails, SMS notifications, or in-platform messages regarding bonuses, promotions, and Platform updates to Players who have opted in to receive marketing communications during registration or account settings.

13.2 You may opt out of marketing communications at any time by updating your notification preferences in the chage88 Account settings panel or by contacting customer support. Opt-out requests will be processed within 5 business days. Opting out of marketing communications does not affect transactional communications such as withdrawal confirmations or security alerts.

14 Amendments to This Policy

14.1 chage88 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The updated Policy will be published on this page with a revised effective date.

14.2 Where an amendment materially affects your rights or the way in which chage88 processes your personal data, chage88 will notify registered Players by email at least 14 days before the changes take effect.

14.3 Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should cease using the Platform and close your Account.

15 Contact & Complaints

For data access requests, corrections, deletion requests, or privacy-related complaints, please contact the chage88 Data Protection team:

• Email: [email protected]
• Subject line: "Privacy Request – [Your Account Username]"
• Live Chat: Available 24/7 via the chage88 account dashboard

chage88 will acknowledge all privacy-related requests within 5 business days and will endeavour to resolve them within 30 calendar days. Where a request cannot be fulfilled in full — for example, due to conflicting legal obligations — chage88 will explain the reason in writing.