How xx88 Protects Your Personal Information

Section 01

Introduction

xx88 respects the importance of privacy and recognises that casino and sports betting information can be particularly sensitive. This Privacy Policy sets out the standards applied when xx88 handles information about account holders, prospective players, website visitors and persons who communicate with customer support.

The policy covers information processed through the xx88 website, account dashboard, cashier, casino games, live dealer products, sportsbook and support services. It applies whether a player connects from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam or elsewhere.

xx88 operates under international gaming arrangements and does not claim to be regulated by a Malaysian government authority. Malaysian users remain responsible for understanding local laws concerning online gambling. The privacy practices described here are intended to support fair, secure and transparent platform operation.

Section 02

Scope and Definitions

In this Privacy Policy, “personal information” means information that identifies a person or can reasonably be connected with an identifiable person. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting and deleting personal information.

“Player” means any person who registers for or uses an xx88 account. “Services” means the online casino, live casino, sportsbook, promotions, payment facilities, responsible gambling tools and support features provided by xx88. References to “we”, “our” and “us” refer to xx88 as the operator of those Services.

Section 03

Information Collected by xx88

The categories collected depend on how a person interacts with xx88. Information may be supplied directly by a Player, generated through platform use or received from payment, identity verification and fraud-prevention providers.

Account and identity information

• Full legal name, date of birth, nationality, residential address, email address and phone number.
• Account username, encrypted credentials, preferred language and communication settings.
• Government-issued identification, proof of address, photographs and verification results used for KYC checks.

Financial and transaction information

• Deposit and withdrawal history, MYR transaction values, account balance and bonus activity.
• Limited payment references connected with DuitNow, FPX, Malaysian banks, supported eWallets, BTC or USDT.
• Source-of-funds information where enhanced verification is reasonably required.

Gaming and technical information

• Casino sessions, wagers, game outcomes, sportsbook selections, EPL or Liga Super Malaysia bets and promotional participation.
• IP address, browser type, device identifiers, operating system, login times and approximate location derived from network data.
• Messages sent to support, complaint records, security alerts and responsible gambling preferences.

Section 04

How xx88 Uses Personal Information

xx88 processes personal information for defined operational, security and compliance purposes. These uses include creating and administering accounts, authenticating logins, maintaining transaction histories and delivering casino or sports betting features selected by the Player.

Information is also used to process deposits and withdrawals, reconcile payments, perform KYC checks and identify unusual activity. xx88 may review linked devices, wagering behaviour and payment patterns to detect duplicate accounts, collusion, bonus abuse, money laundering, account takeover or other conduct prohibited by the Terms & Conditions.

Player activity may be reviewed to provide customer support, resolve complaints, correct technical errors and maintain game integrity. Where permitted, xx88 may tailor on-platform content to a Player's interests, such as displaying live football markets or game categories previously viewed. Players may manage non-essential promotional communication preferences through their account or by contacting support.

Section 05

Basis for Data Processing

Depending on the context and applicable law, xx88 relies on one or more grounds for processing. Processing may be necessary to perform the agreement with a Player, including maintaining an account and settling valid withdrawals. It may also be necessary to comply with international licensing, identity verification, record-keeping or anti-fraud obligations.

xx88 may rely on legitimate operational interests where those interests do not improperly override a Player's rights. Examples include protecting platform security, analysing service reliability, preventing misuse and handling legal claims. Consent is used where a particular form of processing requires an affirmative choice, and consent may be withdrawn for future processing where the law permits.

Section 06

Payments, KYC and Financial Records

Malaysian players may use supported services such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong. xx88 records the information required to match a transaction with an account, verify ownership of a payment method, investigate reversals and complete withdrawals.

Full card, banking or eWallet credentials may be handled by the relevant payment provider rather than stored directly by xx88. The exact information available to xx88 depends on the payment channel. Typically, xx88 receives a transaction reference, account-holder name, amount, status, date and limited identifying details.

KYC documents are reviewed to establish identity, confirm that a Player is aged 21 or above, prevent third-party payments and meet compliance duties. xx88 may request updated documents if existing records expire, account details change or an activity review identifies a reasonable need for further verification.

Section 07

Cookies, Logs and Device Information

xx88 may use cookies and similar local storage technologies to keep a Player signed in, preserve language settings, protect sessions and measure platform performance. Essential technologies support account security and cannot always be disabled without affecting core functionality.

