This Privacy Policy ("Policy") describes how xe8 ("xe8", "we", "us", "our") collects, uses, discloses, and protects the personal data of players and visitors who access the xe8 platform at xe8.net ("Platform").
By registering an Account on the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an Account or use the Platform.
This Policy should be read together with our Terms and Conditions.
By registering an Account on the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an Account or use the Platform.
This Policy should be read together with our Terms and Conditions.
About This Policy
- 1.1This Policy applies to all personal data collected by xe8 through your use of the Platform, including data collected during account registration, identity verification (KYC), deposits, withdrawals, gameplay, customer support interactions, and your visits to xe8.net.
- 1.2xe8 adheres to internationally recognised data protection principles, including: General, Notice and Choice, Disclosure, Security, Retention, Data Integrity, and Access.
- 1.3This Policy does not cover the data practices of third-party Game Providers, payment processors, or other external services linked to or integrated within the Platform. Please review their respective privacy policies directly.
Data Controller
- 2.1The data controller responsible for your personal data is:
xe8
No 168, Wisma Pantai, Jln 4/83A, Off Jln Pantai Baharu, 59200 Kuala Lumpur, Malaysia
Email: xe8-support@gaming.com - 2.2For all data protection enquiries, corrections, or access requests, please contact us at xe8-support@gaming.com with the subject line "Data Privacy Request".
Information We Collect
3.1 Information You Provide Directly
When you register an Account, complete KYC verification, make deposits or withdrawals, or contact our support team, we collect:
- 3.1.1Identity data — full legal name, date of birth, nationality, and gender.
- 3.1.2Contact data — email address, Malaysian mobile number, and residential address.
- 3.1.3Identity verification documents — scanned copies or photographs of your Malaysian MyKad, passport, or driving licence; proof of address (utility bill or bank statement); and proof of payment method ownership (e-wallet screenshot or bank statement).
- 3.1.4Financial data — e-wallet account identifiers, deposit and withdrawal transaction records, account balance history, and bonus activity.
- 3.1.5Support communications — records of live chat transcripts, emails, and complaint correspondence submitted to xe8 customer support.
- 3.1.6Responsible gambling data — any deposit limits, loss limits, cooling-off periods, or self-exclusion requests that you set via Account Settings.
3.2 Information We Collect Automatically
When you visit or use the Platform, we automatically collect:
- 3.2.1Technical data — IP address, browser type and version, operating system, device type, screen resolution, and time zone.
- 3.2.2Usage data — pages visited, session duration, game sessions played (game name, stakes, duration, outcome), bet history, and navigation paths within the Platform.
- 3.2.3Cookie and tracking data — as described in Section 6 of this Policy.
3.3 Information from Third Parties
- 3.3.1Payment processors — Touch 'n Go eWallet, Maybank2u, Boost, GrabPay, and DuitNow may provide xe8 with transaction confirmation data necessary to credit or debit your Account balance.
- 3.3.2Identity verification services — where xe8 uses a third-party identity verification provider to assist with KYC, that provider may return verification results and risk assessments to xe8.
- 3.3.3Fraud and AML screening — xe8 may receive data from fraud prevention databases or sanctions screening services as part of its anti-money-laundering compliance obligations.
How We Use Your Information
4.1 Account and Platform Operations
- 4.1.1Create and manage your player Account.
- 4.1.2Process deposits and withdrawals through your chosen e-wallet payment method.
- 4.1.3Verify your identity (KYC) and maintain compliance with anti-money-laundering (AML) obligations.
- 4.1.4Provide access to live dealer casino games, online slots, fishing games, table games, and 4D lottery services.
- 4.1.5Administer and track bonus and promotional offers claimed through your Account.
- 4.1.6Handle customer support enquiries, complaints, and dispute resolution.
4.2 Compliance and Legal Obligations
- 4.2.1Verify player age (21+ requirement) and eligibility.
- 4.2.2Conduct sanctions screening and fraud detection checks.
- 4.2.3Monitor for and investigate suspected prohibited conduct as defined in our Terms and Conditions.
- 4.2.4Fulfil reporting obligations to applicable regulatory or law enforcement authorities where required by law.
- 4.2.5Enforce responsible gambling tools and self-exclusion requests.
4.3 Platform Improvement and Analytics
- 4.3.1Analyse aggregated, anonymised usage data to improve the Platform's performance, design, and game offering.
- 4.3.2Detect and resolve technical errors, security vulnerabilities, and service disruptions.
4.4 Marketing Communications
- 4.4.1Where you have provided consent, xe8 may send you promotional offers, bonus notifications, and platform updates via email or SMS.
- 4.4.2You may withdraw your marketing consent at any time by contacting us at xe8-support@gaming.com or using the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing conducted before the withdrawal.
Legal Basis for Processing
xe8 processes your personal data on the following legal bases:
- 5.1Consent — for marketing communications and non-essential cookies, where you have given explicit consent.
- 5.2Contractual necessity — to perform our obligations under the Terms and Conditions that govern your Account, including processing deposits, withdrawals, and gameplay.
- 5.3Legal obligation — to comply with anti-money-laundering (AML) regulations, KYC requirements, age verification obligations, and any applicable reporting requirements imposed by law.
- 5.4Legitimate interests — to detect and prevent fraud, conduct security monitoring, maintain Platform integrity, and improve our services, where those interests are not overridden by your data protection rights.
Cookies and Tracking Technologies
6.1 What Are Cookies
- 6.1.1Cookies are small text files placed on your device by the Platform when you visit xe8.net. They allow the Platform to recognise your device, remember your preferences, and track your session activity.
6.2 Types of Cookies We Use
- 6.2.1Essential cookies — required for the Platform to function. They enable secure login sessions, maintain your Account balance display, and keep your game session active. These cannot be disabled.
- 6.2.2Analytics cookies — used to collect anonymised data on how players navigate and use the Platform, helping us improve performance and user experience.
- 6.2.3Preference cookies — remember your language, display settings, and game preferences to personalise your experience on return visits.
- 6.2.4Security cookies — support fraud detection, bot prevention, and authentication security measures.
6.3 Managing Cookies
- 6.3.1You may configure your browser to block or delete cookies at any time. However, disabling essential cookies will impair or prevent access to the Platform and your Account. Instructions for managing cookies are available in your browser's help documentation.
Sharing Your Information
7.1 When We Share Your Data
xe8 does not sell your personal data to third parties. We may share your data only in the following circumstances:
- 7.1.1Payment processors — Touch 'n Go eWallet, Maybank2u, Boost, GrabPay, and DuitNow receive the transaction data necessary to process your deposits and withdrawals.
- 7.1.2KYC and identity verification providers — third-party verification services receive your identity documents and personal information for the purpose of completing mandatory KYC verification.
- 7.1.3Game Providers — third-party game software providers receive your Account session token and bet activity data necessary to deliver live dealer casino games, slots, fishing games, and table games within the Platform.
- 7.1.4Fraud prevention and AML services — we may share limited personal data with fraud detection and sanctions screening providers as part of our compliance obligations.
- 7.1.5Regulatory and law enforcement authorities — xe8 will disclose personal data to relevant authorities where required to do so by applicable law, court order, or regulatory directive.
- 7.1.6Business transfers — in the event of a merger, acquisition, or sale of all or substantially all of xe8's business assets, your personal data may be transferred to the successor entity, subject to the same data protection obligations.
7.2 Third-Party Data Processors
- 7.2.1All third parties with whom xe8 shares personal data are contractually required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection laws.
Data Retention
- 8.1xe8 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.
- 8.2Active Account data — retained for the full duration of your Account and for 7 years following Account closure, in accordance with applicable anti-money-laundering (AML) record-keeping requirements.
