Privacy Policy

1 Introduction

Chealsea88 ("we", "us", "the Company") operates the online casino and sports betting platform accessible at chealsea88.cam (the "Platform"). We are committed to handling the personal data of our users — including registered Players, prospective members, and visitors to our website — with care, transparency, and respect.

This Privacy Policy ("Policy") describes in full the personal data we collect, the lawful bases on which we process it, the purposes for which it is used, the circumstances under which it may be disclosed to third parties, how long we keep it, and the rights you hold in relation to your data.

This Policy applies to all personal data processed by Chealsea88 in connection with the Platform and our services — including account registration, Know Your Customer (KYC) verification, deposit and withdrawal processing via Malaysian payment providers (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and USDT TRC20), promotional communications, and customer support interactions.

2 Definitions

For the purpose of this Policy, the following terms carry the meanings defined below:

• "Personal Data" Any information relating to an identified or identifiable natural person — including name, contact details, identification documents, IP address, financial transaction data, and behavioural data linked to a specific individual.
• "Processing" Any operation performed on personal data, including collection, storage, organisation, retrieval, use, disclosure, and deletion.
• "Data Controller" Chealsea88, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" A third party that processes personal data on behalf of Chealsea88 under a binding data processing agreement (e.g., payment service providers, identity verification partners, cloud hosting providers).
• "Player" / "User" Any individual who has registered an account on the Chealsea88 platform or who uses the Platform in any capacity.
• "KYC" Know Your Customer — the identity verification process conducted to confirm a Player's age, identity, and compliance with eligibility requirements.
• "Cookies" Small data files stored on a Player's device by their web browser that enable session management, preference storage, and analytics.

3 Personal Data We Collect

Chealsea88 collects personal data across several categories. We collect only data that is necessary and proportionate to the specific purpose for which it is gathered.

3.1 Identity & Contact Data

3.2 Financial & Payment Data

3.3 Technical & Usage Data

3.4 Communications Data

Records of communications between you and our support team via live chat or email, including the content of enquiries, complaints, and our responses.

4 How We Collect Personal Data

Chealsea88 collects personal data through the following primary channels:

• Direct Submission: When you register an account, complete KYC verification, submit a support enquiry, or update your profile settings, you voluntarily provide personal data to us.
• Automated Technical Collection: When you browse or use the Platform, our servers automatically log technical data including your IP address, device type, browser version, pages visited, and session duration via server logs and cookies.
• Payment Processor Integration: When you deposit or withdraw funds using Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, or cryptocurrency), the relevant payment processor shares transaction metadata with us necessary to reconcile your account balance.
• Third-Party Identity Verification: Where we engage a regulated KYC verification partner to authenticate your identity documents, that partner may share verification results (confirmed / unconfirmed) and any flagged data with us under a data processing agreement.
• Referral Sources: If you arrive on the Platform via an affiliate referral link, we may collect the referring source identifier to process any applicable referral reward.

5 Purposes of Processing & Legal Bases

Chealsea88 processes personal data only where there is a lawful basis for doing so. The table below summarises the primary purposes for which we process your data and the corresponding legal basis for each.

6 Data Sharing & Disclosure

Chealsea88 does not sell, rent, or trade personal data. We do not share personal data with third parties except in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Service Providers (Data Processors). We engage trusted third-party service providers to assist in the delivery of our services. These include:

• Payment processing providers (including operators of Touch 'n Go eWallet, Boost, GrabPay, FPX, and DuitNow infrastructure);
• KYC and identity verification platforms operating under regulatory compliance obligations;
• Cloud infrastructure and hosting providers responsible for server operations;
• Analytics and fraud-detection services that process technical data to protect the integrity of the Platform.

All Data Processors engaged by Chealsea88 are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide and prohibit further disclosure.

6.2 Legal and Regulatory Disclosures. We may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a lawful court order, or to comply with anti-money laundering, counter-terrorism financing, or other legal obligations.

6.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of Chealsea88's business, personal data may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, we will ensure that the acquirer is bound by data protection obligations at least as protective as those set out in this Policy, and we will notify affected Players.

6.4 Consent-Based Sharing. We will not share your personal data with any other third party without your explicit prior consent.

7 Data Retention

Chealsea88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to satisfy legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

8 Data Security

Chealsea88 implements technical and organisational security measures proportionate to the risk presented by the personal data we hold. These measures include:

• Encryption: All data transmitted between your device and Chealsea88 servers is protected by 256-bit SSL/TLS encryption. Data at rest on our servers is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is authenticated via multi-factor authentication and role-based permissions. Access logs are reviewed regularly.
• Intrusion Detection: Our infrastructure operates behind enterprise-grade firewalls and is monitored 24/7 by automated intrusion detection systems. Anomalous activity triggers immediate alerts and investigation.
• Penetration Testing: The Platform undergoes scheduled independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: Chealsea88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Players and relevant authorities within the timeframes required by applicable law.

9 Cookies & Tracking Technologies

The Chealsea88 platform uses cookies and similar tracking technologies to deliver core functionality, maintain your session, improve your experience, and analyse platform performance.

9.1 Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. They enable session authentication, security token validation, and the operation of core gaming features. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options so you do not need to re-enter them on each visit.
• Analytics Cookies: Help us understand how Players use the Platform — which pages are visited most, how long sessions last, and which features are most popular. This data is aggregated and does not identify individual users. We use analytics data to improve the Platform's performance and content.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and other security threats.

9.2 Cookie Management. You may control non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the Platform. Your browser documentation provides specific guidance on managing cookies for your browser of choice.

10 International Data Transfers

In providing our services, Chealsea88 may process or store personal data on servers or through service providers located outside Malaysia. Where personal data is transferred internationally — for example, to cloud infrastructure providers or game content suppliers — we ensure that appropriate safeguards are in place to protect your data.

Such safeguards include contractual data processing agreements that incorporate standard data protection clauses, restrictions on data use to the agreed purposes only, and requirements for the recipient to implement security measures equivalent to those described in Section 8 of this Policy.

We will not transfer your personal data to any jurisdiction that we do not consider to have adequate data protection standards unless appropriate contractual safeguards are in place.

11 Your Data Rights

You have the following rights in relation to the personal data Chealsea88 holds about you. We will respond to valid requests within 30 calendar days of receipt. Where a request is particularly complex or we receive multiple simultaneous requests, we may extend this period by a further 30 days, in which case we will notify you.

To exercise any of the above rights, contact our support team via live chat or by email at [email protected] (plain text — not a clickable link). We may request proof of identity before processing a request to protect against unauthorised disclosures.

12 Minors

The Chealsea88 platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect or process personal data relating to persons under the age of 21. Our account registration process includes age verification steps designed to identify and prevent underage registration.

If Chealsea88 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have accessed the Platform using your account or have otherwise provided personal data to us, please contact our support team immediately.

13 Changes to This Policy

Chealsea88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the scope of our services. Where changes are material — meaning they alter your rights or how your data is used in a meaningful way — we will provide at least 14 days' advance notice by displaying a prominent notice on the Platform prior to the effective date of the change.

The most current version of this Policy, along with its effective date and version number, is always accessible at chealsea88.cam/privacy-policy. We encourage you to review this page periodically.

Your continued use of the Platform after the effective date of a Policy update constitutes your acknowledgement of the revised Policy. If you do not accept the changes, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or would like to raise a concern about how your personal data has been handled, please contact Chealsea88 through the following channels:

We aim to resolve all privacy-related enquiries and data subject requests within 30 calendar days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.