Privacy Policy xs66 – Data Protection & Personal Information

1 Introduction

Xs66 values the privacy of every member and user of our platform. This Privacy Policy provides a detailed explanation of how xs66 collects, uses, stores, discloses, and protects your personal information while you use the xs66 online entertainment platform.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable related regulations. As a platform trusted by hundreds of thousands of members across Malaysia, we understand that your trust is our most valuable asset.

If you have any questions regarding this Privacy Policy or how we handle your personal information, our Data Protection team is ready to assist via xs66's official support channels.

2 Information Collected

Xs66 collects various categories of personal information depending on the level of your interaction with our platform. The information we collect includes:

Identity Information:

• Full name as stated on official identification documents.
• National identification number (MyKad) or passport.
• Date of birth for age verification.
• Current residential address.
• Active mobile phone number.
• A valid email address.

Financial Information:

• Bank name and bank account number for withdrawal purposes.
• Registered digital wallet details (where applicable).
• Records of deposit and withdrawal transactions.

Technical & Usage Information:

• Approximate IP address and geolocation data.
• Device type, operating system, and web browser version.
• Records of gaming activity and betting history on the xs66 platform.
• Login session times and duration.

3 How We Collect Data

Xs66 collects your personal information through a variety of transparent and controlled methods:

• Account Registration: Information you provide when creating your xs66 account for the first time.
• Identity Verification (KYC): Documents you upload for the identity verification process, including ID card images and verification selfies.
• Financial Transactions: Data automatically generated when you make a deposit or withdrawal through the xs66 platform.
• Platform Usage: Data automatically collected when you use the xs66 website or app, including cookies and server log files.
• Communication: Information you share when contacting the xs66 customer support team via live chat, email, or other communication channels.
• Authorized Third Parties: In certain cases, xs66 may receive information from trusted third-party identity verification providers for faster and more secure KYC purposes.

4 Purpose of Data Use

Xs66 uses collected personal information solely for the following legitimate and stated purposes:

• Creating and managing your xs66 member account.
• Conducting identity verification (KYC) processes as required by law.
• Processing deposits and withdrawals safely and accurately.
• Detecting and preventing fraud, money laundering, and other illegal activities.
• Providing effective and personalized customer support.
• Sending important service communications such as transaction confirmations and account security notifications.
• Sending xs66 promotional information and special offers (subject to your notification preferences).
• Monitoring platform activity to identify problematic gameplay patterns for responsible gaming purposes.
• Complying with legal obligations and reporting to relevant authorities when required.
• Improving xs66 platform products, services, and overall user experience.

5 Information Sharing

Xs66 respects your privacy and will not share your personal information with third parties except in the following limited and controlled circumstances:

• Service Providers: Third-party companies that assist xs66 in providing services, such as payment gateway providers, identity verification service providers, and technology infrastructure providers. All such providers are bound by strict data protection agreements.
• Legal Authorities: When required by law, court order, or a legitimate request from a Malaysian law enforcement agency.
• Fraud Prevention: Sharing necessary information with industry bodies or other platforms to detect and prevent coordinated fraud across platforms.
• Protection of Interests: When xs66 reasonably believes that disclosure is necessary to protect the rights, property, or safety of xs66, our members, or the public.

In all cases of data sharing with third parties, xs66 ensures that only the minimum necessary information is shared, and recipients are bound by confidentiality obligations equivalent to xs66's data protection standards.

6 Cookies & Tracking Technologies

Xs66 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core xs66 platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymized data on how you use the xs66 platform to help us identify and resolve technical issues and improve overall performance.
• Functional Cookies: Saving your preferences such as language, region, and display settings to deliver a more personalized experience.
• Security Cookies: Used to detect suspicious login activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect your ability to use certain features on the xs66 platform.

7 Data Security

Xs66 implements comprehensive technical and organisational security measures to protect your personal information from unauthorised access, loss, destruction, or accidental disclosure:

• Data encryption during transmission using the latest 256-bit TLS/SSL protocols.
• Encryption of stored data at the database level for sensitive information.
• Role-based access control (RBAC) to ensure only authorized personnel can access sensitive data.
• Regular security audits and penetration testing conducted by independent security experts.
• 24/7 threat monitoring system to detect and respond to any unauthorised access attempts.
• Tested incident response procedures to ensure swift action in the event of any data breach.

While xs66 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. You also play an important role by ensuring your account password remains strong and is not shared with anyone.

8 Data Retention

Xs66 retains your personal information only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law.

In general, xs66's data retention policy is as follows:

• Active Account Data: Retained for as long as your account is active and in use.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's financial regulatory requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure or the date of last verification, whichever is later.
• Technical Log Data: Retained for 12 months for security and fraud detection purposes.
• Support Communication Data: Retained for 3 years for reference purposes and service quality improvement.

Once the specified retention period has expired, your personal information will be securely deleted or anonymised in accordance with xs66's standard procedures.

9 Member Rights Regarding Personal Data

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information held by xs66:

• Right of Access: You have the right to request a copy of the personal information xs66 holds about you.
• Right to Rectification: You have the right to request correction of any personal information that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal information, subject to xs66's legal obligations to retain certain data.
• Right to Restrict Processing: You have the right to request that xs66 restrict the processing of your personal information under certain circumstances.
• Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes at any time.

To submit any request relating to your data rights, please contact the xs66 Data Protection team via live chat or our support email. xs66 will respond to your request within 21 business days.

10 Children's Data

The xs66 platform is strictly for individuals aged 18 and above. xs66 does not knowingly collect, store, or process any personal information from individuals under the age of 18.

If you become aware that someone under the age of 18 has registered an xs66 account or provided us with their personal information, please contact the xs66 support team immediately. We will take prompt action to delete the information and close the account in question.

11 Privacy Policy Amendments

Xs66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or developments in xs66's services.

When material changes are made to this Privacy Policy, xs66 will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear notices on the homepage or via in-account notifications.
• Sending email notifications to members affected by material amendments, where it is reasonable to do so.

You are advised to review this Privacy Policy periodically. Continued use of the xs66 platform after any amendments take effect will be considered acceptance of the revised Privacy Policy.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how xs66 handles your personal information, please do not hesitate to contact us.

The xs66 Data Protection Team can be reached via:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the xs66 platform.
• Email: [email protected] (Response within 1–3 business days)
• Support Page: Visit the FAQ for answers to frequently asked questions.

We are committed to addressing every privacy-related complaint and inquiry seriously and within a reasonable timeframe. Your trust is our priority.