MALAYSIA PDPA COMPLIANCE 2026

Xx88 Privacy Policy — Serious Personal Data Protection for Malaysian Players

Xx88 treats the privacy of your personal data as its highest priority. This policy clearly outlines what information we collect, how we use it, who can access it, and your rights as a member. All policies comply with Malaysia's Personal Data Protection Act (PDPA) 2010.

PDPA 2010
256-bit SSL
Data Never Sold
Full Right of Access
Secure Storage
Right to Erasure
Content
Updated:
1 January 2026
Last updated: 1 January 2026. This version supersedes all previous versions.
Section 01

Introduction & Scope of xx88's Privacy Policy

This Privacy Policy explains how xx88 ("we", "the platform", or "xx88") collects, stores, processes, and protects the personal data of members using our platform at xx88-khelo.net. This policy applies to all xx88 platform users, including website visitors, registered members, and active players.

Xx88 is committed to protecting your privacy in accordance with the provisions of the Personal Data Protection Act (PDPA) 2010 Malaysia. We only collect information that is strictly necessary to provide our services, and we never sell your personal data to any third party for commercial purposes.

By registering as a member or using any xx88 services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to request account closure and deletion of your data.

Xx88's Privacy Policy is written entirely in Bahasa Melayu so that all Malaysian members can understand it easily without needing a translation. If you have any questions, our support team is available via LiveChat 24/7.

Section 02

Types of Personal Information Collected

Xx88 collects various types of personal information during registration, platform use, and communications with our support team. Below is a full list of the information categories we collect:

Data Categories Type of Information Purpose of Collection
Identification Information Full name, date of birth, gender, MyKad/passport number Identity verification (KYC) & regulatory compliance
Contact Information Email address, Malaysian phone number Account communications & customer support
Financial Information E-wallet information (TnG, GrabPay, Boost), FPX account, transaction history RM deposit & withdrawal processing
Technical Data IP address, device type, web browser, OS, geographic location Account security & fraud detection
Gaming Data Game history, bets, winnings, session duration Regulatory compliance & responsible gaming
Communications Data LiveChat records, support emails, complaint tickets Service improvement & complaint resolution

Xx88 does not collect credit card numbers directly. All financial transactions are processed through third-party payment gateways that are PCI DSS certified. We receive only transaction confirmations — not your full card or bank account details.

Section 03

How xx88 Uses Your Personal Data

Personal data collected by xx88 is used solely for legitimate and reasonable purposes. We do not use your data for any purpose not stated in this Privacy Policy:

  • Account Management: Creating and managing your xx88 account, processing registration, login, and identity verification.
  • Transaction Processing: Processing deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) in Malaysian Ringgit (RM).
  • Platform Security: Detecting and preventing fraud, unauthorised access, bonus abuse, and activities that violate xx88's Terms & Conditions.
  • Regulatory Compliance: Meeting our legal obligations under Malaysia's PDPA 2010 and the requirements of our international gaming licence.
  • Customer Support: Providing technical support, resolving complaints, and communicating with you regarding your account.
  • Platform Improvements: Analysing aggregated (anonymised) usage data to improve the xx88 user experience.
  • Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only if you have consented to receive them. You may unsubscribe at any time.
  • Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate support.
Section 04

Data Sharing & Disclosure

Xx88 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. This is our absolute commitment. However, there are limited situations where we may need to share your data with certain parties:

  • Service Provider: Companies that assist us in operating the xx88 platform — such as cloud infrastructure providers, payment gateways (for processing your RM transactions), and anti-fraud software providers. All such vendors are bound by strict confidentiality agreements and may only use your data as directed by xx88.
  • Legal Compliance: If required by a court, regulatory body, or Malaysian authority through lawful legal process, xx88 may be required to disclose certain information.
  • Fraud Prevention: In cases of serious fraud or financial crime, xx88 may share information with the relevant authorities or other platforms within the industry to protect the integrity of the gaming ecosystem.
  • Business Transfer: Should xx88 be involved in any merger or acquisition, member data may be transferred to the successor entity, subject to member notification and PDPA compliance.

Xx88 does not share your financial transaction data (including your DuitNow, Touch 'n Go, GrabPay, or FPX bank account information) with any third party, except where strictly necessary to process the relevant transaction.

Section 05

Xx88 Data Security Measures

Protecting your personal data is not merely a legal obligation for xx88 — it is our moral responsibility to the Malaysian player community. We continuously invest in the latest security infrastructure:

  • 256-bit SSL/TLS Encryption: All communications between your browser and xx88's servers are protected by 256-bit SSL encryption — the same standard used by Malaysia's leading financial institutions.
  • Data-at-Rest Encryption: All sensitive personal data stored in xx88's databases is encrypted using the AES-256 algorithm.
  • Layered Access Control: Access to member data within xx88 is strictly limited to staff who require it for their specific duties only.
  • 24/7 Monitoring: Our automated security monitoring system detects and alerts us to any suspicious activity in real time.
  • Regular Security Audits: xx88 undergoes independent security audits annually, conducted by recognised cybersecurity firms.
  • Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of security on their accounts.

