At XE88, your privacy is not merely a legal obligation — it is a core value we take seriously. This document transparently explains how we collect, use, store, and protect the personal data of every member on our platform in Malaysia.
Six core principles that underpin how XE88 handles your personal data on a daily basis.
All personal and financial data you share with XE88 is protected using 256-bit SSL encryption — the same security technology used by Malaysia's major banking institutions such as Maybank and CIMB. None of your information is transmitted in unencrypted form over the network.
XE88 has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes, and never will. Your information is not a business asset to be traded — it is a trust you have placed in us, and one we honour fully.
As an XE88 member, you have the right to access your personal data, request correction of inaccurate information, request a copy of your data in a readable format, and in certain circumstances, request deletion of your data from our systems. These rights can be exercised at any time through XE88 customer support.
XE88 only collects data that is genuinely necessary to provide platform services to you. We do not collect excessive or irrelevant personal information. Every type of data we collect has a clear purpose, explicitly stated in this privacy policy.
Your personal data at XE88 is not stored indefinitely. We set clear retention periods for each category of data — active account data is retained for as long as the account remains operational; data for closed accounts is kept for the period required by law and then securely deleted from our systems.
In the unlikely event of a security incident affecting your personal data at XE88 — however unlikely given our security infrastructure — we are committed to notifying you within a reasonable timeframe and taking immediate action to contain and remediate the situation.
A multi-layered data protection infrastructure that safeguards your personal information at all times.
This Privacy Policy describes the practices and commitments XE88 in managing the personal data of all members who use our platform at xe88-play.com. As a responsible online entertainment platform, XE88 takes seriously the trust you place in us when you register and use our services, and we are committed to protecting your privacy to the highest security standards.
By registering an account or using the XE88 platform, you consent to the collection and use of information as described in this policy. If you do not agree, please discontinue use of our platform. We encourage you to read this document carefully and to contact the XE88 support team if you have any questions or concerns about how we handle your data.
XE88 collects only the data that is necessary, protects it with industry-standard encryption, never sells it to anyone, and gives you full control to access, correct, or request deletion of your data. This is our commitment to every Malaysian member.
This Privacy Policy applies to all personal information collected, processed, and stored by XE88 through our platform at xe88-play.com, including the XE88 mobile app for Android and iOS, any communications between you and the XE88 team via email, live chat or WhatsApp, and all financial transactions carried out through the Malaysian payment methods we support.
This Policy does not apply to third-party websites that may be linked to or from the XE88 platform. We encourage you to read the privacy policy of each website you visit separately, as XE88 has no control over or responsibility for the content or privacy practices of those third parties.
XE88 is the data controller for all personal information collected through our platform. This means XE88 is fully responsible for ensuring your personal data is handled in accordance with this privacy policy and applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA Malaysia) and its related regulations.
XE88 collects your personal data through several means — directly when you register or use our platform, automatically through browser and device technologies, and in certain circumstances, from legitimate third-party sources. The following are the categories of data we collect:
| Data Category | Examples | How It Is Collected | Requirements |
|---|---|---|---|
| Identity Data | Full name, Malaysian identity card number, date of birth | Account registration, identity verification | Mandatory |
| Contact Data | Malaysian phone number, email address | Account registration | Mandatory |
| Financial Data | Bank account number, e-wallet details (Touch 'n Go, GrabPay, DuitNow) | Deposit & Withdrawal | Mandatory |
| Transaction Data | Deposit, withdrawal, wagering, winnings and loss history | Platform activity | Mandatory |
| Technical Data | IP address, browser type, device type, operating system, access logs | Automatically during use | Automatic |
| Usage Data | Games played, session duration, gaming preferences | Automatically during use | Automatic |
| Communication Data | Customer support conversation records, emails and feedback | Interactions with XE88 | Optional |
XE88 does not collect any information classified as "sensitive data" under Malaysia's Personal Data Protection Act, including health data, religious beliefs, political views or biometric information, except in very specific circumstances and only with your explicit prior consent.
Every use of personal data by XE88 has a lawful basis and a clear purpose. We do not process your data for purposes unrelated to the provision of the XE88 platform services to you. The following are the primary purposes for which data is used:
XE88 may send you promotional information and special offers via email or in-app notifications. You can opt out of marketing communications at any time through your account settings or by contacting XE88 customer support — without affecting the core services you receive.
XE88 does not sell, rent, or disclose members' personal data to any third party for their own marketing purposes. This is an absolute commitment we do not compromise on. However, in the course of operating the platform, XE88 may need to share certain data with the following categories of third parties, solely for the purposes stated:
All third parties that receive data from XE88 are contractually bound to use it solely for the specified purpose and may not disclose or use it for any other reason. XE88 carefully vets its third-party providers and ensures they maintain data protection standards equal to or higher than those we hold ourselves to.