- 8.3KYC and identity documents — retained for a minimum of 7 years from Account closure, as required by AML regulations, regardless of the reason for closure.
- 8.4Transaction records — deposit, withdrawal, and bet history are retained for a minimum of 7 years from the date of each transaction.
- 8.5Support communications — customer support records and complaint correspondence are retained for 3 years from the date of the last interaction.
- 8.6Analytics data — anonymised usage data may be retained indefinitely for aggregate platform analytics. Data used for analytics is de-identified and cannot be linked back to an individual player.
- 8.7Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
Security Measures
- 9.1xe8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- (a)HTTPS encryption for all data transmitted between your device and the Platform;
- (b)Encrypted storage of sensitive Account data and KYC documents;
- (c)Access controls limiting personal data access to authorised personnel with a legitimate business need;
- (d)Regular security assessments and vulnerability monitoring; and
- (e)One-time password (OTP) authentication for Account login and sensitive Account changes.
- 9.2While xe8 takes all reasonable steps to protect your data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your Account login credentials.
- 9.3If you suspect your Account has been compromised, contact xe8 support immediately at xe8-support@gaming.com.
Your Data Protection Rights
You have the following rights in relation to your personal data held by xe8:
- 10.1Right of Access. You may request a copy of the personal data xe8 holds about you. Access requests must be submitted in writing to xe8-support@gaming.com with the subject line "Data Access Request". xe8 will respond within 21 days of receiving a valid request.
- 10.2Right to Correction. If any personal data we hold about you is inaccurate, incomplete, misleading, or not up to date, you may request a correction. Simple corrections (such as contact details) may be made directly via Account Settings. For corrections to KYC data, contact support with supporting documentation.
- 10.3Right to Withdraw Consent. Where xe8 processes your data on the basis of consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal. Note that withdrawing consent for essential data processing (e.g. KYC) will result in Account closure, as xe8 cannot operate your Account without that data.
- 10.4Right to Prevent Processing for Direct Marketing. You may request that xe8 cease using your personal data for direct marketing purposes at any time, free of charge, by contacting xe8-support@gaming.com or using the unsubscribe link in any marketing email.
- 10.5Limitations on Rights. Your rights may be subject to limitations where xe8 is required by law to retain or process your data (for example, under AML regulations), or where the exercise of your rights would adversely affect the rights of other individuals.
- 10.6Right to Raise a Formal Complaint. If you believe xe8 has failed to handle your personal data in accordance with this Policy, you have the right to raise a formal complaint directly with xe8's Data Privacy team at xe8-support@gaming.com with the subject line "Formal Privacy Complaint". xe8 will investigate and provide a written response within 21 days.
Third-Party Links
- 11.1The Platform may contain links to third-party websites, including payment provider portals and Game Provider interfaces. Once you leave the xe8 Platform by following such a link, this Policy no longer applies to your data.
- 11.2xe8 is not responsible for the privacy practices of third-party websites and recommends that you review their respective privacy policies before submitting any personal data to those sites.
Changes to This Policy
- 12.1xe8 reserves the right to update this Privacy Policy at any time. Material changes — those that affect your rights or how xe8 uses your data — will be communicated to registered players via email at least 7 days before taking effect.
- 12.2Non-material changes (including typographical corrections and clarifications that do not alter your rights) will take effect immediately upon publication on xe8.net/privacy/.
- 12.3The version date at the top of this Policy indicates when it was last updated. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the xe8 Data Privacy team:
- 13.1Email: xe8-support@gaming.com (subject line: "Data Privacy Request")
- 13.2Post: No 168, Wisma Pantai, Jln 4/83A, Off Jln Pantai Baharu, 59200 Kuala Lumpur, Malaysia
- 13.3xe8 will acknowledge your request within 3 business days and provide a substantive response within 21 days, except where requests are particularly complex or numerous, in which case we will notify you of an extended timeline.
- 13.4You may also use our Contact page for general enquiries, or visit our Responsible Gambling page if your concern relates to problem gambling support.