Official Documents
XE88 is committed to protecting the privacy and personal data of every member. This Policy transparently explains how we collect, use, store, and safeguard your information on our platform.
Your privacy is not merely a legal obligation for us — it is a core value we actively uphold every day.
All data transmitted between your device and XE88's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions. Your data cannot be read by any third party while in transit.
XE88 has never and will never sell, rent, or disclose members' personal information to any third party for marketing purposes without your explicit consent. Your data belongs to you — we are only its custodian.
You have the right to access, correct, download, or request deletion of your personal data held by XE88 at any time. Such requests are processed within 14 working days through our official support channels.
XE88 member data is stored on servers protected by multi-layered access control systems, 24/7 threat monitoring, and scheduled automated backups. Access to members' personal data is restricted to authorised personnel only.
XE88's privacy policy and data handling practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). All collection and processing of members' personal data is carried out on a lawful legal basis.
XE88 members have full control over the types of marketing communications they wish to receive. You can opt out of any promotional communication channel at any time through your account settings or by contacting our support team.
This Privacy Policy ("Policy") describes the personal data collection, use, storage, sharing and protection practices carried out by XE88 ("We", "Platform", "XE88") in relation to all individuals ("Members", "Users", "You") who access or use the XE88 platform at https://xe88.in and all associated subdomains or applications.
By registering an account or using any XE88 service, you confirm that you have read and understood this Privacy Policy and agree to the practices described herein. This Policy should be read together with Terms & Conditions XE88, which forms part of your overall agreement with the platform.
XE88 processes member personal data on the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA): (i) performance of contract — to provide the services requested; (ii) legitimate interests — for platform security, fraud prevention and service improvement; (iii) legal obligation — to comply with applicable statutory requirements; and (iv) consent — for optional marketing communications.
XE88 collects various categories of personal data depending on how you interact with the platform. We only collect data necessary for the stated purposes and do not collect information that is irrelevant.
| Data Categories | Specific Examples | Collection Methods |
|---|---|---|
| Identification Data | Full name, MyKad number, date of birth | Registration form, KYC process |
| Contact Data | Malaysian mobile number, email address | Account registration, profile updates |
| Financial Data | Payment methods used, deposit & withdrawal transaction history in RM | Payment systems (DuitNow, TNG eWallet, FPX, etc.) |
| Technical Data | IP address, device type, operating system, web browser, activity logs | Automatically during platform use |
| Gaming Data | Betting history, games played (slots, roulette, blackjack, etc.), wins and losses | XE88 gaming system |
| Communication Data | Records of live chat, email and Telegram support conversations | Customer support interactions |
XE88 does not store PINs, passwords in plain text, full credit/debit card numbers, or your bank account information. All sensitive payment processing is handled by registered third-party payment gateways that comply with industry standards.
XE88 uses the personal data collected for the following purposes, all of which are necessary for the operation of the platform and the delivery of services you have requested:
Data Minimisation Principle: XE88 applies the principle of data minimisation — we collect and process only the minimum data genuinely required for each stated purpose. We do not collect data for speculative or undefined future use.
XE88 does not sell members' personal data to anyone. However, in the course of lawfully operating the platform, we may share certain data with the following limited categories of third parties, where each instance of sharing is based on reasonable necessity and governed by strict confidentiality agreements:
XE88 implements a range of technical and organisational security measures to protect members' personal data against unauthorised access, loss, destruction, or accidental disclosure.
All communications between member devices and XE88's servers are encrypted using TLS 1.3 with 256-bit keys — rendering data unreadable to any party during transmission over the internet.
Member passwords are never stored in plain text. XE88 uses the bcrypt hashing algorithm with a unique random salt for each password, ensuring passwords remain secure even in a hypothetical data breach scenario.
XE88 members can enable two-factor authentication for an added layer of security on their accounts. Even if your password is compromised, 2FA prevents unauthorised access to your account.
XE88's security monitoring system operates continuously to detect and respond to suspicious activity, unauthorised login attempts, or patterns indicating potential security threats in real time.
XE88 member data is automatically backed up on a regular schedule to geographically separate secure storage locations, ensuring service continuity and data recovery in any disruption scenario.
Access to members' personal data within XE88's internal systems is restricted to staff with a legitimate operational need, based on the principle of least privilege.
The XE88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used by members in aggregate.
You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies will affect the functionality of the XE88 platform, including the ability to stay logged in. For guidance on managing cookies in your specific browser, refer to that browser's help documentation.
As an XE88 member residing in Malaysia, you have the following rights regarding the personal data we hold about you, in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA):
You have the right to request a copy of the personal data we hold about you. We will provide a full report within 14 working days from the date the request is received.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request a prompt correction at no charge through our support channels.
