Privacy Policy

This Privacy Policy applies when you create or use a Cho2wahe account, visit our website, connect a Deriv account, submit a deposit or withdrawal, use Customer Support, reset your password or otherwise interact with Cho2wahe De' Change.

Third-party websites and services may have their own privacy terms. This Policy does not replace the privacy notice of Deriv, your bank, mobile-money operator or another independent third-party provider.

Personal data may be collected directly from you when you register, update your profile, submit a transaction, choose payout information, contact support or connect a third-party account.

Other information may be generated or received during payment processing, account authorization, transaction matching, fraud/security monitoring, support operations or communication with service providers.

We process personal data only where necessary and appropriate for purposes connected with operating Cho2wahe, providing services requested by users, maintaining security, complying with applicable obligations or protecting legitimate interests and rights.

• Create, authenticate and maintain your Cho2wahe account.
• Provide account recovery and security functions.
• Connect and maintain authorized Deriv functionality.
• Process, verify and track deposits and withdrawals.
• Calculate and display applicable transaction amounts and exchange rates.
• Detect duplicate requests, misuse, security threats and suspected fraud.
• Maintain transaction history and audit information.
• Provide Customer Support and resolve disputes or complaints.
• Maintain, troubleshoot and improve service reliability and security.
• Comply with lawful requests and applicable regulatory or legal obligations.

Cho2wahe must process certain transaction information in order to match payments, confirm transaction status, transfer the correct amount and send withdrawals to the intended recipient.

Payment confirmation information can include identifiers supplied by banks, mobile-money networks or payment events. This data is used for transaction processing, reconciliation, support, fraud prevention and audit purposes.

Do not provide payment information that you are not authorized to use.

If you choose to connect Deriv, Cho2wahe processes the information and authorization credentials necessary to communicate with Deriv for features you have authorized.

This can include your Deriv account ID, nickname, authorization status, authorization expiry and account or wallet information returned through the authorized integration.

Confidential authorization credentials are treated as security-sensitive information. You should never send them to another person through chat, WhatsApp, email or telephone.

Disconnecting or allowing authorization to expire may prevent Cho2wahe from accessing live Deriv functions until you reconnect.

Cho2wahe does not sell personal data to advertisers or data brokers.

We may disclose or transmit the minimum information reasonably necessary to third parties involved in operating the Service, including:

• Deriv, where you authorize account or payment-agent functionality.
• Supported banks, mobile-money operators and other payment processors where necessary to process or verify a transaction.
• Hosting, database, infrastructure and security service providers required to operate Cho2wahe.
• Transactional email providers used for account-recovery or service messages.
• Professional advisers, auditors, regulators, law-enforcement agencies or courts where disclosure is lawfully required or reasonably necessary to protect legal rights.

Service providers receiving personal data for Cho2wahe operations should receive only information appropriate to the function they perform.

Some service providers used by Cho2wahe or by services you connect to may operate infrastructure outside Tanzania. As a result, personal data may be processed or transmitted across national borders where necessary to provide the Service.

Where applicable, Cho2wahe will handle cross-border processing in accordance with applicable Tanzanian data protection requirements and any required safeguards, permissions or legal procedures.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including account operation, payment processing, transaction reconciliation, security, support, dispute handling, audit and applicable legal obligations.

Retention periods may therefore differ by category. Some transaction and security records may need to be retained after an account is closed where reasonably necessary for legal, fraud-prevention, audit, accounting or dispute purposes.

Data that is no longer required should be deleted, anonymized or otherwise handled in accordance with applicable requirements and operational backup cycles.

Cho2wahe uses technical and organizational safeguards designed to reduce the risk of unauthorized access, disclosure, alteration, misuse or loss of personal data.

Security measures may include authentication controls, restricted access to administrative functions, protection of confidential credentials, secure password-recovery processes, transaction validation and server-side processing of sensitive integrations.

No internet or electronic storage system can be guaranteed to be completely secure. Users must also protect their own credentials, devices and communication channels.

Cho2wahe may use cookies, session identifiers or similar technologies that are necessary to keep users authenticated, protect sessions, maintain security and provide core website functionality.

Where non-essential analytics or marketing technologies are introduced in the future, any additional notices or choices required by applicable law should be provided before such technologies are used.

Subject to applicable law and relevant exceptions, you may have rights concerning personal data held by Cho2wahe, including the ability to:

• Be informed about how your personal data is processed.
• Request access to personal data held about you.
• Request correction of inaccurate or outdated information.
• Request deletion or destruction where legally appropriate.
• Ask for processing to be restricted in appropriate circumstances.
• Object to certain processing.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent, without affecting processing lawfully carried out before withdrawal.
• Raise concerns about certain automated processing where applicable.
• Make a complaint concerning the processing of your personal data.

Some requests may be limited where retaining or processing particular information is required for an unresolved transaction, fraud prevention, security, legal obligation, audit or dispute.

You may contact Cho2wahe Support to request account closure or exercise an applicable deletion right.

Closing an account does not necessarily require immediate deletion of every transaction record. Information that must reasonably be retained for legal, transaction, security, fraud, accounting, regulatory or dispute purposes may remain for the applicable retention period.

Cho2wahe is intended for persons who are legally permitted to create the relevant account, enter into the relevant transactions and use the connected third-party services.

A person who is not legally eligible to use a connected financial or payment service should not attempt to access that service through Cho2wahe.

We may update this Privacy Policy to reflect changes in Cho2wahe, technologies, service providers, payment methods, security practices or applicable legal requirements.

The newest version will be published here with its updated effective date. Where appropriate, significant changes may also be communicated through the Service.

To ask a privacy question, request access or correction, request account closure or raise a concern about personal data, contact Customer Support inside Cho2wahe.

For urgent contact you may use: