Privacy Policy xe8 – Personal Data Protection for Malaysia Members

Xe8 is a trusted online gaming platform operating in Malaysia. We understand that your personal data is a trust we hold with full responsibility. This Privacy Policy is designed to ensure you always know what happens with your information — from the moment you register an account to every time you log in and play.

By registering or using the xe8 platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please stop using the platform and contact our support team for next steps. We encourage you to read this document carefully so that your rights as an xe8 user are fully understood.

Xe8 only collects information that is strictly necessary to operate our services properly. We do not collect more than what is needed, and every piece of data collected has a clear purpose. The following are the categories of information we collect:

• Personal Identification Information: Full name, date of birth, identification card number (MyKad), mobile phone number, and email address provided during account registration.
• Financial Information: Bank account number, bank name, and digital wallet details (such as Touch 'n Go, Boost, GrabPay) used for deposits and withdrawals. We do not store credit card information directly.
• Location & Device Information: IP address, device type, operating system, browser name, screen resolution, and other technical information related to the device you use to access xe8.
• Activity Information: Game records, betting history, deposit and withdrawal transactions, login and logout times, and your interactions with xe8 platform features.
• Communications: Correspondence via Live Chat, email, or other support channels, including inquiries, complaints, and feedback you submit to the xe8 team.
• KYC Verification Documents: Photos or scans of your identity card, a selfie with your identity card, and other supporting documents requested during the Know Your Customer (KYC) process for identity verification purposes.

Any information you voluntarily provide through surveys, contests, or loyalty programs is also collected and processed in accordance with this policy.

Every piece of information we collect is used for legitimate and transparent purposes. xe8 does not use your data for anything beyond what is stated here without obtaining your consent first.

• Account Management: Processing registrations, verifying your identity, managing logins, and maintaining account security over time.
• Transaction Processing: Verifying and processing deposits, withdrawals, and bonus conversions securely and within the designated timeframes.
• Legal Compliance: Meeting KYC requirements, anti-money laundering (AML) compliance obligations, and reporting duties to relevant authorities when required.
• Customer Support: Resolving inquiries, complaints, or technical issues you report to the xe8 support team more quickly and effectively.
• Platform Security: Detecting and preventing fraud, money laundering, multiple-account usage, and other suspicious activities that could harm other users.
• Service Improvement: Analyzing usage patterns in aggregate (not individually) to improve the gaming experience, app stability, and xe8's interface design.
• Marketing Communications: Sending you promotional information, bonus offers, and platform updates — only if you have consented to receive such communications. You may opt out at any time.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate support tools to members who need them.

Xe8 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. However, there are limited situations where data sharing is necessary to operate our services:

• Payment Service Providers: Transaction information is shared with authorized payment processors (such as FPX, DuitNow, and e-wallet providers) solely to enable your transactions to be processed securely.
• Game Software Providers: Game session data is shared with licensed game developers as required to ensure games function correctly and fairly.
• Identity Verification Services: KYC information is shared with approved third-party identity verification providers to validate the authenticity of the documents you submit.
• Statutory Authorities: xe8 will disclose information to legal or law enforcement authorities when required by Malaysian law or a valid court order.
• Auditors & Legal Advisors: In the event of a security audit or legal dispute, relevant information may be shared with independent auditors or legal counsel bound by strict confidentiality obligations.

All third parties we work with are bound by strict data protection agreements and are not permitted to use your data for any purpose other than what is specified in their service contract with xe8.

Protecting your data is xe8's absolute priority. We continuously invest in high-grade security infrastructure to ensure your information remains safe from unauthorized access, leaks, or misuse at all times.

• 256-bit SSL Encryption: All data transmitted between your device and xe8's servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions worldwide.
• Data-at-Rest Encryption: Sensitive information such as passwords and financial details is stored in encrypted form (encrypted at rest) using the latest encryption algorithms.
• Two-Factor Authentication (2FA): We offer 2FA to all members to add an extra layer of security to the login and fund withdrawal process.
• Continuous Monitoring: xe8's automated monitoring system operates 24/7 to detect any suspicious activity or unauthorized access attempts to member accounts.
• Internal Access Controls: Access to member personal data within the xe8 system is restricted to staff with specific operational needs. All access is logged and monitored by our IT security team.
• Regular Security Testing: xe8 conducts regular penetration testing and security audits by independent third parties to ensure there are no vulnerabilities in our systems.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure. In the event of any security incident involving your data, xe8 will notify you within the timeframe required by applicable law.

Xe8 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the xe8 website.

• Session Cookies: Used to maintain your login status during an active session. These cookies are automatically deleted when you close your browser.
• Preference Cookies: Saving your preferences such as language, display theme, and game settings so your experience feels personal every time you return.
• Analytics Cookies: Helping us understand how members use the xe8 platform in aggregate (not individually) so we can make meaningful improvements.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of your account.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of some xe8 features. For the best experience, we recommend allowing essential and preference cookies.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by xe8:

To exercise any of the above rights, please contact the xe8 support team via 24/7 Live Chat. We will process your request within 14 business days. For complex cases, this period may be extended to 30 business days, and you will be notified accordingly.

Xe8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are our data retention period guidelines:

• Active Account Data: For as long as your account is active, we retain all information necessary to deliver our services to you.
• Data After Account Closure: After account closure, transaction records and KYC documents are retained for a minimum of 7 years in accordance with Malaysia's financial compliance legal requirements.
• Activity Logs: Technical and game activity logs are retained for 12 months for audit and security purposes before being securely deleted.
• Support Communications: Customer support communication records are retained for 3 years to allow historical reference when needed.

When data is no longer needed and there is no legal obligation to retain it, xe8 will delete or destroy that data using secure, non-recoverable deletion methods.

Xe8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new technologies, legal requirements, or other relevant operational reasons.

• Change Notification: Any significant changes will be communicated to members via their registered email or in-platform notification at least 7 days before the changes take effect.
• Effective Date: Each version of the Privacy Policy will state its last updated date. The latest version is always available on this page.
• Continued Acceptance: Continued use of the xe8 platform after the effective date of any changes is considered your acceptance of the updated Privacy Policy.