Privacy Policy xasino – Malaysia Player Data Protection

Information We Collect

Xasino collects your personal information when you register an account, use our services, or interact with the platform in any way. There are two main categories of information we collect:

Information you provide directly:

• Full name as shown on your identification card.
• Date of birth and gender.
• Email address and mobile phone number.
• Current residential address.
• Registered bank account number or e-wallet details.
• Identity verification documents (copy of MyKad, passport) for the KYC process.
• Proof of address such as a bank statement or utility bill.

Information collected automatically during use:

• Device IP address and approximate geographic location.
• Device type, operating system, and web browser version.
• Game session records including date, time, game type, and wagering amounts.
• Deposit and withdrawal transaction history.
• Platform interaction data such as pages visited and time spent.
• Cookie data and device identifiers for session authentication purposes.

How We Use Your Data

The personal data we collect is used for legitimate and transparent purposes. Below is the complete list of how xasino uses your data:

Xasino will not use your data for any purpose not listed above without first obtaining fresh consent from you.

Sharing Data with Third Parties

Xasino does not sell players' personal data to anyone. However, in certain situations, data may be shared with the following parties for legitimate purposes:

• Payment service providers: DuitNow, FPX, Touch 'n Go, Boost, and GrabPay need to receive the transaction information required to process your deposits and withdrawals.
• Game software providers: Providers such as PG Soft, Pragmatic Play, and Evolution Gaming receive the minimum session data required to deliver the gaming experience.
• Regulatory authorities and law enforcement: We will disclose information where required by court order, regulatory authority directive, or other valid legal requirement.
• Technical service providers: Cloud infrastructure and cybersecurity providers that help operate the xasino platform — all subject to strict data processing agreements.

Cookies and Tracking Technologies

Xasino uses cookies and similar tracking technologies to enhance the user experience and maintain the security of your login session. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how players use the platform — most visited pages, load times, and technical errors — to help us improve our services.
• Functional Cookies: Remembering your preferences such as your chosen language, default betting denomination, and preferred lobby layout.
• Security Cookies: Helping us identify suspicious activity such as login attempts from unrecognised locations or unusual transaction patterns.

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the xasino platform and make the login experience more difficult.

Data Security Measures

Xasino implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction, or unintended disclosure.

• 256-bit SSL encryption for all data communications between user devices and our servers.
• At-rest encryption for all personal and financial records in the database.
• Two-factor authentication (2FA) available for all player accounts and mandatory for all system administrators.
• Role-based access control (RBAC) ensures that only staff who require access to specific data are permitted to do so.
• Independent security audits are conducted periodically by qualified third-party firms.
• A real-time fraud monitoring system that automatically detects and blocks suspicious activity.
• A tested data incident response plan to ensure a swift response in the event of any data breach.

While we take all reasonable precautions, no system is 100% immune to cyber threats. We strongly encourage players to take their own protective measures, such as using strong passwords and not sharing their login credentials.

Data Retention and Deletion Period

Xasino retains your personal data only for as long as necessary for the stated purposes or as required by applicable Malaysian law.

• Active account data: Retained for the duration of your active account and for 5 years after account closure to comply with anti-money laundering legal requirements.
• Financial transaction records: Retained for 7 years in line with financial and tax reporting requirements.
• KYC records: Retained for the duration of the active account and 5 years after closure.
• Log and security data: Retained for 12 months for security investigation purposes.
• Marketing data: Retained until you withdraw consent or request deletion.

Once the retention period expires or upon a valid player request, data will be securely deleted or anonymised so it can no longer be linked to you as an individual.

Your Rights under the xasino Privacy Policy

As a xasino player, you have the following rights regarding your personal data. All requests can be submitted through our customer support team:

Children's Privacy

The xasino platform is not intended for individuals under the age of 21. We do not knowingly collect or store personal data of children or minors below the stipulated age limit.

If we discover that personal data of an individual under 21 years of age has been collected without appropriate consent, we will take the following steps immediately:

• Closing the associated account immediately.
• Deleting all relevant personal data from our systems.
• Returning any valid balance to the original payment method.

Parents and guardians who become aware that a minor in their care has registered an account at xasino are encouraged to contact us immediately via the customer support email.

Amendments to the Privacy Policy

Xasino reserves the right to update this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or platform improvements. The most recent update date is always displayed at the top of this document.

For material changes — those that significantly affect how we use or protect your data — we will provide at least 14 calendar days' notice before the changes take effect, via email or in-platform notification.

Continued use of the xasino platform after the effective date constitutes acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before they take effect by contacting our support team.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by xasino, please contact our Data Protection Officer:

To speed up the process, please include your account number and a brief description of your request in your first message. Our team will verify your identity before processing any requests related to your personal data.