Privacy Policy — chage88

This Privacy Policy ("Policy") is issued by chage88 ("Platform", "we", "us", "our") and describes how we collect, use, store, share, and protect personal data obtained from individuals ("Players", "Users", "you") who access or use the chage88 online gaming platform available at https://chage88.cam and all associated services, features, and communications.

chage88 takes data privacy seriously. We operate in accordance with internationally recognised data protection principles and applicable privacy laws relevant to our platform operations. We are committed to handling your personal information with transparency, integrity, and respect — consistent with the trust you place in us every time you access our platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or anywhere else in Malaysia.

By registering an account or continuing to use the chage88 platform, you acknowledge that you have read, understood, and consented to the data collection and processing practices described in this Policy. If you do not consent to these practices, please discontinue use of the Platform and contact our support team to request account closure.

The following defined terms are used throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Data Controller" means chage88, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of chage88 under a contractual data processing agreement.
• "Data Subject" means the individual to whom personal data relates — in this context, the registered Player or Platform user.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, combination, erasure, or destruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for a stated purpose.
• "KYC" means Know Your Customer — identity and age verification procedures conducted to confirm player eligibility and comply with anti-money laundering obligations.
• "Cookies" means small text files placed on a user's device by a website to store session preferences, authentication tokens, and analytics data.

chage88 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below provides a structured overview of data categories and specific data types collected:

chage88 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support enquiry, or updating your account profile.
• Automated Technical Collection: Data collected automatically when you access the Platform, including your IP address, device fingerprint, browser type, operating system version, referring URL, and session activity logs. This collection is facilitated through server logs, session tokens, and similar technologies.
• Payment Provider Data: Limited data shared with chage88 by your payment provider (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, or Hong Leong Connect) during the processing of deposit and withdrawal transactions, including transaction references, timestamps, and account identifiers.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and local storage as described in Section 9 of this Policy.
• Third-Party Verification Services: Identity and document verification data received from KYC service providers engaged by chage88 to assist with identity confirmation.

chage88 processes personal data only where a legitimate legal basis exists. The purposes for which we process your data, along with the applicable legal basis for each, are as follows:

chage88 is committed to processing personal data in accordance with the following core data protection principles, which inform every aspect of our data handling practices:

• Lawfulness, Fairness & Transparency: We process data only where a valid legal basis exists and we inform Data Subjects of our processing activities through this Policy and other applicable notices.
• Purpose Limitation: Data collected for one purpose will not be repurposed for an incompatible use without obtaining fresh consent or establishing a new legal basis.
• Data Minimisation: We limit data collection to what is strictly necessary for the stated processing purpose. We do not collect data speculatively or in excess of operational requirements.
• Accuracy: We take reasonable steps to ensure that personal data held is accurate and up to date. Players are encouraged to update their account information if it changes.
• Storage Limitation: Personal data is retained only for as long as necessary to fulfil the stated processing purpose or as required by applicable legal obligations.
• Integrity & Confidentiality: We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration.

chage88 does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. We may disclose personal data to the following categories of recipients, solely to the extent necessary for the specified purpose:

• Payment Service Providers: Including Touch 'n Go eWallet, DuitNow, FPX operators, Maybank, CIMB, Public Bank, Hong Leong, Boost, and GrabPay — solely for the purpose of processing deposit and withdrawal transactions in MYR.
• KYC and Identity Verification Providers: Third-party KYC service providers engaged under data processing agreements to assist with identity document verification and age confirmation.
• Fraud Prevention and AML Screening Services: Specialist providers used to screen transactions and account activity for indicators of fraud, money laundering, or other financial crime.
• Game Content Providers: Game studio partners and live dealer platform operators who may receive limited technical identifiers (not full identity data) necessary for game session authentication.
• IT Infrastructure and Cloud Service Providers: Service providers involved in hosting, database management, security monitoring, and platform maintenance, operating under binding data processing agreements.
• Regulatory and Law Enforcement Authorities: Competent authorities, regulatory bodies, or law enforcement agencies where disclosure is required by applicable law, court order, or regulatory directive. chage88 will not disclose data beyond what is legally required in such circumstances.

chage88 retains personal data for the minimum period necessary to fulfil the stated processing purpose, or as required by applicable legal, regulatory, or contractual obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or pseudonymised in a manner that prevents re-identification. Where data must be retained longer due to ongoing legal proceedings or regulatory investigations, the extended retention will be documented and limited to the minimum required.

