Privacy Policy XE888 – Personal Data Protection for Malaysia Members

This Privacy Policy explains in detail how XE888, Malaysia's leading online entertainment platform operating under the domain xe888.bet, manage and protect the personal information of its members. We understand that privacy is more than a legal requirement – it is a fundamental right of every individual that must be respected.

Since xe888 began operations in 2018, we have upheld strict data protection standards, complying with Personal Data Protection Act 2010 (PDPA) Malaysia and international industry best practices. Every decision regarding data handling is made with the interests and privacy of our members as the foremost consideration.

This document is updated periodically to reflect changes in our operations, applicable legislation, or industry best practices. All updates will be published on this page along with the latest effective date.

XE888 only collects data that is genuinely necessary to deliver a safe, fair, and responsible service. We do not collect data that is excessive or irrelevant to our operational needs.

Data collected during registration:

Data collected during platform use:

Xe888 collects your personal information through the following transparent and lawful methods:

• Directly from you – during the registration process, when completing your profile, or when contacting our customer support team.
• Automatically – through cookie technology, server logs, and analytics tools used on the xe888 platform as you browse or play.
• Through identity verification (KYC) – documents such as a photo of your IC or a utility bill may be requested for age verification and fraud prevention purposes.
• From payment partners – minimum transaction data required from e-wallet providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and online banking services (DuitNow, FPX via Maybank2u or CIMB Clicks).

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any other purpose without first obtaining your additional consent.

XE888 has never sold, rented, or traded member personal data to any third party for marketing or commercial purposes. This is a core principle we have never compromised since xe888's first day of operation.

In the following limited circumstances, your data may need to be shared with certain parties:

• Payment service providers – payment gateways such as FPX and DuitNow, along with Malaysia's local e-wallet platforms, require minimum data to process your transactions securely.
• Platform technology provider – technical partners who assist in operating xe888's infrastructure are bound by strict data confidentiality agreements.
• Regulatory bodies & law enforcement agencies – where required by a court order or applicable Malaysian law, we may be obliged to disclose certain information to the relevant authorities.
• Fraud detection – with your consent, certain data may be shared with industry fraud detection systems to protect all members from suspicious activity.

XE888 continuously invests in digital security infrastructure to ensure members' personal data is protected to the highest standard achievable with current technology.

• 256-bit SSL Encryption – all communications between your device and xe888's servers are encrypted using the same standards applied by major banks in Malaysia.
• Two-factor authentication (2FA) – an additional layer of security is available for all xe888 accounts to prevent unauthorised access.
• 24/7 Monitoring – xe888's security systems monitor for suspicious activity around the clock and will respond automatically to detected threats.
• Annual independent security audit – an independent cybersecurity firm conducts a comprehensive assessment of xe888's systems every year.
• Tiered access control – only xe888 staff with specific authorisation may access member personal data, and every access is logged for audit purposes.
• Encrypted data backup – data is regularly backed up in secure data centres with full encryption to prevent loss from technical failures.

The xe888 platform uses cookies and similar technologies to enhance the user experience, analyse usage patterns, and maintain the security of your login session.

Types of cookies we use:

• Session cookies (required) – required to keep you logged in during your gaming session and to process transactions securely. These cookies cannot be disabled without affecting the platform's core functionality.
• Preference cookies (optional) – saves your language settings, display theme, and game preferences so you don't have to reconfigure them every time you log in.
• Analytics cookies (optional) – helps us understand how members use the xe888 platform so we can continuously improve it.
• Security cookies (mandatory) – helps detect and prevent fraudulent activity, and ensures every login session is legitimate.

You can manage or disable preference cookies through your web browser settings. Please note that disabling certain cookies may affect your experience on the xe888 platform.

As an xe888 member and data subject, you hold the following rights, which we are committed to facilitating:

XE888 does not retain your personal data longer than necessary for the purposes for which it was collected. The following are our data retention guidelines:

• Active account data – retained for as long as your account remains active and for a specified period after account closure for audit purposes.
• Financial transaction records – retained for 7 years after transactions, to comply with Malaysia's financial and tax legal requirements.
• KYC verification data – retained for 5 years after account closure, in line with anti-money laundering (AML) compliance requirements.
• Customer support communication logs – retained for 2 years for service quality and dispute resolution purposes.
• Anonymised analytics data – may be retained indefinitely as it has been anonymised and cannot be linked to any specific individual.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered by any party.

XE888 strictly prohibits use of this platform by individuals under 18 years of age. We take the protection of minors extremely seriously and have robust procedures in place to detect and prevent registration by those who are not eligible.

• Age verification is carried out during registration and may be reviewed again during the KYC process.
• If we confirm that an account was registered by a minor, it will be terminated immediately and all funds returned in accordance with our established procedures.
• Parents or guardians concerned about a minor in their care using the xe888 platform are encouraged to use parental control software and to contact us if they have any concerns.

XE888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our operations, evolving legal requirements, or developing industry best practices.

When material amendments are made (not merely spelling corrections or minor clarifications), we will notify you via:

• Xe888 will provide clear in-platform notification at least 30 days before any changes take effect.
• A notification email will be sent to the email address registered to your account.
• Update the "Updated" date at the top of this page.

Continued use of the xe888 platform after a policy change takes effect will be considered acceptance of the revised terms. If you do not agree with the changes, you may close your account before the effective date by contacting our customer support.

If you have any questions, concerns, or wish to exercise the privacy rights outlined in this policy, please contact the xe888 Data Protection Officer (DPO) through the following channels:

We encourage you to reach out to us directly before filing a complaint with a regulatory authority. In most cases, privacy issues can be resolved quickly and satisfactorily through direct communication with our team.