Privacy Policy chagee88 – Our Commitment to Protecting the Personal Data of Malaysian Members

Chagee88 collects two main categories of information — details you provide directly, and information collected automatically as you use the platform.

Information you provide directly:

• Identity information — Your full name as per your Malaysian identity card (IC), IC number, date of birth, and nationality. This information is collected during account registration and the identity verification (KYC) process.
• Contact Information — An active Malaysian phone number, email address, and where applicable, a residential address in Malaysia. This information is used for account communications, OTP verification, and important notifications.
• Financial information — Details of the payment methods you use for deposits and withdrawals, including your Touch 'n Go e-wallet, GrabPay, DuitNow, Boost, or ShopeePay account numbers, or FPX details via Maybank2u, CIMB Clicks, and other banks. chagee88 does not store your credit card numbers or online banking passwords.
• Verification documents — Copies of your IC or passport submitted during the KYC process. These documents are stored in a secure environment and accessed only by authorised KYC personnel.
• Customer support communications — Live chat conversation history, emails, and any other communications you send to the chagee88 team are retained so we can provide better, more consistent support.

Information collected automatically:

• Platform usage data — Betting history, games played, total deposits and withdrawals, claimed promotion history, and overall account activity.
• Device & network data — IP address, device type, operating system, web browser, screen resolution, and other technical information required to ensure the platform functions correctly on your device.
• Cookie data — Session information, language preferences, and other settings stored in cookies to enhance your experience. See Section 5 for more details.

Chagee88 uses collected data exclusively for the following legitimate, stated purposes:

• Account management — Creating, verifying, and maintaining your chagee88 account. Securely processing login requests, withdrawals, and account setting changes.
• Financial transaction processing — Processing deposits and withdrawals via your chosen Malaysian local payment method. This requires us to share the necessary transaction information with the relevant payment service provider.
• Identity verification and fraud prevention — Verifying member identities to comply with anti-money laundering (AML) legal requirements and to prevent fraud, duplicate registrations, and platform abuse.
• Platform service delivery — Displaying betting history, calculating rebates and cashback, updating account balances, and ensuring all platform functions run smoothly for the best possible experience at chagee88.
• Service communications — Sending important account-related notifications such as OTP verification, deposit and withdrawal alerts, security updates, and material changes to our terms.
• Platform improvement — Analysing usage patterns in aggregate (not at an individual level) to identify areas for improvement on the chagee88 platform, including the user interface, system performance, and new product offerings.
• Legal compliance — To fulfil legal obligations under applicable Malaysian law, including retaining transaction records for the period prescribed by law.

Chagee88 does not use your data to send marketing communications on behalf of other companies, nor sell third-party services without your prior consent.

Chagee88 continuously invests in the latest security infrastructure to ensure your data remains protected at all times. The protection measures we have implemented include:

• Data encryption in transit — All data transmitted between your device and chagee88's servers is protected with TLS (Transport Layer Security) using 256-bit encryption. No sensitive information is sent in plain readable text.
• Data encryption at rest — Sensitive data such as financial information and identity verification documents are stored in encrypted format within protected databases. Account passwords are stored as irreversible hashes that cannot be decrypted.
• Layered access controls — chagee88's access control system operates on a need-to-know basis — each staff member can only access data relevant to their specific job responsibilities. Audit logs track every instance of data access.
• Continuous security monitoring — chagee88's automated monitoring systems continuously track account and network activity to detect anomalies or unauthorised access attempts. Our security team responds to alerts around the clock, 24 hours a day.
• Regular security testing — chagee88 conducts regular penetration testing and independent security audits to identify and address system vulnerabilities before they can be exploited.
• Financial data segregation — chagee88 members' funds are held in accounts separate from the company's operating capital, ensuring they remain available for withdrawal at all times, regardless of what happens to company operations.