Browser controls may be used to remove or block cookies. Doing so may prevent certain xx88 features from operating correctly, including secure login, cashier preferences and session continuity. Technical logs may be retained to diagnose errors, investigate suspicious activity and demonstrate that transactions were processed accurately.

Section 08

When Information May Be Disclosed

xx88 does not sell personal information. Information may, however, be disclosed to carefully selected service providers where necessary to deliver or protect the Services. Such providers may include payment processors, KYC vendors, hosting operators, security specialists, game platform suppliers and professional advisers.

Providers receive only the information reasonably necessary for their assigned function and are expected to apply confidentiality and security safeguards. xx88 may also disclose information where required by valid legal process, to respond to suspected fraud, to protect a person from serious harm, or in connection with a corporate restructuring subject to appropriate safeguards.

Personal information is not shared with unrelated parties merely so they can independently market their products. Aggregated or anonymised statistics that do not reasonably identify an individual may be used to understand platform performance and player trends.

Section 09

International Data Transfers

Because xx88 operates through international infrastructure, personal information may be processed outside Malaysia. Hosting, game operations, compliance reviews or support functions may take place in countries with privacy rules that differ from those applicable in Malaysia.

Where information is transferred internationally, xx88 applies contractual, technical and organisational safeguards appropriate to the nature of the information and the associated risk. These measures may include encryption, access restrictions, confidentiality duties and vendor security reviews.

Section 10

Security, Storage and Retention

xx88 uses layered safeguards designed to protect information against unauthorised access, alteration, loss and misuse. Measures include encrypted transmission, role-based access, authentication controls, system monitoring, secure backups and restricted access to KYC records. Staff and service providers are expected to handle Player information only for authorised purposes.

No internet service can guarantee absolute security. Players should use unique passwords, protect their devices and notify xx88 promptly if they suspect unauthorised account access. xx88 may temporarily restrict an account while a security concern is investigated.

Information is retained according to its purpose, applicable contractual periods and compliance requirements. Account, KYC, transaction and responsible gambling records may need to remain available after account closure to prevent fraud, honour self-exclusion, respond to disputes and meet record-keeping obligations. Once information is no longer required, xx88 will delete, anonymise or securely isolate it.

Section 11

Your Privacy Rights

Subject to applicable law, verification and relevant exemptions, a Player may request access to personal information held by xx88. A Player may also ask for incomplete or inaccurate information to be corrected, object to certain processing, request restriction, or seek deletion where continued retention is not legally or operationally required.

xx88 may request evidence of identity before acting on a privacy request. This protects account records from unauthorised disclosure. Some requests may be declined or limited where fulfilling them would conflict with KYC, anti-fraud, responsible gambling, dispute-resolution or international licensing obligations. When this occurs, xx88 will explain the reason where legally permitted.

Closing an account does not automatically erase every record. In particular, xx88 may need to preserve financial, security and self-exclusion information for a defined retention period. Players may review related account conditions in the Terms & Conditions.

Section 12

Responsible Gambling and Sensitive Records

Information concerning deposit limits, cooling-off periods, self-exclusion or support interactions is handled with additional care. xx88 uses these records to apply requested protections, identify potential risk indicators and prevent an excluded Player from reopening an account during the relevant exclusion period.

Responsible gambling information is not used to pressure a Player to resume gambling. Where a Player activates self-exclusion, xx88 may suppress promotional messages and retain enough identifying information to enforce that choice. Details about available controls appear on the Responsible Gambling page.

Section 13

Changes to This Privacy Policy

xx88 may update this Privacy Policy to reflect changes in platform functions, security practices, legal obligations or service providers. The revised version will display a new effective date. Material changes may also be communicated through the account interface or other appropriate channels.

Players should review this page periodically. Continued use of xx88 after an updated policy becomes effective signifies acknowledgement of the revised information practices, except where separate consent is required by applicable law.

Section 14

Contact Us

Privacy questions, correction requests and account-data enquiries may be directed to the xx88 support team. To protect Player records, xx88 may ask for account details and identity confirmation before discussing personal information or processing a request.

For general platform questions, players may also consult the FAQ. xx88 aims to acknowledge privacy enquiries within a reasonable period, although complex KYC, payment or security matters may require additional review.