Platform XE88 uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how members use our platform. Cookies are small text files stored on your device when you visit the XE88 website.
Types of cookies used by XE88:
You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality or your experience on the XE88 platform. For the XE88 mobile app, privacy settings can be managed through your Android or iOS device settings.
XE88 continually invests in its security infrastructure and practices to ensure your personal data is always protected to the highest standard. The following are the concrete security measures we have in place:
While XE88 invests heavily in platform security, the safety of your account also depends on your own actions. Use a strong, unique password for your XE88 account, enable 2FA, never share your login credentials with anyone, and report any suspected unauthorised access to your account to XE88 support immediately.
As a data subject under Malaysia's Personal Data Protection Act (PDPA 2010), you have certain rights regarding the personal data held by XE88. We fully respect and facilitate the exercise of these rights:
All of these rights can be exercised by contacting the XE88 support team at any time.
You have the right to know what personal data XE88 holds about you and to obtain a copy of it. Data access requests will be processed within 21 business days from the date a complete request is received.
If your personal data in XE88's systems is inaccurate, incomplete, or outdated, you have the right to request that we correct it. We will process correction requests promptly through XE88 customer support.
In certain circumstances, you may request that XE88 delete your personal data. This right may be limited by our legal obligations to retain specific records — for example, financial transaction records required for AML compliance and tax regulations.
You may object to the processing of your personal data for direct marketing or promotional communications at any time. Once XE88 receives your objection, processing for those purposes will cease immediately.
You have the right to receive the personal data you have provided to XE88 in a machine-readable format (such as CSV or JSON), so that you may transfer it to another service provider should you wish to do so.
In certain circumstances — such as when you dispute the accuracy of your data or have objected to its processing — you may request that XE88 restrict the processing of your data while the matter is being resolved.
To exercise any of the rights above, please contact the XE88 support team by email at support@xe88-play.com with the subject line "Data Privacy Rights Request", or via the in-platform live chat. Please include your full name and registered phone number for identity verification. XE88 will respond within 21 business days from the date of receipt of a complete request.
Platform XE88 is intended for users aged 21 and above only. We do not knowingly collect, process or store any personal data from individuals under the age of 21. The XE88 registration process includes an age verification step, and any account suspected of being opened by an underage individual will be suspended immediately pending investigation.
Should XE88 discover that personal data belonging to an underage individual has been collected without proper age verification, we will take immediate steps to delete that data, terminate the account in question, and refund any remaining balance. If you are a parent or guardian who believes your underage child has registered an account with XE88, please contact our customer support team without delay.
Age Warning: The XE88 platform contains gambling content suitable only for adults aged 21 and above. Parents and guardians are encouraged to use appropriate parental control software to prevent minors from accessing this platform.
XE88 retains your personal data only for as long as necessary for the purposes stated in this privacy policy, or as required by applicable laws and regulations. Our data retention policy is as follows:
Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymised in a manner that can no longer be linked back to you as an individual.
XE88 reserves the right to update or amend this Privacy Policy from time to time in response to changes in our business practices, new legal requirements, or improvements to how we protect your personal data. Any amendments will be published on this page with a revised "Updated" date.
For amendments that involve material changes to how we collect or use your personal data, XE88 will endeavour to notify you via your registered email or an in-platform notification before the changes take effect, giving you sufficient time to review them.
Continued use of the platform XE88 after any amendment to this privacy policy takes effect will be considered your acceptance of the revised terms. If you do not agree with the changes made, you have the right to close your XE88 account and request deletion of data as permitted under applicable law.
If you have any questions, concerns, or complaints about how XE88 handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:
The XE88 support team handling data privacy enquiries consists of staff trained in data protection policies, committed to providing clear, transparent, and helpful responses in Bahasa Melayu to all our Malaysian members. There is no need to worry that your question is too trivial — we take every privacy-related enquiry seriously.
This Privacy Policy was last updated on 1 January 2026 (Version 3.1). The contents of this document are comprehensive in nature and do not constitute legal advice. If you have specific legal concerns regarding data privacy, please consult a qualified legal professional.
Answers to the most frequently asked questions from XE88 members about privacy and personal data protection.
This Privacy Policy should be read together with XE88's Terms & Conditions and our Responsible Gaming Policy. All three documents together form the complete agreement between you as a member and XE88. We encourage you to read all of these documents for a thorough understanding of your rights and responsibilities as a user of the XE88 platform.