Under certain circumstances, you have the right to request the deletion of your personal data. Such requests are subject to any applicable legal retention obligations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, without needing to provide a reason.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider, where technically feasible.
Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
To exercise any of the rights above, contact the XE88 support team via live chat or email at support@xe88.in, specifying the right you wish to exercise, your account details, and any relevant information to help us process your request accurately. We will acknowledge receipt of your request within 3 business days and resolve it within 14 business days.
XE88 retains members' personal data only for as long as necessary to fulfil the stated purpose of collection, or as required by applicable law, whichever is longer.
The XE88 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the XE88 platform and does not cover the privacy practices of any third party. XE88 is not responsible for the content or privacy practices of websites or services not operated by us.
We recommend that members read the privacy policy of any third-party website before providing them with any personal information.
The XE88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that a minor's data has been collected without our knowledge, we will take immediate steps to delete that data and terminate the account in question.
If You Suspect Misuse: If you believe that someone under the age of 18 has registered an XE88 account or is using our platform, please report this to our support team immediately. We will take prompt action to resolve the situation without delay.
XE88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Material amendments will be communicated to members via their registered email or in-platform notification at least 14 days before taking effect.
The "Updated" date at the top of this page will be revised to reflect the effective date of the latest version. Continued use of the XE88 platform after that date constitutes acceptance of the amended policy.
We recommend that members review this Privacy Policy periodically. For any questions about changes made, do not hesitate to reach out to the XE88 support team, available in Bahasa Melayu 24 hours a day.
For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through the following channels:
The XE88 support and privacy team operates 24 hours a day, 7 days a week including Malaysian public holidays, and all enquiries are handled in Bahasa Melayu.
In a digital era where personal data grows ever more valuable and cybersecurity risks are increasingly real, XE88 recognises that member trust depends not only on a great gaming experience, but also on the confidence that their personal information is managed with full responsibility and integrity. That is why this Privacy Policy is more than a compliance document — it reflects the core values that guide every data-related decision at XE88.
A question frequently asked by Malaysian members is: why does XE88 need to collect my personal data at all? The answer is straightforward and practical. When you register an account and make a deposit using DuitNow or Touch 'n Go eWallet, the payment system requires a name matching the payment account to verify your identity and prevent fraud. When you request a withdrawal, we need to ensure the funds are credited to the right person — not an unauthorised party. When you contact customer support, our agents need access to your account information to assist you effectively. Every piece of data we collect has a clear and legitimate purpose.
On the technical security front, the 256-bit SSL encryption used by XE88 is the same standard adopted by Malaysia's major banks such as Maybank and CIMB to protect their customers' online banking transactions. This means that when you enter your login details or make a transaction on the XE88 platform, that information is encrypted into an unreadable code before it ever leaves your device. Even if someone were to intercept the data in transit, they would be unable to extract any useful information from it.
When it comes to sharing data with third parties, XE88 operates on a straightforward principle: we share only what is necessary, with those who need it, for legitimate purposes. When you make a deposit using GrabPay, the GrabPay provider needs to know that a payment requires processing — but they have no need to know which games you play or how much you win. This separation of context is fundamental to meaningful privacy protection.
The rights guaranteed to XE88 members under this Privacy Policy are rights that can be genuinely exercised — not just words on paper. If you would like to know what data we hold about you, send an email to support@xe88.in with a data access request and our team will provide a full report within 14 working days. If you find any inaccurate information, we will correct it promptly. If you wish to close your account and request data deletion, we will honour that request subject to unavoidable legal retention obligations.
One aspect of privacy that is often overlooked is account security, which depends on the actions of members themselves. XE88 provides a robust security infrastructure — but the security of your password is your responsibility. Use a strong, unique password for your XE88 account that is different from the one you use for your email or other platforms. Enable two-factor authentication (2FA) where available. Never share your login credentials with anyone, including individuals claiming to be XE88 representatives — our team will never ask for your password through any channel. If you suspect your account has been accessed by an unauthorised party, contact XE88's support team immediately via live chat for prompt remediation.
XE88 also takes seriously its responsibility to educate members about their privacy rights and how to protect themselves in the digital world. We believe that members who understand their rights are more confident and better protected. This Privacy Policy is written in plain, clear language not out of obligation, but because we want our members to truly understand what they are agreeing to and what they are entitled to expect from us as a responsible platform.
Brief answers to the most frequently asked questions about privacy and data protection on the XE88 platform.
Register a free XE88 account today and enjoy a safe, fair, and responsible online casino experience in Malaysia.
256-bit SSL, zero data selling, and full control in your hands — XE88 is the Malaysian online casino platform that genuinely puts its members' privacy first.