Privacy Policy

Last updated: 20 October 2026

1. About this policy

This Privacy Policy explains how CH Global Empire, trading as CHVEX ("CHVEX", "we", "us"), collects, uses, discloses and protects personal data when you visit https://chvex.com or use our web hosting services. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA). We are the data user for the personal data described here.

2. Personal data we collect

  • Account data: your name, email address, postal address, country and any company name you provide, plus your login credentials (passwords are stored in hashed form).
  • Billing data: orders, invoices, payment status and payment references. Payments are handled by Bayarcash and PayPal; we do not store card numbers.
  • Technical data: IP address, browser type, device information, timestamps and server and security logs created when you use the website, client area or services.
  • Support data: the contents of your support tickets and any attachments you send.
  • Hosted content: files and data you store on your hosting account. We process this only to provide the service.

3. Why we use your data

  • to create and manage your account and provide, bill and renew the services;
  • to process payments and keep financial records;
  • to answer support tickets and send service notices, invoices and reminders;
  • to secure the platform, prevent fraud and abuse, and enforce our policies;
  • to meet legal and accounting obligations.

We do not sell your personal data.

4. Consent and legal basis

By registering an account, placing an order or submitting data to us, you consent to us processing your personal data for these purposes. Some processing is necessary to perform our contract with you or to comply with law. You may withdraw consent as described in section 10, but we may then be unable to continue providing services.

5. Disclosure to third parties

We share personal data only as needed with these service providers:

  • our upstream hosting provider, MDMHost, which hosts the services on cPanel/WHM infrastructure;
  • Cloudflare, for CDN and security services;
  • Bayarcash (MYR payments) and PayPal (USD payments), for processing payments;
  • Brevo, for sending transactional emails such as invoices and notices.

We may also disclose data to professional advisers, or to authorities where required by law or to protect our rights. Each provider handles data under its own privacy terms.

6. Transfers outside Malaysia

Some of these providers operate or store data outside Malaysia. By using our services you consent to your personal data being transferred to and processed in other countries. We take reasonable steps to ensure that providers handle data with appropriate care, but we cannot control their systems directly.

7. Retention

We keep personal data only as long as needed for the purposes above. Account and support data are kept while your account is active and for a reasonable period afterwards. Billing records are kept for as long as accounting and legal requirements demand. Technical logs are kept for a limited period. When data is no longer needed, we delete or anonymise it.

8. Security

We use reasonable technical and organisational measures to protect personal data, including hashed passwords, encrypted connections (HTTPS), access controls and the security tools of our providers. No system is completely secure, and we cannot guarantee absolute security. Please protect your password and tell us at once if you suspect a breach.

9. Cookies

We use session and essential cookies that keep you logged in, protect forms and keep the site working. Cloudflare may also set cookies or process requests for security and performance, for example to detect bots and manage traffic. We do not use cookies for advertising. You can block cookies in your browser, but the client area may not work properly without essential cookies.

10. Your rights

Under the PDPA you may ask to access your personal data, ask us to correct inaccurate or outdated data, and withdraw your consent to processing (subject to legal and contractual limits). You may also limit how we process your data in some cases. To make a request, open a support ticket in the client area at https://chvex.com or write to us at the address below. We may need to verify your identity first and may charge a reasonable fee where the law allows. We aim to respond within the period required by law.

11. Children

Our services are not intended for people under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date shows the current version, and we will notify you of material changes by email or in the client area.

13. Contact

CHVEX is operated by CH Global Empire, Lorong Shahbandar 10, Bertam Perdana 3, 13200 Kepala Batas, Penang, Malaysia. The quickest way to reach us is a support ticket in the client area at https://chvex.com.

These terms were prepared for CHVEX by CH Global Empire.