🔒 Data Protection & Privacy
Your privacy matters to us. This Privacy Policy explains exactly what personal data Cerah88 collects, why we collect it, how we use and protect it, and what rights you have over your own information. We are committed to handling your data with transparency and care.
Effective Date: 1 January 2026 | Last Reviewed: 1 January 2026All personal data is stored using AES-256 encryption at rest and TLS in transit, across all server environments.
We never sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances.
We collect only the data necessary to operate the Platform, verify your identity, and process your transactions.
You may request deletion of your personal data subject to legal retention obligations. Requests are processed within 30 days.
We retain data only for as long as necessary, or as required by our licensing obligations and AML compliance requirements.
We explain every cookie category we use — essential, functional, analytics — and how to manage your preferences.
This Privacy Policy (hereinafter referred to as "the Policy") describes the practices of Cerah88 (hereinafter referred to as "Cerah88", "we", "us", or "our") in relation to the collection, use, storage, disclosure, and protection of personal data submitted by or collected from users (hereinafter referred to as "you", "your", or "the Player") in connection with your use of the Cerah88 online casino and sports betting platform accessible at https://cerah88.cam (hereinafter referred to as "the Platform").
Cerah88 recognises the importance of protecting the privacy and personal data of all individuals who interact with the Platform. This Policy is designed to provide you with clear, transparent information about our data practices so that you can make informed decisions about the personal information you share with us.
By registering an account, accessing, or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform and contact us to close your account.
For the purposes of this Policy, the following definitions apply:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that directly or indirectly identifies a natural person, including but not limited to name, email address, date of birth, identification document number, IP address, and payment details. |
| "Processing" | Any operation performed on Personal Data, whether or not by automated means, including collection, recording, organisation, storage, retrieval, use, disclosure, and deletion. |
| "Data Controller" | Cerah88, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Cerah88 pursuant to a data processing agreement, such as payment providers and KYC verification services. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by which you signify acceptance of the processing of your Personal Data for a stated purpose. |
| "Cookie" | A small text file placed on your device by the Platform for purposes including session management, functionality, and analytics. |
Cerah88 collects personal data in the categories described below. We apply the principle of data minimisation — we collect only what is genuinely necessary for the purposes described in Section 6.
| Category | Specific Data Points |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad number or passport number, gender (where required for KYC verification) |
| Contact Data | Email address, phone number, residential address (including city and postcode) |
| Account Data | Username, encrypted password hash, account preferences, VIP tier status, login history |
| Financial Data | Payment method details (masked card numbers, e-wallet identifiers, bank account numbers), deposit amounts, withdrawal history, transaction records in MYR and cryptocurrency equivalent values |
| Gaming Data | Game session records, bet history, wagering amounts, win/loss records, bonus redemption history, sports betting market selections |
| Technical Data | IP address, device type and operating system, browser type and version, device fingerprint, session duration, referral source URL |
| Communications Data | Content of support conversations, email correspondence, feedback submissions |
| Responsible Gambling Data | Self-exclusion status, deposit limit settings, cooling-off period records, responsible gambling tool usage history |
Cerah88 collects personal data through the following channels:
Cerah88 processes personal data on one or more of the following lawful bases, depending on the purpose and type of data involved:
Cerah88 processes your personal data for the following purposes:
Cerah88 does not sell, rent, or trade your personal data to third parties. We may share your data in the following limited and controlled circumstances:
Cerah88 operates internationally and your personal data may be transferred to, stored in, and processed in countries outside Malaysia. This includes the jurisdiction in which our servers are hosted and the countries in which our third-party service providers operate.
Where personal data is transferred internationally, Cerah88 takes reasonable steps to ensure appropriate safeguards are in place, including contractual protections with data processors and the application of data transfer mechanisms consistent with recognised international privacy standards.
By using the Platform, you acknowledge and consent to the transfer of your personal data to locations outside Malaysia for the purposes described in this Policy.
