chisa Privacy Policy

This page describes what we collect when you use chisa and how we keep that data protected. When you create an account on our chisa platform, deposit funds via DANA, e-wallet, mobile banking, local payment, or a bank account, or join a live-dealer table, we collect information necessary to verify your identity, process your transactions, and deliver our service. We do not sell your data to third parties, and we do not use it for marketing beyond your chisa account.

Our chisa privacy practices are designed around one principle: your data belongs to you. We collect only what we need, we store it securely, and we share it only with processors who help us run the platform or with authorities if required by law. This policy explains what we collect, how we use it, and what rights you have.

If you have questions about how we handle your data on chisa, contact our support team using the link in your account.

What We Collect on chisa

We collect data in three categories when you use chisa:

• Account Information: Your email, password, full name, date of birth, and phone number. We collect this when you register on chisa.
• Identity and Address: A photo of your government-issued ID and a proof of address (utility bill, bank statement, or government document). We collect this before your first withdrawal on chisa.
• Payment Information: Details about your DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account (mobile banking, local payment, online payment, e-wallet) when you link it to chisa. We do not store your full card numbers or wallet passwords—only the account identifier and transaction history.
• Transaction History: Records of every deposit, withdrawal, and bet placed on chisa. We keep this for compliance and dispute resolution.
• Device and Usage Data: Your IP address, browser type, device type, and which games or tables you access on chisa. We use this to detect fraud and improve our platform.

We do not collect data beyond what is necessary to operate chisa. We do not ask for your mother's maiden name, your social security number, or any information unrelated to account verification and payment processing.

How We Use Your Data on chisa

We use the data we collect on chisa for these purposes:

• Account Verification: We verify your identity against your ID and address to comply with anti-money-laundering regulations and to protect your account from unauthorized access.
• Payment Processing: We use your payment details to process deposits and withdrawals through mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank virtual accounts.
• Fraud Detection: We analyze your IP address, device, and transaction patterns to detect suspicious activity and protect your chisa account.
• Compliance: We retain transaction records to comply with financial regulations and to respond to legal requests from authorities.
• Platform Improvement: We analyze usage data (which games you play, which tables you join) to improve our chisa platform and fix technical issues.

We do not use your data to send you marketing emails or promotional messages unless you explicitly opt in. We do not sell your data to advertisers or data brokers.

Third-Party Processors and Data Sharing

We use third-party processors to help operate chisa. These processors handle specific functions but do not own your data:

• Payment Processors: online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and the banks (mobile banking, local payment, online payment, e-wallet) receive your payment details to process deposits and withdrawals. They are bound by their own privacy policies and financial regulations.
• Identity Verification Services: We may use third-party services to verify your ID and address. These services receive your ID photo and address but do not retain it after verification.
• Cloud Hosting: Our chisa servers may be hosted by cloud providers in jurisdictions outside Indonesia. Your data is encrypted in transit and at rest.
• Legal Authorities: If we receive a court order or legal request from authorities in your jurisdiction or ours, we may disclose your data as required by law.

We do not share your data with marketing companies, data brokers, or any third party not listed above.

How Long We Keep Your Data

We retain your data on chisa for as long as your account is active and for a period after closure to comply with financial regulations. Specifically:

• Account Information: Kept while your account is active. After closure, we retain it for seven years to comply with anti-money-laundering regulations.
• Transaction History: Kept for seven years from the date of each transaction.
• Identity Documents: Kept for seven years after your last transaction on chisa.
• Device and Usage Data: Kept for one year, then deleted.

After the retention period, we delete your data or anonymize it so it cannot be linked back to you.

Your Rights Regarding Your Data on chisa

You have the following rights regarding your data on chisa:

• Access: You can request a copy of all data we hold about you on chisa. Contact our support team to submit this request.
• Correction: If your personal information on chisa is inaccurate, you can request that we correct it.
• Deletion: You can request deletion of your chisa account and associated data, subject to our legal retention obligations.
• Portability: You can request that we provide your data in a portable format so you can transfer it to another service.

To exercise any of these rights, contact our chisa support team. We will respond within a reasonable timeframe, typically within 30 days.

Encryption

We encrypt your data in transit (using HTTPS) and at rest (on our servers). This protects your information from unauthorized access.

Access Control

Only chisa employees who need your data to perform their job have access to it. We use role-based access controls.

Breach Notification

If we discover a data breach affecting your chisa account, we will notify you by email within a reasonable timeframe.

Cookies and Tracking on chisa

We use cookies on chisa to remember your login session, store your language preference, and track which games you play. Cookies are small text files stored on your device. You can disable cookies in your browser settings, but this may affect your ability to use chisa.

We do not use cookies to track you across other websites. Our cookies are used only on chisa and are deleted when you log out or close your browser (for session cookies) or after a set period (for persistent cookies).

Jurisdiction and Data Location

Our chisa servers may be located in jurisdictions outside Indonesia. Your data may be transferred to and stored in these jurisdictions. By using chisa, you consent to this transfer. We ensure that data processors in other jurisdictions comply with privacy standards equivalent to Indonesian law.

If you are in a jurisdiction with specific data protection laws (such as the European Union's GDPR), we comply with those laws to the extent applicable to our chisa service.

Contact Us About Your Data on chisa

If you have questions about how we handle your data on chisa, or if you want to exercise your rights (access, correction, deletion, portability), contact our support team through the link in your chisa account. We will respond within a reasonable timeframe.

If you believe we have violated your privacy rights on chisa, you also have the right to lodge a complaint with your local data protection authority.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our chisa platform or applicable law. We will notify you of material changes by email or by posting a notice on chisa. Your continued use of chisa after such changes constitutes your acceptance of the updated policy.

This privacy policy was last updated on the date shown at the bottom of this page. If you have questions about the current version, contact our support team.