Privacy Policy

1. Introduction

This Privacy Policy applies to all personal information collected by chiq28 through our website, mobile applications, and related services (collectively, the "Platform"). We recognize the importance of protecting the privacy of our users, particularly in the context of online gaming and financial transactions. This policy outlines our practices regarding data collection, usage, disclosure, and security measures implemented to protect your information in compliance with applicable data protection laws and international best practices.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a chiq28 account, we collect personal information necessary to provide our services and comply with legal obligations. This includes:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (KTP Nasional for Indonesian residents or passport number for international users).
• Contact Information: Email address, mobile phone number, residential address including street, city, postal code, and country (Indonesia).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details (bank name, account number, account holder name) for deposits and withdrawals, e-wallet identifiers (OVO, DANA, GoPay account information), and transaction history.
• Verification Documents: Copies of government-issued photo identification, proof of address documents (utility bills, bank statements), and selfie photographs for Know Your Customer (KYC) compliance.

2.2 Information Collected Automatically

When you access and use the chiq28 Platform, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, computer), operating system and version, browser type and version, device identifiers, and screen resolution.
• Connection Data: IP address, internet service provider, connection timestamps, and geographic location data (country, city, derived from IP address).
• Usage Data: Pages visited, features accessed, games played, bets placed, time spent on different sections of the Platform, click patterns, and navigation paths.
• Gaming Activity: Bet history including game types, stake amounts, odds, outcomes, win/loss records, bonus usage, and account balance changes.
• Communication Records: Records of your interactions with our customer support team, including live chat transcripts, email correspondence, and WhatsApp messages.

2.3 Cookies and Tracking Technologies

chiq28 uses cookies, web beacons, and similar tracking technologies to enhance your experience on our Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze usage patterns. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period). You can control cookie settings through your browser, but disabling cookies may limit certain Platform features. For detailed information about our cookie usage, including types of cookies, purposes, and management options, please refer to our Cookie Policy.

3. How We Use Your Information

chiq28 processes your personal information for the following legitimate purposes:

• Account Management: Creating and maintaining your user account, verifying your identity, authenticating login attempts, and managing account settings and preferences.
• Service Delivery: Processing deposits and withdrawals, enabling you to place bets and play games, calculating and crediting winnings, applying bonuses and promotions, and maintaining accurate transaction records.
• Legal and Regulatory Compliance: Verifying your age (21+ requirement), conducting KYC checks to prevent fraud and money laundering, complying with anti-money laundering (AML) regulations, responding to legal requests from authorities, and maintaining required records for regulatory audits.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, identifying suspicious betting patterns, protecting against unauthorized account access, monitoring for terms violations, and investigating potential abuse of bonuses or platform features.
• Customer Support: Responding to your inquiries, resolving technical issues, addressing complaints, providing Indonesian-speaking assistance, and improving support quality through analysis of common issues.
• Marketing and Communications: Sending promotional offers and bonus notifications (with your consent), providing important account updates, delivering newsletters and platform announcements, and personalizing marketing content based on your gaming preferences.
• Platform Improvement: Analyzing usage patterns to enhance user experience, identifying popular games and features, optimizing Platform performance, developing new services, and conducting research to improve betting odds and game offerings.
• Responsible Gaming: Monitoring betting behavior for signs of problem gambling, implementing deposit limits and self-exclusion requests, providing tools to help users maintain control, and fulfilling our duty of care to vulnerable players.

4. Legal Basis for Processing

Under applicable data protection laws, chiq28 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our agreement with you when you use chiq28 services, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing necessary to comply with legal requirements such as age verification, KYC procedures, AML regulations, tax reporting, and responses to lawful government requests.
• Legitimate Interests: Processing for our legitimate business interests in preventing fraud, ensuring platform security, improving services, and conducting analytics, provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent, such as receiving marketing communications or using certain optional features. You may withdraw consent at any time through your account settings.

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

chiq28 may share your information with trusted third-party service providers who assist in operating our Platform and delivering services. These providers include:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) that process your deposits and withdrawals.
• Game Providers: Software companies such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Playtech, and Spribe that power our casino games, slots, and live dealer tables.
• Verification Services: Identity verification and KYC compliance providers that authenticate your documents and prevent fraud.
• Technology Partners: Cloud hosting providers, content delivery networks (CDNs), cybersecurity firms, and IT infrastructure companies that support Platform operations.
• Customer Service Tools: Live chat software providers and communication platforms that enable our Indonesian-speaking support team to assist you efficiently.

All third-party service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection standards. We conduct due diligence to ensure partners maintain appropriate security measures.

5.2 Legal Requirements and Protection

chiq28 may disclose your information when legally required or necessary to protect our rights and interests:

• To comply with court orders, subpoenas, legal processes, or lawful requests from government authorities and regulatory bodies.
• To enforce our Terms & Conditions and investigate violations, including suspected fraud, bonus abuse, or prohibited activities.
• To protect the safety, rights, and property of chiq28, our users, or the public, including in cases of emergency or imminent harm.
• In connection with a merger, acquisition, asset sale, or bankruptcy proceeding, where your information may be transferred to successor entities (you will be notified of such changes).

5.3 No Third-Party Marketing

chiq28 does not sell, rent, or trade your personal information to third parties for their direct marketing purposes. Your data is used exclusively to provide and improve our services, comply with legal obligations, and communicate with you about chiq28 offerings (with your consent for marketing communications).

6. Data Security Measures

chiq28 implements robust technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL (Secure Socket Layer) encryption, the same military-grade security used by major Indonesian banks for online banking.
• Secure Storage: Personal information is stored on secure servers with restricted access, located in data centers with physical security measures including surveillance, access controls, and environmental protections.
• Access Controls: Only authorized chiq28 personnel with legitimate business needs can access personal data, and all access is logged and monitored for security purposes.
• Password Protection: User passwords are hashed using advanced cryptographic algorithms and are never stored in plain text. Even chiq28 staff cannot view your actual password.
• Regular Security Audits: We conduct periodic security assessments, vulnerability testing, and penetration testing to identify and address potential weaknesses in our systems.
• Fraud Monitoring: Automated systems continuously monitor for suspicious activity, unusual login patterns, and potential security threats, with immediate alerts for investigation.

Despite these measures, no method of electronic transmission or storage is 100% secure. While we strive to protect your data using industry best practices, we cannot guarantee absolute security. You also play a role in security by maintaining strong passwords, not sharing login credentials, and promptly notifying us of any suspected unauthorized account access.

7. Data Retention

chiq28 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Active Accounts: While your account remains active, we retain all necessary information to provide services and maintain accurate records.
• Closed Accounts: After voluntary account closure, we retain certain information for up to seven years to comply with legal obligations such as tax reporting, AML regulations, and potential dispute resolution.
• Transaction Records: Financial transaction history, betting records, and related data are retained for seven years to meet regulatory requirements and support audits.
• KYC Documents: Verification documents are retained for the duration required by anti-money laundering and regulatory compliance obligations, typically seven years after account closure.
• Marketing Communications: If you consent to receive marketing, we retain your contact information until you withdraw consent or your account is closed, after which we promptly remove you from marketing lists.

When retention periods expire, we securely delete or anonymize personal information so it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and platform improvement without privacy implications.

8. Your Privacy Rights

As a chiq28 user, you have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you, including details about how it is processed and with whom it is shared.
• Right to Rectification: If your information is inaccurate or incomplete, you can request corrections. You can update certain information directly through your account settings.
• Right to Erasure: You may request deletion of your personal information, subject to our legal obligations to retain certain records for compliance and regulatory purposes.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances, such as while disputing accuracy or contesting lawful processing grounds.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we have compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] (plain text display only - not clickable) or through the contact methods specified in the Contact Information section below. We will respond to your request within 30 days and may require verification of your identity before processing requests to protect your privacy.

9. International Data Transfers

chiq28 primarily operates within Indonesia and processes data within Indonesian territory. However, some of our service providers and technology partners may be located outside Indonesia, which may involve transferring your data internationally. When we transfer data across borders, we ensure appropriate safeguards are in place, such as standard contractual clauses, adequacy decisions, or other legally approved transfer mechanisms. We take reasonable steps to ensure that international transfers comply with applicable data protection laws and that your information receives adequate protection regardless of location.

10. Children's Privacy

chiq28 services are strictly for adults aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. Our registration process requires users to confirm they meet the minimum age requirement, and we conduct age verification through KYC procedures. If we become aware that we have inadvertently collected information from a person under 21, we will take immediate steps to delete such information and close the associated account. Parents or guardians who believe their child has provided information to chiq28 should contact us immediately so we can take appropriate action.

11. Marketing Communications

With your consent, chiq28 may send you promotional emails, SMS messages, and notifications about bonuses, special offers, new games, and platform updates. You can control your marketing preferences through your account settings or by using the unsubscribe link included in every marketing email. Opting out of marketing communications will not affect essential service messages such as account notifications, security alerts, transaction confirmations, and important policy changes, which we may send regardless of marketing preferences as they are necessary for account operation and legal compliance.

12. Third-Party Links

The chiq28 Platform may contain links to third-party websites or services, such as game providers' own platforms or payment processor sites. This Privacy Policy applies only to information collected by chiq28. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their privacy policies before providing any personal information. Clicking on third-party links or enabling third-party integrations is at your own risk, and you should exercise caution when sharing information outside the chiq28 Platform.

13. Changes to This Privacy Policy

chiq28 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you via email to your registered address and display a prominent notice on the Platform. The "Last Updated" date at the top of this policy indicates when the most recent revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of chiq28 services after policy changes constitutes acceptance of the updated terms.

14. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

• Email: [email protected] (plain text display only - not clickable)
• Data Protection Officer: Available via email for privacy-specific inquiries
• Live Chat: 24/7 Indonesian-speaking support available through the chiq28 Platform
• WhatsApp Support: Contact our support team for assistance with privacy matters

We take all privacy inquiries seriously and will respond as promptly as possible, typically within 48 hours for routine questions and within 30 days for formal privacy rights requests requiring investigation or data compilation. Your privacy and trust are essential to chiq28, and we are committed to addressing your concerns with the attention and professionalism they deserve.