Xxx888 Privacy Policy – Personal Data Protection for Malaysian Members

1Introduction & Scope of xxx888's Privacy Policy

Xxx888 ("we", "platform") is an online entertainment service provider operating for users in Malaysia. We take the protection of members' personal data very seriously. This Privacy Policy is prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and clearly explains how we manage your personal data.

This policy applies to all personal data collected by xxx888 across various channels, including the main web platform, mobile applications, customer support systems, marketing communication channels, and financial transaction processing systems.

By registering as an xxx888 member, accessing our platform, or providing us with any personal information, you consent to the collection, processing, and use of your personal data as described in this Privacy Policy.

2Types of Personal Data Collected

Xxx888 collects various categories of personal data depending on how you interact with our platform. The table below provides a full breakdown of the data we collect:

3How xxx888 Collects Personal Data

Xxx888 collects your personal data through the following channels:

• Direct account registration — when you complete the registration form on the xxx888 platform with your personal details, phone number, and email address.
• Identity verification (KYC) — when you submit identity documents such as your MyKad or passport to fulfil legal compliance requirements.
• Financial transactions — when you make a deposit (min. RM20) or withdrawal using DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, Maybank2u, or CIMB Clicks.
• Automated platform usage — collected via cookies, server logs, and other tracking technologies as you browse or play on the xxx888 platform.
• Customer support interactions — when you contact the xxx888 support team via Live Chat, email, or WhatsApp.
• Approved third-party sources — in certain cases, we may receive information from identity verification or financial background check service providers licensed in Malaysia.

4Purposes for Processing Your Personal Data

Xxx888 processes your personal data on one or more of the following bases: performance of a contract (services you have subscribed to), legal obligations (PDPA, AML/KYC requirements), the legitimate interests of xxx888, and/or your explicit consent. The purposes of processing are as follows:

1. Member account management — registration, verification, maintenance, and security of your xxx888 account.
2. Financial transaction processing in MYR — deposits, withdrawals, chargebacks, and winnings settlements via approved Malaysian payment methods.
3. Legal and regulatory compliance — requirements under the PDPA 2010, anti-money laundering (AML) legislation, and age verification (21 years and above).
4. Fraud detection and platform security — identifying and preventing fraudulent activity, multi-account abuse, and other security threats.
5. Gaming service delivery — allowing you to play slots, live casino, lottery, and bet on Malaysia Super League football and All England badminton at xxx888.
6. VIP Rewards Programme and promotions — managing VIP membership tiers, calculating reward points, and delivering promotional offers relevant to your gaming activity.
7. Responsible gaming — monitoring gameplay patterns to identify signs of problem gambling and providing appropriate self-control tools.
8. Platform improvement — analysing aggregated (non-individual) usage data to improve user experience, platform performance, and xxx888's game offerings.
9. Marketing communications (with consent) — sending you information about promotions, bonuses, and new offers that may interest you, provided you have consented to receive them.

5Data Sharing with Third Parties

Xxx888 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the following limited circumstances, xxx888 may share data where necessary:

• Contracted service providers — technology infrastructure providers, cloud servers, payment gateways (DuitNow, Touch 'n Go eWallet, GrabPay), and analytics services that process data on behalf of xxx888 under strict confidentiality agreements.
• Licensed game providers — game development companies that provide slots, live casino, and table games for the xxx888 platform, requiring minimal session data to function.
• Malaysian legal authorities — where required by law, court order, police investigation, the Malaysia Department of Insolvency, or other government agencies with legal authority.
• Identity verification service providers — licensed verification bodies in Malaysia that assist xxx888 in meeting KYC and AML requirements.

All third parties receiving personal data from xxx888 are required to uphold data protection standards equivalent to or higher than those prescribed by Malaysia's PDPA 2010. xxx888 is not responsible for the privacy practices of third parties that you access directly outside our platform.

6xxx888 Data Security Measures

Xxx888 employs multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

• Data encryption in transit: All communications between your browser or app and xxx888's servers are protected by Transport Layer Security (TLS) 1.3 protocol with AES 256-bit encryption.
• Data encryption at rest: Sensitive personal data stored in xxx888's database is encrypted using industry-standard encryption.
• Access control: Access to members' personal data is granted only to xxx888 staff with a legitimate business need, with a full audit log maintained for every access.
• Two-factor authentication (2FA): xxx888 provides and encourages the use of 2FA for all member accounts, adding an extra layer of security.
• 24/7 security monitoring: A real-time threat detection system monitors all activity on the xxx888 platform around the clock to identify and respond to security threats.
• Regular penetration testing: xxx888 conducts comprehensive security testing by independent specialists at least once every six months.

7Personal Data Retention Period

Xxx888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, meet legal obligations, or resolve any disputes:

Upon expiry of the retention period, your personal data will be securely deleted or anonymised within a reasonable timeframe in accordance with xxx888's approved data deletion procedures.

8Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and xxx888's Privacy Policy, you have the following rights regarding your personal data:

9Cookie Policy

The xxx888 platform uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and analyse platform usage patterns. The following are the types of cookies used by xxx888:

Essential cookies cannot be disabled as they are required for the basic functionality of the xxx888 platform. For functional and analytics cookies, you can manage your cookie preferences through your browser. Please note that disabling certain cookies may affect your experience on xxx888.

10Cross-Border Data Transfers

Xxx888 members' personal data is stored primarily on servers located in Malaysia and the Asia-Pacific region. In limited cases, data may be processed by service providers located outside Malaysia — for example, global cloud infrastructure providers that support the technical operations of the xxx888 platform.

In all such cases, xxx888 ensures that:

• Data transfers are only carried out to countries or entities that provide adequate data protection.
• A legally binding data processing agreement exists between xxx888 and all third-party data processors.
• All recipient parties adhere to data protection standards equivalent to Malaysia's PDPA 2010.

11Child & Minor Protection

Xxx888 is an online entertainment platform exclusively for individuals aged 21 and above only. We do not knowingly collect or process personal data from individuals under the age of 21.

All new account registrations require age verification. Should xxx888 discover that personal data of an individual under the age of 21 has been collected inadvertently, we will take the following steps immediately:

• The account in question will be suspended immediately while an investigation is carried out.
• All collected personal data will be promptly deleted once verified.
• Any remaining account balance will be returned to the original deposit method in accordance with xxx888's standard procedures.

If you are aware that someone under the age of 21 has registered for or is using the xxx888 platform, please contact us immediately at support@xxx888.run.

12Amendments to This Privacy Policy

Xxx888 reserves the right to review and amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business developments. When amendments are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• Registered members will be notified of significant changes via email or in-app notifications on xxx888.
• For amendments that require fresh consent, we will request your consent before the changes take effect on your account.

It is your responsibility to review this Privacy Policy page periodically. Your continued use of the xxx888 platform after any amendments take effect constitutes your acceptance of the updated Policy.

13Contact xxx888's Data Privacy Officer

For any enquiries, complaints, or requests relating to this Privacy Policy or the processing of your personal data by xxx888, please reach us through the following channels: