Privacy Policy

Xx88 Privacy Policy — Malaysia Player Personal Data Protection

Xx88 takes every member's privacy seriously. This policy clearly explains what data we collect, how it is used, who can access it, and your rights as a player to control your own personal information.

Updated: January 2026
Bahasa Melayu
Estimated reading time: 7 minutes
256
SSL Encryption Bits
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Personal Data Act Compliance

Six Core Pillars of xx88 Privacy Protection

These are the core principles that guide how xx88 handles every player's personal data

Banking-Standard Data Encryption

Every piece of data transmitted between your device and xx88 servers is protected with 256-bit SSL encryption — the same technology used by leading banking institutions worldwide to secure financial transactions.

Data Control in Your Hands

You have the full right to access, amend, or request deletion of your personal data at any time. xx88 provides a simple and transparent process for players to manage their own personal information.

No Sale of Data to Third Parties

Xx88 has never and will never sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. Your data belongs to you — not to us as a business asset.

Secure Data Storage

All player data is stored on servers protected by multi-layered firewalls, 24/7 threat monitoring, and automated backup systems. Both physical and digital access to servers is strictly limited to authorized personnel only.

Personal Data Protection Act Compliance

Xx88 operates in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA). All data collection, processing, and storage is carried out in line with the legal requirements set by Malaysian authorities.

Immediate Notification in the Event of a Data Breach

In the event of any security incident involving player data, xx88 is committed to notifying affected members within 72 hours. We will not conceal such incidents and will act promptly to restore security.


Important Note: By registering or using the xx88 platform, you are deemed to have read and fully agreed to this Privacy Policy. We encourage you to read this entire document to understand your rights as a player.

1. Introduction and Scope of Privacy Policy

This Privacy Policy ("Policy") describes how xx88, operating through the website xx88.phd, collecting, using, storing, and protecting your personal information. This Policy applies to all users of the xx88 platform, including visitors, registered members, and active players.

We understand that your trust is the foundation of our relationship. That's why xx88 is committed to protecting your privacy at the highest level. We only collect data that is strictly necessary, use it solely for the stated purposes, and never sell it to third parties.

This Privacy Policy may be updated from time to time. Any significant changes will be communicated to members via in-platform notifications. The latest update date is shown at the top of this page.

2. Information We Collect

Xx88 collects various types of information to ensure the platform runs smoothly, transactions are processed securely, and your gaming experience is optimized. The following are the categories of data collected:

2.1 Personal Identification Information

  • Full name as stated in official documents
  • Malaysian identity card number (MyKad) or passport
  • Date of birth for age verification
  • Current residential address
  • Active mobile phone number
  • A valid and active email address

2.2 Financial Information

  • Bank account number for withdrawal processing
  • Bank name and account holder name
  • Digital wallet details such as Touch 'n Go or GrabPay
  • Deposit and withdrawal history within the platform

2.3 Technical Information

  • IP address of the device used to access the platform
  • Web browser type and version
  • Device type (desktop, smartphone, tablet)
  • Operating system in use
  • Cookie data and session identifiers

2.4 Gaming Activity Information

  • Betting and gaming activity records
  • Win and loss history
  • Personal game preferences and settings
  • Gaming session duration and frequency
Why Is This Data Needed? Game activity data is used solely for Responsible Gaming monitoring, fraud detection, and user experience improvement. We do not use it to build a commercial profile of you.

3. How We Use Your Information

Xx88 uses collected data solely for legitimate and necessary purposes. Each use of data is clearly stated below:

Purpose of Use Type of Data Used Legal Basis
Account management and verification Name, email, phone number, KYC Contract fulfillment
Deposit and withdrawal processing Financial details, bank name Contract fulfillment
Fraud prevention and anti-money laundering IP, KYC, transaction records Legal obligation
Customer support and complaint resolution All related categories Legitimate interest
Promotional and bonus communications (with consent) Email, phone number Consent
Responsible Gaming Monitoring Gaming activity, play sessions Public interest
Platform improvement and user experience Technical data, usage patterns Legitimate interest

4. Sharing Information with Third Parties

Xx88 does not sell, rent, or disclose your personal data to outside parties for commercial purposes. However, there are limited situations where data sharing is necessary and permitted by law:

  • Payment service providers — To process your deposits and withdrawals, the necessary transaction information is shared with trusted financial institutions and payment gateways.
  • Game service providers — Game software providers may receive technical information required to run games correctly.
  • Legal Authority — xx88 will disclose data if ordered to do so by legitimate authorities under a court order or binding legal requirement.
  • Technical service providers — Companies that help us operate the platform (such as cloud and cybersecurity services) may access data on a limited basis under strict confidentiality agreements.

All third parties handling xx88 player data are bound by strict data protection agreements and are audited regularly to ensure compliance.

5. Cookies and Tracking Technologies

Xx88 uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and maintain login session security. There are several types of cookies we use:

  • Session Cookies — Required to maintain your login status during an active session. These cookies are deleted automatically when you close your browser.
  • Preference Cookies — Stores your personal settings such as language preference and display options to streamline repeat visits.
  • Analytics Cookies — Collects information on how users interact with the platform for internal improvement purposes. This data is aggregated and not linked to individual identities.
  • Security Cookies — Used to detect suspicious login activity and protect your account from unauthorized access.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of some parts of the platform.

