Privacy Policy

This Privacy Policy ("Policy") describes how xe88apk ("Platform", "we", "us", "our") collects, processes, stores, and discloses personal information about individuals ("you", "Player", "User") who register for an account, visit the xe88apk website at xe88apk.cam, use the Platform's gaming services, or otherwise interact with us.

xe88apk is committed to protecting the privacy of all users of this Platform in accordance with applicable international data protection standards. We process personal data only for the purposes described in this Policy and only for as long as those purposes require.

This Policy should be read alongside our Terms and Conditions (available at /terms-conditions) and our Responsible Gambling Policy (available at /responsible-gambling), which together govern your relationship with xe88apk.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, email address, device identifiers, and transaction history.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For this Platform, xe88apk is the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of xe88apk under contractual instruction (e.g., payment gateway providers, KYC service providers).
• "KYC" — Know Your Customer: the identity and age verification process required for account withdrawal eligibility.
• "Cookies" — small text files placed on your device by the Platform to enable functionality, remember preferences, and support analytics.
• "Sensitive Data" — a category of Personal Data requiring heightened protection, including financial account details, government identification documents, and similar information.

xe88apk operates as the Data Controller for all Personal Data collected through the Platform. As the Data Controller, we determine the purposes for which your Personal Data is processed and the means by which such processing takes place.

xe88apk holds an international online gaming licence issued by a recognised offshore regulatory authority (Curaçao eGaming). This licence imposes obligations regarding the collection and protection of player data that are incorporated into our operational practices.

All data protection enquiries may be directed to xe88apk Customer Support via Live Chat during operational hours or by email to [email protected] (plain text — not a clickable link). Requests submitted via email will be acknowledged within 48 hours.

xe88apk collects Personal Data through several channels as set out below. We collect only the minimum data necessary for each stated purpose.

4.1 Registration Data

When you create an account, we collect:

• Full legal name
• Date of birth (to verify age eligibility of 21 years or above)
• Email address
• Mobile phone number
• Account username and encrypted password
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)

4.2 KYC and Verification Data

To comply with our licensing obligations and to process withdrawal requests, we collect:

• Copies of government-issued photo identification (MyKad, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or similar)
• Proof of payment method ownership where applicable
• Facial verification images where required by our KYC provider

4.3 Financial and Transaction Data

When you make deposits or request withdrawals, we collect:

• Payment method type (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, USDT TRC20, Bitcoin)
• Transaction amounts in Malaysian Ringgit (MYR) or cryptocurrency equivalent
• Transaction reference numbers and timestamps
• Partial payment instrument identifiers (e.g., masked account numbers) for fraud prevention

4.4 Technical and Device Data

When you access the Platform, we automatically collect:

• IP address and approximate geolocation
• Browser type, version, and operating system
• Device type and screen resolution
• Session duration, pages viewed, and in-Platform navigation patterns
• Cookie identifiers and similar tracking technologies (see Section 9)

4.5 Communications Data

When you contact Customer Support or respond to promotional communications, we collect records of those interactions, including Live Chat transcripts, email correspondence, and support ticket content.

xe88apk uses the personal data we collect for the following purposes:

• Account creation and management: Processing your registration, maintaining your Account, and providing access to gaming services;
• Identity verification and KYC: Verifying your identity, age, and eligibility to use the Platform in compliance with our licensing requirements;
• Payment processing: Facilitating deposits and withdrawal requests via Malaysian payment methods and cryptocurrency channels, and reconciling transactions;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, underage access, and other prohibited conduct;
• Legal and regulatory compliance: Meeting our obligations under our international gaming licence and any applicable laws regarding record keeping and reporting;
• Customer support: Responding to queries, resolving disputes, and maintaining records of communications;
• Responsible gambling: Monitoring gameplay patterns to identify indicators of problem gambling and administering self-exclusion, deposit limits, and cool-off requests;
• Platform improvement: Analysing aggregated technical and usage data to improve Platform performance, game selection, and user experience;
• Promotional communications: Sending you information about bonuses and promotions that are relevant to your Account, where you have not opted out of marketing communications.

xe88apk processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions, including Account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with our international gaming licence conditions, including KYC, anti-money laundering checks, and mandatory record retention;
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and analytics — provided such interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

xe88apk does not sell, rent, or provide your Personal Data to third parties for their own marketing or commercial purposes. We share data only in the circumstances described below:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf under strict contractual terms. These include:

• Payment processing providers — to facilitate deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency networks;
• KYC and identity verification providers — to verify identity documents and conduct age checks prior to withdrawal processing;
• Gaming software providers — limited technical identifiers may be shared with game studio providers to facilitate gameplay sessions;
• Cybersecurity and fraud detection providers — to monitor for suspicious activity, detect duplicate accounts, and prevent money laundering.

