Privacy Policy — Changee88

This Privacy Policy ("Policy") is issued by Changee88 ("Company", "We", "Us", "Our"), the operator of the online casino and sports betting platform at changee88.cam ("Platform"). It describes how we collect, use, store, share, and protect personal data when you ("Data Subject", "You", "Your") interact with our Platform, including when you register an account, make a deposit or withdrawal, place a wager, contact our support team, or otherwise use our services.

This Policy should be read together with our Terms and Conditions, which incorporate this Policy by reference. By registering a changee88 account or continuing to use the Platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

Changee88 is committed to handling your personal data lawfully, fairly, and transparently. We process personal data only for the specific purposes described in this Policy and do not retain data longer than necessary.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, or online identifiers.
• "Processing" Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" The entity that determines the purposes and means of processing personal data. For this Policy, the Data Controller is Changee88.
• "Data Processor" An entity that processes personal data on behalf of the Data Controller under a written agreement, such as a third-party payment processor or cloud hosting provider.
• "Consent" A freely given, specific, informed, and unambiguous indication by which you signify agreement to the processing of your personal data for a stated purpose.
• "Cookies" Small text files stored on your device by a web browser, used to remember preferences, maintain sessions, and support analytics functions.
• "KYC" Know Your Customer — the identity verification process required under applicable regulations to confirm a player's identity, age, and payment method ownership.
• "Sensitive Data" A category of personal data that warrants higher protection, including data concerning health, financial vulnerability, or identity document numbers.

Changee88 collects the following categories of personal data in the course of operating the Platform:

Changee88 collects personal data through the following channels:

• Direct provision: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including cookies, server logs, and device fingerprinting technology.
• Payment processors: Transaction confirmation data, payment method verification results, and fraud risk indicators received from our payment processing partners, including those supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect.
• Identity verification providers: Results and flags generated by third-party KYC and anti-money laundering screening services.
• Third-party analytics: Aggregated, anonymised usage data from analytics tools used to improve Platform performance. No personally identifiable data is shared with analytics providers beyond what is necessary for this purpose.

Changee88 processes your personal data on the following legal bases:

Changee88 uses personal data for the following specific purposes:

• Creating and managing your registered Account, including authentication and security monitoring.
• Verifying your identity, age (21+ requirement), and payment method ownership in accordance with KYC obligations.
• Processing deposits and withdrawals through your registered Malaysian payment methods, including DuitNow, FPX, and supported e-wallets.
• Delivering and operating all gaming and sports betting services available on the Platform.
• Monitoring gaming activity for responsible gambling purposes, including detecting patterns associated with problem gambling behaviour and triggering appropriate intervention tools.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, collusion, money laundering, and other prohibited conduct.
• Providing customer support, including live chat, email correspondence, and complaint handling.
• Sending transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
• Sending promotional communications about changee88 offers, where you have not opted out of such communications.
• Complying with applicable legal, regulatory, and reporting obligations.
• Improving Platform functionality, user experience, and performance through anonymised analytics.

Changee88 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processing partners: Personal and financial data is shared with our authorised payment processing partners (including those supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian banks) solely to process your transactions. These partners are bound by strict data processing agreements.
• Identity verification providers: Identity data submitted for KYC is shared with authorised third-party verification service providers for screening against identity databases and anti-money laundering watchlists.
• Technology and infrastructure providers: Data necessary for Platform operation may be shared with cloud hosting, content delivery, and security service providers, all of whom are bound by data processing agreements prohibiting secondary use.
• Regulatory and law enforcement authorities: Changee88 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of the Company or other players.
• Corporate transactions: In the event of a merger, acquisition, or transfer of assets, personal data held by Changee88 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

All third-party service providers with whom Changee88 shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific service they are providing to Changee88.

Changee88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Data subject to ongoing legal proceedings or regulatory investigations will be retained until the conclusion of those proceedings.

Changee88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:

• Encryption: All data in transit is encrypted using TLS 1.3. All data at rest is encrypted using AES-256. KYC documents are stored in a separately encrypted document vault.
• Access controls: Access to personal data is restricted to authorised personnel on a documented need-to-know basis. Multi-factor authentication is required for all administrative access.
• Network security: The Platform is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation services.
• Vulnerability management: Regular penetration testing, security audits, and software patching procedures are maintained across all Platform components.
• Incident response: Changee88 maintains a documented data breach incident response procedure. In the event of a data breach affecting your personal data, we will notify affected players and relevant authorities in accordance with applicable notification obligations.

While Changee88 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for notifying Changee88 immediately if you suspect any unauthorised access to your Account.

Changee88 uses cookies and similar tracking technologies on the Platform for the following purposes:

You may manage your cookie preferences through your browser settings. Disabling essential or security cookies may impair your ability to use the Platform, including logging in and processing transactions. Changee88 does not deploy third-party advertising cookies or behavioural profiling technologies.

As a data subject, you have the following rights in respect of your personal data held by Changee88. You may exercise these rights at any time by contacting our Data Protection team at [email protected]:

Changee88 will respond to all verified data subject requests within 30 calendar days. In cases of complex or high-volume requests, we may extend this period by a further 60 days with prior notification. We do not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

The changee88 Platform is strictly for persons aged 21 and above. Changee88 does not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has registered an account or provided personal data to Changee88, please contact us immediately at [email protected] and we will promptly investigate and, where confirmed, delete all associated data and close the account.

The changee88 Platform is operated with infrastructure hosted across multiple geographic regions to ensure performance and availability for Malaysian players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide. As a result, your personal data may be processed in jurisdictions outside Malaysia.

Where personal data is transferred outside of Malaysia, Changee88 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses requiring equivalent data protection standards.
• Transfer to jurisdictions that provide an adequate level of data protection as recognised by applicable regulatory frameworks.
• Implementation of supplementary technical measures, including encryption, where required to protect transferred data.

The changee88 Platform may reference or integrate with third-party services necessary for its operation — including payment gateways supporting Malaysian banking infrastructure (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect), identity verification providers, and cloud infrastructure services.

These third parties operate under their own privacy policies and are not governed by this Policy. Changee88 selects third-party partners that demonstrate adequate data protection standards and requires all partners to enter into data processing agreements limiting their use of personal data to the specific service they provide to Changee88.

Changee88 does not control and is not responsible for the privacy practices of third-party service providers beyond the contractual obligations imposed upon them.

Changee88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality.

Material amendments — that is, changes that meaningfully affect your rights or the way we use your personal data — will be communicated to registered players via email to the registered Account address no fewer than 14 days prior to the amended Policy taking effect. Non-material amendments may take effect immediately upon publication on the Platform.

The version number and "Last updated" date at the top of this Policy will reflect the current version in force. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by Changee88, please contact our Data Protection team:

If you believe that your data protection rights have not been adequately addressed, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.