Ch160 Privacy Policy – Protecting Malaysian Players' Personal Data

Introduction

ch160 is an online gaming platform operating in Malaysia, fully committed to protecting the privacy and personal data of every player who uses our services. This Privacy Policy — drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) — explains in detail how ch160 manage your personal information from the moment you register until you decide to close your account.

We understand that trust is the foundation of the relationship between a platform and its players. Without confidence that their personal data and financial information are properly protected, no player would feel comfortable registering and playing. That is why we never treat privacy lightly — it is our top priority and the bedrock of every technical and operational decision we make at ch160.

This Privacy Policy applies to all information collected through the ch160.my website, mobile app ch160 (where available) and all interactions you have with our support team. By using the ch160, you agree to the data collection and usage practices described in this document.

1. Personal Data We Collect

ch160 follows a data minimisation principle — we only collect information that is genuinely necessary for a clear and legitimate purpose. Below are the categories of data we collect and why they are required:

Data We Do Not Collect: ch160 does not collect credit or debit card numbers directly. All financial transactions are handled through licensed third-party payment service providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX (Maybank2u, CIMB Clicks) — each with their own privacy policies and security standards compliant with Bank Negara Malaysia regulations.

We also collect data automatically as you browse the ch160 — including usage data such as pages visited, time spent and actions taken. This data is collected in aggregate form and cannot be used to identify you individually in most circumstances. It is used solely to improve the performance and user experience of our platform.

2. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. ch160 does not use player data for purposes unrelated to platform operations without the player's explicit consent. The following are the primary purposes for which data is used:

• Account Management: Creating and managing player accounts, verifying identities and processing account-related requests ch160 yours.
• Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, and handles withdrawal requests to your Malaysian bank account or e-wallet.
• Legal Compliance: Meeting the requirements of the Anti-Money Laundering Act (AMLA), the PDPA 2010 and all other applicable regulatory obligations in Malaysia.
• Platform Security: Detecting and preventing fraud, multiple account usage, system abuse and other activities that threaten the integrity of the platform ch160.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to players who may need assistance.
• Service Improvement: Analysing how players use the platform to improve its design, performance and overall experience ch160.
• Service Communications: Sending you important notifications related to your account, transactions, policy updates and relevant security information.
• Marketing (with your consent): Sending information about promotions, bonuses and new games at ch160 — only to players who have agreed to receive marketing communications.

3. Sharing Data with Third Parties

ch160 does not sell, rent or trade players' personal data to any third party for their own commercial purposes. This is an absolute commitment that will not change. However, there are limited situations in which we need to share data with certain parties to enable the platform to operate properly:

• Payment Service Providers: Information required to process deposits and withdrawals is shared with providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX-affiliated banks. Such sharing is kept to the minimum necessary solely for processing the transactions you request.
• Technical Service Providers: ch160 works with carefully selected third-party technology service providers — such as cloud infrastructure providers and analytics platforms — who may process data on our behalf. All such providers are bound by strict confidentiality agreements.
• Regulatory Authority: Where required by Malaysian law, a court order or an investigation by a competent authority, ch160 may be required to disclose players' personal data. We will notify you of any such disclosure unless prohibited from doing so by law.
• Business Transfer: In the event of a merger, acquisition or sale of assets ch160, player data may be transferred to the new entity. In such cases, players will be notified in advance and given the option to close their account if they are not comfortable with the transfer.

4. Data Storage & Security

Data security is an ongoing investment at ch160 — not a one-time expense. We implement multiple layers of technical and procedural safeguards to ensure your personal data is always protected from unauthorised access, loss, destruction or misuse.

Technical Security Measures We Implement:

• In-transit data encryption using TLS 1.3 and SSL 256-bit
• Encryption of data at rest within the ch160 server database
• Layered access controls — only authorised personnel may access player data, and every access is logged for audit purposes
• Two-factor authentication (2FA) is mandatory for all internal administrative access ch160
• Round-the-clock security monitoring and intrusion detection by automated systems and a dedicated security team
• Regular penetration testing conducted by independent third-party security firms
• Regular data backups to a secure, separate location for disaster recovery purposes

Data Retention Period: ch160 retains players' personal data for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. As a general guideline, financial transaction records are kept for 7 years in accordance with accounting and anti-money laundering legal requirements. Account data that has been inactive for more than 3 years will be moved to a secure archive and permanently deleted after 5 years of inactivity, unless there is a legal requirement to retain it.

5. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the commitment of ch160 regarding your privacy, you have the following rights over your personal data. We take these rights seriously and provide a simple process for you to exercise them.

6. Cookies & Tracking Technologies

Platform ch160 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security and analyse how the platform is used. Cookies are small text files stored on your device when you browse our website.

Types of Cookies We Use:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session management and security. These cookies cannot be disabled as they are essential to account security ch160 yours.
• Performance Cookies: Helps us understand how players use the platform — including the most frequently visited pages, page load times and technical issues. This data is collected anonymously.
• Functional Cookies: Saves your preferences — such as language, display settings and game choices — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Used to analyse aggregated platform usage patterns for the purposes of continuous improvement.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality and account security of ch160 yours. ch160 does not use third-party cookies for advertising or cross-site tracking purposes.

7. Children's Data

ch160 is an online gaming platform intended exclusively for individuals aged 18 and above. Under no circumstances do we knowingly collect or process personal data belonging to anyone under the age of 18.

Should we discover that personal data of an individual under 18 has been inadvertently collected through a fraudulent account registration, we will take the following steps immediately:

• Immediately suspending the associated account while an investigation is conducted
• Delete all personal data belonging to the underage individual from our systems ch160
• Returning any deposited funds to the original payment method
• Reporting cases to the relevant authorities where required

8. Changes to This Privacy Policy

ch160 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable legislation or improvements to the way we operate.

• Material changes will be communicated to players via in-platform notifications or email at least 14 days before they take effect.
• Minor changes that do not materially affect players' privacy rights may take effect immediately upon updating the date at the top of this page.
• The latest version of the Privacy Policy is always available on this page. Older versions may be requested from the support team ch160 for reference purposes.
• Continued use of the platform ch160 after the changes take effect will be considered acceptance of the updated privacy terms. If you do not agree, you have the right to close your account and withdraw your remaining credit balance.

9. Cross-Border Data Transfers

Player personal data ch160 processed and stored primarily in Malaysia. However, in certain situations — such as the use of cloud services or international technology providers — data may be processed outside Malaysia.

When cross-border data transfers occur, ch160 ensures that:

• Transfers are made only to countries or providers that maintain a level of data protection equivalent to or exceeding Malaysia's PDPA standards
• Comprehensive data processing agreements are signed with all data recipients outside Malaysia
• All data transfers are kept to a minimum — only data strictly necessary for the relevant service function is transferred
• Players will be notified of any material cross-border data transfers in the relevant Privacy Policy change notification

10. Contact Us About Privacy

If you have any questions, concerns or complaints regarding how ch160 handles your personal data, or if you wish to exercise any of your privacy rights as outlined in Section 5, please contact us through the following channels:

• Privacy Email: [email protected] (please include "Privacy Enquiry" in the email subject line)
• Target Response Time: Within 2 hours for general enquiries; within 21 business days for formal data rights requests
• Service Language: Bahasa Malaysia and English
• Support Operations: 24 hours a day, 7 days a week including public holidays

If you are not satisfied with our response ch160 regarding your privacy complaint after we have conducted a fair investigation, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory authority under applicable law.

For more information on the platform's terms of use, please refer to the ch160 Terms & Conditions. For responsible gaming guidance, visit the ch160 Responsible Gaming.