7.2 Legal and Regulatory Disclosure

We may disclose Personal Data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required by law, pursuant to a valid legal order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of a person, or fulfil a legal obligation under our gaming licence.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xe88apk's business, Personal Data held by xe88apk may be transferred to the acquiring entity. Players will be notified of any such transfer that materially affects the processing of their data.

As a user of xe88apk, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact Customer Support via Live Chat or email at [email protected] (plain text — not a link). We will respond within 30 calendar days of receiving a valid request.

xe88apk uses cookies and similar tracking technologies to operate the Platform, improve performance, and understand how players interact with the site. Cookies are small text files stored on your device by your browser.

You may manage your cookie preferences through your browser settings. Note that disabling Essential cookies will impair or prevent access to the Platform. Disabling Functional or Analytics cookies does not affect your ability to use the Platform but may reduce the personalisation of your experience.

xe88apk retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our licensing authority and applicable legal obligations. The following retention schedules apply:

• Active Account Data: Retained for the duration of the Account's active status plus a minimum of five years following permanent Account closure;
• KYC and Identity Documents: Retained for five years from the date of Account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction Records: Retained for five years from the date of each transaction;
• Customer Support Records: Retained for three years from the date of the interaction;
• Marketing Consent Records: Retained for the duration of your marketing consent, plus two years after opt-out, as evidence of your preference history;
• Technical Logs: Retained for 12 months for security and fraud detection purposes.

When Personal Data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised or aggregated data that cannot be used to identify an individual may be retained indefinitely for statistical and analytical purposes.

xe88apk implements a comprehensive set of technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser and the Platform is encrypted using current industry standards;
• AES-256 encryption at rest: Stored Personal Data — including identity documents and payment details — is encrypted in our database infrastructure;
• Access controls: Personal Data is accessible only to authorised personnel who require it for their specific role, governed by role-based access control (RBAC) policies;
• Two-factor authentication: Internal systems holding Personal Data require multi-factor authentication for staff access;
• Regular security audits: The Platform undergoes periodic security assessments and penetration testing by independent security professionals;
• Incident response procedures: xe88apk maintains documented incident response procedures to identify, contain, and report data security incidents promptly.

As an internationally operating online gaming platform, xe88apk may transfer certain Personal Data to service providers or infrastructure hosted outside of Malaysia. Such transfers include data processed by payment gateways, KYC providers, and cloud hosting infrastructure.

Where Personal Data is transferred internationally, xe88apk ensures that appropriate safeguards are in place to protect the data at a standard equivalent to that required by our licensing authority. These safeguards include contractual data processing agreements and, where applicable, standard contractual clauses.

By registering an Account with xe88apk, you acknowledge and consent to the international transfer of your Personal Data as described in this section, subject always to the protections described above.

xe88apk is an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. The Platform is not directed at, and must not be used by, persons under 21 years of age.

If xe88apk discovers or has reason to believe that an Account has been registered by or on behalf of a person under the age of 21, that Account will be immediately and permanently closed. All associated Personal Data will be deleted except where retention is required for legal purposes such as reporting the incident.

If you are a parent or guardian and believe your minor child has registered an Account on xe88apk, please contact Customer Support immediately at [email protected] (plain text — not a clickable link) so that the Account may be closed and the data removed.

The xe88apk Platform may contain references to third-party services, payment providers, or responsible gambling support organisations. This Privacy Policy applies solely to data collected and processed by xe88apk. Where you access third-party services — such as your bank's online portal or an e-wallet application — your data is governed by that third party's own privacy policy.

xe88apk is not responsible for the privacy practices of third-party services and encourages all players to review the applicable privacy policies of any external services they use in connection with their xe88apk Account.

xe88apk reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, technology, legal requirements, or business operations. Material changes — those that significantly affect your rights or the way we process your data — will be communicated via a platform notification and/or by email to your registered address.

The revised Policy will carry an updated "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of the Platform following the publication of any update constitutes your acknowledgment of the amended Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact xe88apk through the following channels:

• Live Chat: Available via the Platform during operational hours (Malaysian Standard Time, UTC+8). This is the fastest channel for urgent data requests.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line. Requests are acknowledged within 48 hours and resolved within 30 calendar days.

When submitting a data rights request, please provide your registered username and a brief description of the request to help us process it efficiently. We may ask for additional verification to confirm your identity before actioning certain requests.