chage88 uses cookies and similar tracking technologies to operate core Platform functions, maintain user sessions, prevent fraud, and analyse aggregate usage patterns to improve the Platform experience. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Required for core Platform functionality, including session authentication, login state management, and security token handling. These cookies cannot be disabled without disrupting your ability to use the Platform.
• Functional Cookies: Store your stated preferences such as language settings, responsible gambling limit configurations, and notification preferences to provide a personalised experience across sessions.
• Analytics Cookies: Used to collect aggregate, anonymised data about how users interact with the Platform — including pages visited, session duration, and feature usage — to help us identify areas for improvement. Individual users are not identified through analytics data.
• Security Cookies: Support fraud detection and account security monitoring by recording login patterns, device fingerprints, and IP address associations.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in or use core Platform features. chage88 does not use cookies to serve third-party advertising or to track users across external websites.

chage88 implements a layered security framework to protect personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our technical and organisational security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the chage88 Platform is encrypted in transit using industry-standard SSL/TLS encryption protocols.
• Encryption at Rest: Sensitive personal data stored in our systems, including identity documents and financial records, is encrypted at rest using strong encryption algorithms.
• Access Controls: Personal data is accessible only to authorised personnel who require it to perform their specific role functions. Role-based access controls and multi-factor authentication are enforced across all administrative systems.
• Security Monitoring: Continuous monitoring of Platform systems for anomalous activity, unauthorised access attempts, and potential data breaches. Automated alerts are configured for high-risk security events.
• Regular Security Assessments: Periodic security audits and vulnerability assessments are conducted to identify and remediate potential weaknesses in our data protection infrastructure.
• Data Breach Response: chage88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to the rights and freedoms of affected individuals, we will notify relevant authorities and affected players in accordance with applicable law and within required timeframes.

As a Data Subject, you hold the following rights in respect of the personal data chage88 holds about you. You may exercise any of these rights by contacting our support team as detailed in Section 15. We will respond to all valid rights requests within a reasonable timeframe consistent with applicable requirements.

Please note that certain rights may be subject to limitations where data retention is required by law (such as AML record-keeping obligations) or where erasure would conflict with ongoing regulatory or legal requirements. chage88 will always explain the basis for any limitation applied to a rights request.

The chage88 Platform is strictly restricted to individuals aged 21 years and above. chage88 does not knowingly collect, process, or retain personal data from persons under the age of 21. Age verification is a mandatory step during account registration, and all accounts are subject to KYC identity verification that confirms the account holder meets the minimum age requirement.

If chage88 becomes aware that personal data has been collected from a person under the age of 21 — whether through misrepresentation during registration or any other means — the relevant account will be immediately suspended, all associated data will be handled in accordance with our data breach and minor protection procedures, and the individual will be prevented from accessing the Platform.

If you have reason to believe that a minor has accessed or registered on the chage88 Platform, please contact our support team immediately via live chat or at the email address provided in Section 15.

The chage88 Platform integrates with a number of third-party service providers to deliver its full functionality. These include Malaysian payment processors (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect), game content delivery systems, KYC verification platforms, and infrastructure service providers.

Each third-party service provider operates under its own privacy policy and terms of service. chage88 selects third-party partners carefully and requires all Data Processors to maintain data protection standards consistent with this Policy. However, chage88 is not responsible for the independent privacy practices of third-party providers in respect of their own direct interactions with users.

The chage88 Platform does not contain links to external websites or third-party content beyond what is necessary for Platform operation. Any navigation links on this page direct exclusively to internal chage88 pages as listed in our site navigation.

chage88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal standards. Material changes to this Policy will be communicated to registered Players via email notification, in-Platform notice, or through a prominent announcement on the Platform homepage.

The date of the most recent revision is displayed at the top of the Table of Contents on this page. Continued use of the chage88 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to remain informed of how we protect your personal data.

Where a proposed amendment would involve a material change in the way we process your personal data for marketing purposes, we will seek fresh consent before applying the change to your Account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by chage88, please contact our Data Protection team through the following channel:

When submitting a data rights request, please provide sufficient information to allow us to identify your account and verify your identity. We may request identity confirmation before processing requests involving access to or deletion of personal data, to protect against unauthorised requests.

For questions about responsible gambling tools, self-exclusion, or deposit limits, please visit our Responsible Gambling page or contact our live chat support team directly.