6. Data Storage and Retention Period

Your personal data is stored on secure servers for as long as needed to fulfil the purpose for which it was collected, or as required by law. General data retention guidelines are as follows:

  • Active account data — Retained for the duration your account is active plus five (5) years after account closure for legal compliance purposes.
  • Financial transaction records — Retained for a minimum of seven (7) years in accordance with anti-money laundering legal requirements.
  • Customer support communication logs — Retained for three (3) years for reference and dispute resolution.
  • Technical data and system logs — Retained for ninety (90) days for security incident detection purposes.
Data Deletion on Request: When the retention period expires or upon a valid player request, your data will be permanently deleted or anonymised in a manner that prevents it from being re-associated with your identity. This process is carried out periodically on a set schedule.

7. Data Security and Technical Protection

Xx88 consistently invests in security infrastructure to protect player data from unauthorized access, breaches, or misuse. Key security measures we implement include:

  • 256-bit SSL/TLS Encryption for all data communications between players and our servers.
  • Encryption of data at rest using AES-256 standards for all data stored in our databases.
  • Two-factor authentication (2FA) for an additional security layer during account login.
  • Firewall and Intrusion Detection System (IDS) actively monitoring network traffic 24/7.
  • Penetration testing by independent third parties conducted periodically to identify system vulnerabilities.
  • Internal access controls ensuring staff can only access data required for their specific role.

8. Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by xx88:

  • Right of Access — You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification — You have the right to request correction of any inaccurate or incomplete data.
  • Right to Erasure — Under certain circumstances, you may request that we delete your personal data, subject to any still-applicable legal obligations.
  • Right to Restrict Processing — You may request that we restrict how we process your data in certain situations.
  • Right to Object — You may object to the processing of your data for direct marketing purposes at any time.
  • Right to Withdraw Consent — Where data processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, contact the xx88 customer support team via in-platform live chat. We will process your request within a reasonable timeframe, typically within 14 working days.

9. Children's Privacy

The xx88 platform is restricted to users aged 18 and above. We do not knowingly collect personal information from minors. If we discover that a child's data has been collected without proper age verification, that data will be deleted immediately and the account will be closed.

If you believe your child has registered an account on our platform, please contact our support team immediately for corrective action.

10. Links to Other Websites

The xx88 platform only displays content from the xx88.phd domain itself. No links to external websites are included on our platform. As a result, you will not be redirected to any third-party sites while using xx88 services, and this Privacy Policy applies fully to all your interactions within our platform.

11. Cross-Border Data Transfers

In the course of its operations, xx88 may store or process your personal data on servers located outside Malaysia. Any such transfer is carried out with adequate safeguards, including data transfer agreements that comply with international standards and ensure a level of protection equivalent to that required under Malaysia's PDPA.

12. Changes to This Privacy Policy

Xx88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new platform features. The latest version of the Privacy Policy is always available on this page with the stated update date.

For material changes that significantly affect your rights, we will send you a notification via your registered email or an in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated Privacy Policy.

Privacy-Related Inquiries: For any inquiries, complaints, or requests relating to this Privacy Policy, the xx88 customer support team is available 24/7 via in-platform live chat. We will respond to every inquiry transparently and clearly within the designated timeframe.

Xx88 Privacy and Data Security FAQs

Answers to the most frequently asked questions about personal data protection on our platform

Absolutely not. xx88 does not sell, rent, or disclose your personal data to any third party for commercial or marketing purposes. Your data is only shared in limited situations required by law, such as requests from legitimate authorities, or with technical service providers bound by strict confidentiality agreements.

All your financial information is protected with 256-bit SSL encryption during transmission and stored in databases encrypted to AES-256 standards. Our servers are guarded by multi-layered firewalls and intrusion detection systems active 24/7. Your card or bank account details are never stored in a directly readable format — everything is encrypted before storage.

Yes, you have the right to request a copy of your personal data at any time under the Malaysia Personal Data Protection Act 2010 (PDPA). Contact the xx88 customer support team via in-platform live chat and state your data access request. We will process it and respond within 14 working days.

When you close your account, your personal data will be retained for the period required by law — typically five years for account data and seven years for financial transaction records to comply with anti-money laundering requirements. Once that period ends, your data will be permanently deleted or anonymised so it can no longer be linked to your identity.

You may object to or withdraw consent for receiving promotional communications at any time. Simply contact the xx88 customer support team via live chat and state your intention to stop receiving marketing communications. Your request will be processed promptly and you will not receive any further promotional communications after that, without affecting your account functionality.

In the event of a security incident involving player data, xx88 will activate its incident response protocol immediately. The first step is to isolate and address the source of the breach. Within 72 hours, we will notify affected members about the nature of the incident, the data potentially involved, and the protective measures that have been and are being taken. We are committed to full transparency in such situations.

Your Data is Safe with xx88

Play with Peace of Mind — Your Privacy is Our Priority

Over 500,000 Malaysian players have trusted xx88 not only for the quality of our games, but also for our commitment to data security and privacy. Register today for free and play with full confidence that your personal information is always protected.

256-bit SSL Encryption
No Data Sales
Malaysia PDPA Compliance
24/7 Support
Bahasa Melayu