Chili88 Privacy Policy — How We Protect Malaysian Players' Personal Data

Chili88 (chili88.click) takes the privacy of every member seriously. This Privacy Policy explains how Chili88 collects, uses, stores, and protects your personal data when you register and use our platform. This document has been drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and the international ISO 27001 standard.

This policy applies to all users who access the Chili88 website, register an account, make deposits using Malaysian payment methods such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks, or interact with any of the services we offer — including casino games, slots, fishing games, and Sports Betting.

Chili88 is the data controller for all personal data collected through this platform. We are fully responsible for ensuring that your data is handled in accordance with the laws and data protection principles set out in this document.

Chili88 collects various categories of personal data in order to provide services that are safe, fair, and legally compliant. The main categories of data we collect are as follows:

Data you provide directly:

• Full name as shown on your MyKad or Malaysian passport
• Identity card number (MyKad) or passport number
• Date of birth and gender
• Active Malaysian phone number
• Email address
• Bank account or e-wallet details (Touch 'n Go, GrabPay, DuitNow) for payment processing in MYR
• Information you provide when contacting our customer support team

Automatically collected data:

• IP address and country/state-level location data
• Device type, operating system, and web browser version
• Log data — login times, logout times, and in-platform activity
• Records of all games played, bets placed, and financial transactions made on Chili88
• Cookie and similar tracking technology data (see Section 6)

Chili88 uses your personal data only for legitimate and necessary purposes. The primary purposes for which your data is used are as follows:

• Account management: Creating, verifying, and maintaining your Chili88 account, including the KYC (Know Your Customer) process
• Payment processing: Processing deposits and withdrawals in MYR via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, and CIMB Clicks
• Service provision: Enables you to access and play all games on Chili88, including slots, live casino, fishing games, and Sports Betting covering the Malaysia Super League, EPL, badminton, e-sports, and more
• Security & fraud prevention: Detecting and preventing unauthorised access, financial fraud, and money laundering
• Legal compliance: Fulfilling obligations under Malaysia's PDPA 2010, anti-money laundering (AML) requirements, and directives from the relevant authorities
• Responsible gaming: Monitoring gameplay patterns to identify players who may need assistance and to ensure responsible gaming tools are functioning correctly
• Marketing (with your consent): Sending information about Chili88 bonuses, promotions, and updates, only if you have opted in to receive them
• Platform enhancements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience on Chili88

Chili88 will not use your data for any purposes beyond those stated above without first obtaining your additional consent.

Chili88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, Chili88 may share your data with the following categories of parties on a need-only basis:

• Payment processors: Malaysia-registered payment gateways (Touch 'n Go, GrabPay, DuitNow, and FPX service providers) receive the transaction data necessary to process your deposits and withdrawals
• Technology service providers: Companies providing server infrastructure, cybersecurity services, and fraud detection on behalf of Chili88 — subject to strict confidentiality agreements
• Legal authorities: Malaysian government agencies or law enforcement bodies when Chili88 is legally required to do so by law, court order, or valid legal process
• Auditing body: Independent auditors who verify Chili88's compliance with security and fairness standards — their access is strictly limited and subject to confidentiality agreements

Chili88 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, or data breaches:

• Data encryption in transit: All communication between your browser and Chili88's servers is protected with 256-bit SSL/TLS — you can verify this via the padlock icon in your browser's address bar
• Data encryption at rest: Sensitive data such as identification card numbers and financial information is stored in encrypted form using AES-256 standards
• Role-based access controls: Chili88 staff may only access data relevant to their job responsibilities, and all access is logged for audit purposes
• Two-factor authentication (2FA): Available to all member accounts as an additional layer of protection during login
• Real-time threat monitoring: Automated systems monitor Chili88's platform traffic 24/7 to detect and block suspicious activity
• Regular penetration testing: Independent cybersecurity experts conduct regular testing on Chili88's systems to identify and address any vulnerabilities

While Chili88 takes all reasonable security measures, no online system can guarantee 100% security. You are also responsible for protecting your account by using a strong password, not sharing your login credentials, and reporting any suspicious activity to us promptly.

Chili88 uses cookies and similar technologies to keep the platform running smoothly and to deliver the best possible user experience. Below are the types of cookies we use:

• Essential cookies: Required for the Chili88 platform to function — including maintaining your login session and keeping your account secure. These cookies cannot be disabled
• Performance cookies: Collecting aggregated, non-identifiable data on how players use the Chili88 platform, helping us identify areas for improvement
• Functional cookies: Saving your preferences such as language, display settings, and last played game for a more personalised experience
• Security cookies: Helps detect and prevent fraud and unauthorised access attempts on your Chili88 account

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Chili88 platform, including your ability to log in or make transactions.

Chili88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active account data: Retained for as long as your account remains active and in good standing
• Data after account closure: Personal data will be anonymised or deleted within 90 days of account closure
• Financial & transaction records: Retained for 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements
• KYC records: Retained for a minimum of 5 years after the business relationship ends, in accordance with AML/CFT requirements
• Support communication logs: Retained for 3 years to ensure service continuity and issue resolution
• Security log data: Retained for 12 months for security incident investigation purposes

Once the retention period has expired, or upon your request for data deletion (where no legal obligation prevents it), Chili88 will securely delete or anonymise your data using methods that ensure it cannot be recovered. You may request written confirmation that your data has been deleted by contacting us at support@chili88.click.

As a Chili88 member and an individual whose data is processed under Malaysia's Personal Data Protection Act 2010, you have the following rights, which you may exercise at any time:

• Right to access: You may request a copy of all personal data Chili88 holds about you. Requests will be processed within 30 days
• Right to rectification: If your data is inaccurate or incomplete, you may request that Chili88 correct it. Simple changes can be made through your account settings; changes that require verification (such as name or date of birth) may require supporting documents
• Right to withdraw consent: For data we process based on your consent (such as marketing), you may withdraw that consent at any time without affecting your core Chili88 services
• Right to object: You may object to the processing of your data for specific purposes, particularly direct marketing
• Right to receive your data in a portable format: You may request the data you have provided to Chili88 in a machine-readable format (JSON or CSV)
• Right to lodge a complaint: If you believe your privacy rights have been violated, you may file a formal complaint with the Malaysian Personal Data Protection Department

To exercise any of the rights above, please contact the Chili88 data protection team by email at support@chili88.click with the subject line "Personal Data Rights Request", specifying the particular right you wish to exercise. We will acknowledge receipt within 5 business days and complete your request within 30 days.

The Chili88 platform is strictly for individuals aged 18 and above. Chili88 does not knowingly collect personal data from anyone under the age of 18.

Should Chili88 discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take the following steps immediately:

• Closing the relevant account
• Delete all related data without delay
• Refunding any remaining balance upon completion of the investigation
• Reporting incidents to the relevant authorities where required

Chili88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform improvements. Where material amendments are made, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a prominent notification on the platform when you log in after any amendments have been made
• Sending email or SMS notifications to all active members for significant amendments

We encourage you to review this Privacy Policy periodically. Your continued use of the Chili88 platform after any amendments take effect will be considered your acceptance of the revised terms.

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Chili88, please contact us through the following channels:

• Email: support@chili88.click (subject: "Data Privacy Enquiry")
• Live chat: Available 24/7 directly within the Chili88 platform — click the chat icon in the corner of your screen

Our team will acknowledge your enquiry within 24 hours and provide a full response within 5 business days. For more complex data rights requests, resolution may take up to 30 days in accordance with Malaysia's PDPA 2010 requirements.