Chagee88 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in the course of our operations, there are limited situations where data may be shared with trusted third parties:

• Payment service providers — When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, the necessary transaction details are shared with the respective provider to process your payment. These providers have their own privacy policies and are not permitted to use your data for any other purpose.
• Technology service providers — chagee88 uses third-party technology service providers for certain functions such as server hosting, email delivery, and platform analytics. All such providers are bound by strict confidentiality agreements and may only use your data for the purposes specified in their contracts with chagee88.
• Legal compliance — chagee88 may be required to disclose data to Malaysian law enforcement agencies, courts, or regulatory bodies if mandated by applicable law or a valid court order. In such cases, we will disclose only the minimum information required.
• Fraud prevention — In cases involving serious fraud, chagee88 may share relevant information with authorities or other platforms in the industry to prevent ongoing fraudulent activity.

Chagee88 does not share your data with related entities within its group of companies for cross-marketing purposes without first obtaining your explicit consent.

The chagee88 platform uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

• Essential session cookies — These cookies are essential for the platform to function properly. They store your login session, language preference, and basic settings so you do not need to log in again each time you navigate between pages. These cookies cannot be disabled.
• Performance & analytics cookies — These cookies help us understand how members use the chagee88 platform — which pages are visited most frequently, time spent in each section, and any technical errors encountered. Data is collected in aggregate and does not identify you as an individual. This information helps us improve the platform for all members.
• Functional cookies — These cookies store your personal preferences such as display theme, odds format settings, and your favourite sports selections. This allows the chagee88 platform to deliver a more personalised experience each time you log in.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the chagee88 platform and you may be required to log in again each time you access it.

Under Malaysia's Personal Data Protection Act (PDPA) and chagee88's Privacy Policy, you have the following rights regarding your personal data:

• Right of access — You have the right to request a copy of the personal data chagee88 holds about you. This request can be made via the "Account Settings" section or by contacting support@chagee88.biz. chagee88 will fulfil valid requests within 21 business days.
• Right to rectification — If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. Some information such as your name and IC number can be updated directly in your account settings. For changes that require additional verification, please contact the chagee88 support team.
• Right to withdraw marketing consent — If you have previously given consent to receive marketing communications from chagee88, you may withdraw that consent at any time via the "unsubscribe" link in any marketing email or through the notification settings in your account.
• Right to lodge a complaint — If you believe chagee88 has not handled your data in accordance with this Privacy Policy or Malaysia's PDPA, you have the right to file a complaint with chagee88 at support@chagee88.biz or with the Personal Data Protection Commissioner of Malaysia.

Please note that certain rights are subject to exceptions under legal requirements. For example, chagee88 may be unable to delete specific data that must be retained under anti-money laundering laws or other regulatory obligations, even upon your request.

Chagee88 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data — For as long as your chagee88 account remains active, all profile data and account information will be retained to enable full use of the platform.
• Financial Transaction History — Records of all deposits, withdrawals, and other financial transactions are retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering (AML). This data may be accessed by the authorities if required by law.
• Betting history — Betting records and gaming activity are retained for 2 years after each transaction for dispute resolution, rebate calculations, and internal audit purposes. Older records may be kept in an archived format to meet compliance requirements.
• KYC Documents — Copies of your IC, passport, and other identity verification documents are retained for a minimum of 5 years after account closure, in accordance with Malaysian legal requirements.
• Communication data — Customer support conversation history is retained for 2 years for reference and service improvement purposes.

Once a retention period expires and there is no legal basis to retain the data further, chagee88 will securely delete or anonymise it using industry-recognised methods to ensure it cannot be recovered.

For any enquiries, requests, or complaints regarding this Privacy Policy or the way chagee88 handles your personal data, please contact us through the following channels:

• Email — support@chagee88.biz (please include "Privacy Enquiry" in the email subject line)
• Live Chat — Available through the chagee88 platform, 24 hours a day in Bahasa Melayu

Our team will respond to privacy-related enquiries within 3 business days. Requests requiring a data review may take longer depending on the complexity of the request.

Privacy Policy Amendments: chagee88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Members will be notified of significant changes via their registered email or an in-platform notification at least 7 days before the changes take effect. The "Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the chagee88 platform after any changes take effect constitutes acceptance of the revised policy.