Privacy Policy xe888 –
Your Data, Our Responsibility

Welcome to the xe888 Privacy Policy. This document is published by xe888 ("we", "us") as the operator of an online gaming platform operating under the domain xe888.win. This Privacy Policy clearly and transparently explains how we collect, process, store, protect, and in certain circumstances, share the personal data you provide to us or that we collect automatically when you use our platform.

The scope of this policy covers all services offered by xe888, including but not limited to the main website, mobile app, online casino games, sports betting, Live Casino, e-sports betting, and all your interactions with our customer support team across any communication channel.

By registering an account, accessing, or using any part of the xe888 platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us for any alternatives that may be available.

Xe888 collects your personal data through two main methods — information you provide directly when registering and using the platform, and information collected automatically through the technologies used within our platform.

Information you provide directly:

• Identity information — full name, date of birth, identity card number, or passport number (for the KYC process).
• Contact information — email address, mobile phone number, and residential address.
• Financial information — bank account numbers, digital wallet details (Touch 'n Go, GrabPay), or cryptocurrency wallet addresses used for deposits and withdrawals.
• Verification documents — copies of identity cards, bank statements, utility bills, or other documents submitted for KYC verification purposes.
• Communications — conversation records with the customer support team via Live Chat or email.

Information collected automatically:

• Technical data — IP address, web browser type, operating system, device identifier, and general location data.
• Usage data — game records, betting history, transaction logs, session durations, and pages visited within the platform.
• Cookie data — session cookies, preference cookies, and analytics cookies used to enhance the user experience.

Every piece of personal data we collect is used for specific and legitimate purposes. xe888 does not process your personal data for any purpose other than those stated below, unless with your explicit consent.

• Account management — registering, verifying, and maintaining your player account, including all mandatory KYC processes.
• Transaction processing — processing deposits, withdrawals, and all financial transactions securely and accurately.
• Service delivery — giving you access to all games, promotions, and features on the xe888 platform.
• Customer Support — responding to your inquiries, complaints, and support requests via Live Chat, email, or other channels.
• Platform security — detecting and preventing fraud, money laundering, account abuse, and other unlawful activities.
• Legal compliance — fulfilling the reporting and compliance obligations required by the relevant authorities.
• Responsible gaming — monitors gameplay patterns to identify players who may require additional support or protection.
• Platform improvements — analyzing usage data to improve the quality, performance, and overall experience of the platform.
• Marketing communications — sending promotional offers, bonuses, and the latest updates — only to players who have given their consent to receive such communications.

Xe888 does not sell or rent your personal data to any third party for their own commercial purposes. However, in conducting platform operations lawfully and securely, there are certain situations where your data may need to be shared with trusted parties.

Parties who may receive your data:

• Payment service providers — FPX providers, card processors, digital wallet providers, and cryptocurrency platforms that process your financial transactions. Such sharing is limited strictly to the data required to complete the transaction.
• Game software providers — companies that supply casino game, slots, and sports betting software, enabling you to enjoy games on our platform.
• Cloud and infrastructure service providers — companies that provide the server infrastructure, databases, and cloud services used to operate the xe888 platform.
• Legal Authority — law enforcement agencies or regulatory bodies when required by law or a valid court order.
• Anti-fraud bodies — organizations that assist us in detecting and preventing fraud, money laundering, and other unlawful activities.

All third parties working with xe888 data are required to comply with strict security and privacy standards. We only share the minimum data necessary to fulfil specific and legitimate purposes.

Xe888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the data is no longer needed, it will be securely deleted or anonymised.

• Active account data — retained throughout the active period of your account and continuously updated.
• Financial transaction data — retained for a minimum of 5 years from the transaction date to meet financial reporting and anti-money laundering requirements.
• KYC Records — identity verification documents are retained for a minimum of 5 years after account closure.
• Support communication logs — conversation records with the support team are retained for 2 years.
• Technical data and system logs — retained for 12 months for security and technical troubleshooting purposes.
• Marketing data — retained until you withdraw your consent to receive marketing communications.

Upon expiry of the retention period, data is securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, documents are disposed of using security-grade shredders.

Xe888 continuously invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our approach to data security is comprehensive and multi-layered.

• 256-bit SSL encryption — all communications between your browser and xe888 servers are fully encrypted.
• Database security — sensitive data in databases is encrypted using industry-standard encryption algorithms.
• Role-based access control — only staff with a legitimate operational need are granted access to personal data, based on a need-to-know principle.
• Two-factor authentication (2FA) — available and strongly recommended for all player accounts as an additional layer of security.
• Real-time threat monitoring — an intrusion detection system operating 24/7 to identify and neutralize cyber threats.
• Regular penetration testing — independent security audits are conducted periodically by third parties to identify and address any vulnerabilities.
• Staff training — all xe888 staff who handle personal data receive regular privacy and security training.

Xe888 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure the platform functions properly, and help us understand how players use our services.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies — saving your preferences such as language, display theme, and game settings for a more personalized experience.
• Analytics cookies — helping us understand usage patterns, the most popular pages, and ways to improve the platform. This data is collected in aggregate and does not personally identify you.
• Security cookies — used to detect suspicious activity, prevent fraud, and protect your account.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality or your experience on the xe888 platform.

As a data subject, you have clear rights regarding your personal data held by xe888. We fully respect and facilitate the exercise of these rights. To exercise any of the following rights, please contact our privacy team by email at [email protected] or via Live Chat.

The xe888 platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. If we discover that a child's personal data has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and discover that your underage child has registered or used the xe888 platform, please contact our support team immediately via Live Chat or email at [email protected] so that appropriate action can be taken.

If you have any questions, concerns, or complaints about how xe888 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels: