Privacy Policy

xbet88 ("We", "Us", "Our", "Platform") operates the online betting and gaming platform accessible at https://xbet88.cam. As a platform serving registered Members across Malaysia and other eligible jurisdictions, xbet88 necessarily collects and processes certain personal data in connection with account registration, identity verification, financial transactions, and the ongoing delivery of our services.

This Privacy Policy ("Policy") is published in accordance with our commitment to transparency and data protection best practices. It sets out, in plain and accessible language, the categories of personal data we collect, the purposes for which that data is processed, the parties with whom data may be shared, the measures we take to keep data secure, and the rights you hold in respect of your personal information.

This Policy applies to all personal data collected through the xbet88 platform — including the website, any associated mobile-optimised interface, communications via live chat, email correspondence at [email protected], and data collected during identity verification (KYC) processes.

This Policy should be read alongside our Terms & Conditions, which govern your use of the platform and are incorporated by reference. By registering an account, making a deposit, or otherwise using the xbet88 platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" Any information relating to an identified or identifiable natural person — including names, identification numbers, location data, email addresses, IP addresses, or any other data that can, directly or indirectly, identify you as an individual.
• "Processing" Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" xbet88, being the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" Any third party engaged by xbet88 to process personal data on our behalf, subject to appropriate data processing agreements.
• "Member" Any registered user of the xbet88 platform who has created an account in accordance with the Terms & Conditions.
• "KYC Data" Identity verification documents and information collected as part of Know Your Customer procedures, including but not limited to government-issued identity cards (MyKad), passports, and proof of address documentation.
• "Cookies" Small text files stored on a Member's device by the xbet88 platform for the purposes of session management, preference storage, and analytics.
• "Sensitive Personal Data" A specific category of personal data requiring heightened protection, including financial data, identity document details, and KYC verification records.

xbet88 collects personal data across several categories, depending on your interaction with the platform. The following table summarises the categories of data collected and representative examples of each:

We do not intentionally collect sensitive personal data beyond what is necessary for identity verification and fraud prevention purposes. We do not collect data about racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by regulatory obligations in connection with responsible gambling assessments.

xbet88 collects personal data through a number of distinct channels and interactions. Understanding these collection points helps you maintain full visibility over what information you share with us:

• Direct Submission: When you register an account, complete our KYC process, contact support via live chat or email, or update your account settings, you directly provide us with personal data. All fields marked as mandatory during registration are required for platform access and compliance purposes.
• Automated Technical Collection: As you navigate the xbet88 platform, our servers automatically log technical data including your IP address, device identifiers, browser fingerprint, and session activity. This data is collected via server logs, cookies, and similar tracking technologies as further described in Section 9.
• Payment Processing: When you make a deposit or request a withdrawal via Malaysian payment methods — including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, or GrabPay — transaction metadata including payment reference numbers, timestamps, and amounts is recorded in our systems. We do not store full bank account credentials on our servers; these are handled by our Payment Service Providers under separate data processing agreements.
• Third-Party Data Providers: In limited circumstances, xbet88 may receive data from third-party identity verification services, fraud detection providers, or publicly available sources (such as sanctions screening databases) in connection with our KYC and AML obligations.
• Cookies and Analytics: Our platform uses cookies and similar tracking technologies to collect usage data and improve user experience. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality.

xbet88 processes your personal data for the following purposes. We process only what is strictly necessary for each stated purpose and do not use your data for any purpose that is incompatible with those listed below:

• Account Management: To create, maintain, and administer your xbet88 Member account, including processing logins, managing preferences, and enabling access to platform features.
• Identity Verification (KYC): To verify your identity and age (minimum 21 years), confirm account ownership, and satisfy our regulatory Know Your Customer obligations. KYC verification is required before your first withdrawal and may be requested at other stages of the account lifecycle.
• Payment Processing: To process deposits and withdrawals via your chosen Malaysian payment method — whether DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, or cryptocurrency — and to maintain accurate financial records of all transactions in Malaysian Ringgit (MYR).
• Fraud Prevention and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes. This includes automated monitoring of transaction patterns and, where necessary, manual review by our compliance team.
• Platform Personalisation: To personalise your experience on xbet88, including surfacing relevant sports markets (such as Liga Super Malaysia or EPL matches), game recommendations, and promotional offers that correspond to your demonstrated preferences.
• Customer Support: To respond to enquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 live chat and email support channels.
• Responsible Gambling: To monitor for signs of problematic gambling behaviour and, where appropriate, to proactively communicate with Members about responsible gambling tools or to apply account restrictions in accordance with our Responsible Gambling Policy.
• Marketing Communications: With your consent, to send promotional communications about xbet88 offers, bonuses, and platform updates via email or on-platform notifications. You may withdraw consent at any time by updating your communication preferences in your Account Settings.
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.

xbet88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

xbet88 does not sell, rent, or trade your personal data to third-party marketers or advertising networks. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share transaction data with our Payment Service Providers to facilitate deposits and withdrawals. These providers include operators of the DuitNow network, FPX (Financial Process Exchange), and e-wallet platforms including Touch 'n Go eWallet, Boost, and GrabPay. All PSPs are contractually required to process data solely for payment processing purposes and in accordance with applicable data protection standards.
• Identity Verification Partners: KYC documents and identity data may be shared with third-party identity verification service providers engaged by xbet88 to conduct document verification, biometric matching, and sanctions screening. These providers operate as Data Processors under our instruction and are bound by data processing agreements.
• Fraud Detection and AML Services: We may share technical and transaction data with specialist fraud detection and anti-money laundering (AML) service providers for the purpose of detecting and preventing financial crime. Data shared in this context is subject to strict confidentiality obligations.
• Game and Software Providers: Certain technical and session data may be shared with game software providers whose products are integrated into the xbet88 platform, to the extent necessary for game delivery, RNG certification, and technical support.
• Legal and Regulatory Authorities: xbet88 will disclose personal data to competent authorities — including law enforcement agencies, regulatory bodies, and courts — where required by applicable law, court order, or valid legal process. We will, where permitted by law, notify the affected Member of such disclosure.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of xbet88 assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections remaining in place.

xbet88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following retention guidelines apply:

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to technical or operational constraints, it will be restricted from active processing pending secure deletion.

xbet88 uses cookies and similar technologies to operate the platform effectively, improve user experience, and gather aggregate analytics data. The following categories of cookies are used on the xbet88 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable session management (keeping you logged in during a session), security token validation, and payment flow integrity. These cookies cannot be disabled without impacting core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred sports leagues (for example, Liga Super Malaysia or EPL), and previously viewed game categories — to provide a personalised experience on return visits.
• Analytics Cookies: We use aggregated, anonymised analytics data to understand how Members interact with the platform, which pages are most visited, where users encounter difficulty, and how performance can be improved. This data does not identify individual Members.
• Security and Fraud Detection Cookies: Certain cookies assist our fraud prevention systems in detecting anomalous behaviour, such as unusual login patterns or multiple account access from a single device, which helps protect all Members on the platform.

You may manage cookie preferences through your web browser settings. Most modern browsers allow you to view, disable, or delete cookies stored on your device. Please note that disabling strictly necessary cookies will impair your ability to access and use the xbet88 platform. For further guidance on managing cookies, refer to your browser's help documentation.

xbet88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and xbet88 servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major international financial institutions. This protects your login credentials, payment information, and personal data from interception during transmission.
• Encrypted Data Storage: Sensitive personal data — including KYC documents and financial records — is stored in encrypted form on our servers. Encryption keys are managed separately from the encrypted data and are accessible only to authorised personnel.
• Access Controls: Access to personal data within xbet88 is governed by strict role-based access controls. Staff members access only the data they need to perform their specific role. All data access is logged and subject to periodic audit.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication (2FA) on their xbet88 accounts. Internal systems handling personal data also require 2FA for all staff access.
• Penetration Testing and Security Audits: xbet88 conducts periodic security assessments, including penetration testing by independent security specialists, to identify and remediate potential vulnerabilities in our systems and infrastructure.
• Data Breach Response: In the event of a personal data breach that poses a risk to Member rights and freedoms, xbet88 will notify affected Members and relevant supervisory authorities within the timeframes required by applicable data protection law. Affected Members will be informed of the nature of the breach and the steps they can take to protect themselves.

As a Member of xbet88, you hold a number of rights in respect of your personal data. xbet88 is committed to honouring these rights promptly and without undue bureaucratic friction. The rights available to you include:

To exercise any of the above rights, please contact us via live chat or at [email protected]. We will respond to all verifiable requests within 30 calendar days. We may ask you to verify your identity before processing your request to ensure we do not disclose your personal data to an unauthorised party.

The xbet88 platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect personal data from individuals under this age. Our registration process includes age declaration requirements, and all accounts are subject to age verification via KYC documentation before withdrawal privileges are activated.

If xbet88 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated funds will be managed in accordance with our Terms & Conditions, and the personal data of the underage individual will be deleted from our active systems as promptly as practicable, subject to any overriding legal retention obligations.

Parents or guardians who believe their child may have created an account on xbet88 are encouraged to contact us immediately at [email protected] so that we may take appropriate action without delay.

The xbet88 platform may contain references to or integrations with third-party services, including payment providers such as Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay. When you interact with these payment services, your data is processed by those providers in accordance with their own privacy policies, which are independent of this Policy.

xbet88 is not responsible for the privacy practices or data handling standards of third-party payment providers, game software developers, or any other external services that interact with the platform. We encourage you to review the privacy policies of any third-party service you use in connection with your xbet88 account.

Our contractual arrangements with all Data Processors include provisions requiring appropriate data protection standards to be maintained. However, once data leaves our direct control and is processed by a third-party provider for their own purposes (for example, completing a banking transaction via Maybank2u), that provider's own policies and security measures apply.

xbet88 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform operations. The "Last Updated" date displayed at the top of this document will be revised whenever material changes are made.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice by publishing a prominent notice on the xbet88 platform and, where appropriate, sending an email notification to affected Members at their registered email address.

Continued use of the xbet88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by xbet88, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the xbet88 platform. For privacy-related requests (data access, erasure, rectification), clearly state the nature of your request at the beginning of the chat session so it can be escalated appropriately.
• Email: For formal privacy requests or written complaints, please write to [email protected] with the subject line "Privacy Request" or "Data Protection Enquiry". Include your registered Member username and a clear description of your request to expedite handling.
• Response Timeframe: xbet88 aims to acknowledge all privacy-related enquiries within 72 hours and to provide a substantive response within 30 calendar days. For complex requests, we will notify you if additional time is required, with a revised timeline.

Where you are dissatisfied with xbet88's handling of your personal data or your rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. In Malaysia, data protection matters fall under the scope of the Personal Data Protection Act 2010 (PDPA), and relevant enquiries may be directed to the Department of Personal Data Protection (JPDP).