While xx88 takes all reasonable steps to protect your data, cybersecurity is a shared responsibility. Keep your password strong, never share your login credentials, and contact us immediately if you suspect any suspicious activity on your xx88 account.

Section 06

Cookies Policy

Xx88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the xx88 platform. For more information on managing cookies, please refer to your web browser's help documentation.

Section 07

Your Rights Under Malaysia's PDPA

As a xx88 member based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010:

Right of Access

You have the right to request a copy of all personal data xx88 holds about you. We will provide a full report within 14 business days.

Right to Rectification

If any of your personal data is inaccurate or out of date, you have the right to request a correction. We will update your records within 7 business days.

Right to Erasure

You may request deletion of your personal data after your account is closed, subject to legal retention requirements (typically 7 years).

Right to Object

You may object to the use of your data for direct marketing purposes at any time. Requests will be processed within 48 hours.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format (JSON/CSV) for transfer to another platform, should you wish to do so.

Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact xx88's Privacy Officer by email at privacy@xx88-khelo.net or via 24/7 LiveChat. Requests will be verified through a brief identity verification procedure to protect your privacy.

Section 08

Data Retention & Deletion

Xx88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

  • Active Account Data: For as long as your xx88 account remains active, your personal data will be retained in full for the purpose of providing our services.
  • Financial Records: Financial transaction records (RM deposits and withdrawals) are retained for 7 years after the transaction date, in accordance with Malaysian legal requirements relating to financial auditing and anti-money laundering.
  • Game History: Game logs are retained for 3 years for regulatory compliance and dispute resolution purposes.
  • Communications Data: LiveChat records and support emails are retained for 2 years for reference and service quality improvement purposes.
  • After Account Closure: When an account is closed at a member's request, personal data no longer required for legal compliance will be deleted within 90 days.
Section 09

Child Protection & Age Restrictions

The xx88 platform is strictly for users aged 18 and above. xx88 does not knowingly collect any personal data from individuals under the age of 18.

If we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you are aware that a minor has registered or is using the xx88 platform, please contact us immediately at support@xx88-khelo.net.

Parents and guardians are encouraged to monitor their children's online activity and ensure they do not access online gambling platforms. xx88 supports parental control measures at both the device and ISP level.

Section 10

Amendments to This Privacy Policy

Xx88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The following notification procedures will be observed:

  • Material amendments will be communicated to all registered members via email at least 14 days before taking effect.
  • In-platform notifications will also be displayed to keep you informed of any important changes.
  • The "Last Updated" date at the top of this page will always reflect the latest version of the policy.
  • Previous versions of the Privacy Policy will be retained and can be requested from the xx88 support team for reference.

Continued use of the xx88 platform after any amendments take effect will be considered acceptance of the updated policy. If you do not agree with any amendment, you have the right to close your account before it comes into effect.

Section 11

Contact the xx88 Privacy Officer

If you have any questions, concerns, or requests regarding the privacy of your personal data, please contact xx88's Data Privacy Officer through the following channels:

  • Privacy Email: privacy@xx88-khelo.net (response within 3 business days)
  • General Support Email: support@xx88-khelo.net
  • LiveChat: Available 24/7 on the xx88 platform in Bahasa Malaysia

When contacting us regarding privacy matters, please include your full name, your xx88 username, and a brief description of your request or concern. This will help us process your request more quickly and accurately.

For complaints that cannot be resolved directly with xx88, you have the right to submit a complaint to the Personal Data Protection Commissioner of Malaysia under the PDPA Act 2010.

Xx88's Privacy Commitment to Malaysian Members

Six concrete ways xx88 protects your privacy and personal data.

Full Malaysia PDPA Compliance

All data collection and processing practices at xx88 are designed to comply with Malaysia's Personal Data Protection Act (PDPA) 2010 — the primary privacy law safeguarding Malaysians.

PDPA 2010Annual Audit

Data Is Never Sold to Anyone

Xx88 has never sold, rented, or disclosed your personal data to advertisers, data brokers, or any third party for their own commercial purposes — and never will.

Zero Data SaleNo Third-Party Advertising

Bank-Level Encryption

The same SSL 256-bit and AES-256 encryption technology used by Maybank and CIMB safeguards all your data and financial transactions at xx88.

256-bit SSLAES-256

Minimum Data Access (Least Privilege)

Only xx88 staff who genuinely require access to specific data to perform their duties are permitted to do so. All access is logged and audited.

Least PrivilegeAudit Log

Data Breach Notification

In the event of any data breach affecting your information, xx88 is committed to notifying you within 72 hours, in line with industry best practices.

72-Hour NoticeTransparent

Policy in Malay

Xx88 has written this Privacy Policy entirely in Bahasa Melayu so that every Malaysian member can understand their rights without needing a translation or legal assistance.

Bahasa MelayuEasy to Understand
🔒

Your Data Is Safe at xx88 — Register with Full Confidence

Your privacy is fully protected by bank-level encryption, a PDPA-compliant privacy policy, and our commitment to never selling your data. Join now and play with confidence.

PDPA 2010 256-bit SSL Data Never Sold 24/7 Support
Bahasa Melayu