Cerah88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming licence obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account and identity data (active account) | Duration of account relationship plus 5 years after account closure |
| KYC / identity verification documents | 5 years from account closure or last transaction, whichever is later |
| Financial transaction records | 7 years from transaction date (AML compliance requirement) |
| Gaming activity records | 5 years from account closure |
| Customer support communications | 3 years from last interaction |
| Technical and log data | Up to 12 months from collection |
| Marketing preferences and opt-in records | Until withdrawal of consent, plus 1 year |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is not possible, Cerah88 will ensure secure deletion through approved data destruction methods.
Cerah88 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device when you visit the Platform. They serve various purposes as described below:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Required for the Platform to function — session authentication, login state, security tokens, and language preference storage. | No — required for basic Platform operation |
| Functional | Remember your preferences such as preferred payment method, game filters, and responsible gambling tool settings. | Yes — may affect functionality |
| Analytics | Collect anonymised usage data to help us understand how players navigate the Platform and identify areas for improvement. | Yes — via cookie preference settings |
| Security & Fraud | Device fingerprinting and behavioural anomaly detection used to identify suspicious login activity and fraud attempts. | No — required for account security |
You can manage non-essential cookie preferences through your browser settings or device settings. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available through your browser's help documentation.
Subject to applicable law and our legal obligations (including AML and gaming licence requirements that may restrict certain requests), you have the following rights in relation to your personal data held by Cerah88:
Request a copy of the personal data Cerah88 holds about you and information about how it is used.
Request correction of inaccurate or incomplete personal data held in your Cerah88 account.
Request deletion of your personal data, subject to overriding legal retention obligations.
Object to processing of your data for direct marketing or certain other legitimate interest purposes.
Request that we restrict processing of your data while a rectification or objection request is being assessed.
Request a structured, machine-readable copy of the data you have directly provided to Cerah88.
To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond in full within 30 calendar days. We may request identity verification before processing any data rights request.
The Platform is strictly intended for adults aged 21 years and above. Cerah88 does not knowingly collect, process, or store personal data of individuals under the age of 21.
Cerah88 implements mandatory age verification procedures at the point of registration and as part of its ongoing KYC process to ensure that no account is held by a person under 21 years of age. Any account found to have been opened by or on behalf of a minor will be immediately suspended, all balances forfeited, and relevant data reported to appropriate authorities where required.
If you have reason to believe that personal data of a person under 21 has been submitted to the Platform, please notify us immediately at [email protected] so that we may take appropriate action.
Cerah88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
While we take all reasonable steps to protect your data, no internet-based system is entirely immune from security risk. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised account access.
The Platform may contain references to, or integrations with, third-party services such as payment providers (including Touch 'n Go eWallet, DuitNow, and FPX), game studios, and identity verification providers. Where you interact with these third-party services, you are subject to their respective privacy policies and terms of service, which are separate from and independent of this Policy.
Cerah88 is not responsible for the privacy practices of third-party service providers, including their data collection, storage, or sharing practices. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.
Cerah88 reserves the right to amend, update, or replace this Privacy Policy at any time. Material changes — such as changes to the categories of data collected, purposes of processing, or your rights — will be communicated to registered players via email notification or a prominent notice on the Platform prior to taking effect.
Non-material amendments, such as typographical corrections or minor clarifications that do not alter the substance of our data practices, may be made without specific advance notice.
Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and request account closure. The "Effective Date" at the top of this page reflects the date the current version came into force.
If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data rights described in Section 11, please contact the Cerah88 Data Support team:
Data & Privacy Enquiries
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Response Commitment
We will acknowledge all privacy requests within 5 business days and provide a full response within 30 calendar days.
General Support
Available 24 hours a day, 7 days a week via live chat or email for general account and platform queries.
Platform
https://cerah88.cam
For responsible gambling concerns or self-exclusion requests, please refer to our dedicated Responsible Gambling page for guidance and available tools.
If any part of this Privacy Policy is unclear or if you would like to exercise your data rights, our support team is available around the clock. You can also explore our FAQ page for common questions about data handling and account management.
Cerah88 — for players aged 21 and above only. Read our Responsible Gambling page for player protection resources and self-exclusion options.