Xim88 takes our responsibility to protect the privacy and personal data of every user seriously. This document transparently explains how we collect, use, store, and protect your information — written in plain language, not confusing legal jargon.
Quick Summary: xim88 only collects data necessary to operate the platform, process payments, and meet legal requirements. We do not sell your personal data to any third party for marketing purposes. All data is stored with up-to-date encryption and fully protected.
This Privacy Policy is issued by xim88 ("we", "Platform" or "xim88") and applies to all users who access or use our platform through the official website xim88.win or the xim88 mobile app available for Android and iOS.
We are committed to complying with applicable data protection laws and handling your personal information in a responsible, transparent, and secure manner. This policy explains your rights as a user and our obligations as a data controller.
By using the xim88 platform, you agree to the collection and use of your information in accordance with this Privacy Policy. If you disagree with any part of this policy, please discontinue use of our platform.
Xim88 adopts a "privacy by design" approach — meaning data protection is not an afterthought, but built directly into how we develop and operate the platform from the ground up. Every new feature we build is assessed for privacy impact before launch.
Xim88 collects various types of information depending on how you interact with our platform. Below is a detailed breakdown of the information we collect:
When you register, verify your account, or contact customer support, you provide us with:
When you use the xim88 platform, our systems automatically record:
In certain situations, we may receive your information from trusted third parties, including identity verification service providers, payment processors such as FPX and e-wallet providers, as well as bodies required for anti-money laundering compliance purposes.
| Data Category | Example | Main Purpose |
|---|---|---|
| Identity | Name, MyKad, date of birth | KYC verification, fraud prevention |
| Contact | Email, phone number | Communications, account notifications |
| Financial | Bank account, e-wallet | Deposit and withdrawal processing |
| Technical | IP, device, browser | Security, fraud prevention |
| Transactions | Game history, deposits | Legal compliance, support |
Xim88 uses your personal data only for legitimate and stated purposes. We do not use your data beyond the scope described here without first obtaining your additional consent.
Your data is used to create and manage your xim88 account, verify your identity through the KYC process, securely process deposits and withdrawals, provide access to all games and platform features, and send important notifications related to your account.
Platform security and the protection of all users is our top priority. Your data is used to detect and prevent unauthorized access, identify suspicious or potentially fraudulent activity, comply with anti-money laundering (AML) legal requirements, and ensure only eligible users can access the platform.
Aggregated and anonymised data is used to understand platform usage patterns, identify features that need improvement, develop more relevant games and promotions for Malaysian players, and ensure the platform's technical performance remains optimal.
With your consent, we use your email address and phone number to send promotional information, bonus offers, and platform updates. You may opt out of marketing communications at any time via the unsubscribe link in our emails or by contacting our support team.
Note: Important account notifications — such as withdrawal confirmations, security alerts, and changes to terms — cannot be unsubscribed from, as they are part of the core services of the xim88 platform.
Xim88 uses secure server infrastructure with multi-layered protection to store your personal data. Below are the key security measures we have in place:
All data transmitted between your device and xim88's servers is protected with 256-bit SSL/TLS encryption — the same standard used by major banking institutions in Malaysia. Sensitive data such as financial information and KYC documents are stored with additional encryption at the database level.
Access to users' personal data is strictly limited to staff who require it to perform their duties. All access is logged and audited regularly. Staff who handle user data are required to sign binding confidentiality agreements.
Xim88 retains your personal data for as long as your account is active or as long as needed to provide our services. To comply with legal and regulatory requirements, financial transaction records and KYC documents are retained for a minimum of 5 years after account closure. Data that is no longer required will be securely deleted in accordance with established procedures.
Xim88 has a clear incident response procedure. In the event of a data breach affecting your information, we will notify you within a reasonable timeframe via your registered email and take immediate steps to limit the damage and prevent similar incidents in the future.
Security Best Practices: While we implement robust technical protections, the security of your account also depends on your own actions. Please use a strong and unique password, enable two-factor authentication (2FA) where available, and never share your login credentials with anyone.
Xim88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, there are specific situations where we may need to share your information with carefully selected parties:
We work with third-party service providers that help us operate the platform, including payment processors (FPX, DuitNow, Touch 'n Go eWallet, GrabPay), KYC identity verification service providers, cloud computing providers that store our data, and casino game software providers. All these providers are bound by strict data processing agreements and may only use your data for purposes we specify.
Xim88 will disclose your personal data when required by law, court order, or directive from a relevant regulatory authority. This includes compliance with anti-money laundering (AML) requirements, counter-terrorism financing obligations, and cooperation with lawful law enforcement investigations.
In the event of a merger, acquisition, or business asset transfer, user data may be transferred as part of that transaction. You will be notified in advance, and the receiving party is bound to honour this Privacy Policy.
Warning: xim88 will never ask for your bank account details, password, or OTP via email, phone, or social media. If you receive any such communication claiming to be from xim88, please disregard it and report it to our support team immediately.
Xim88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our platform.
You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features. Essential cookies cannot be disabled as they are required for platform security and core functionality.
As a xim88 user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via Live Chat or the official xim88 email.
You have the right to request a copy of the personal data we hold about you at any time.
If your data is inaccurate or out of date, you have the right to request a correction promptly.
You may request deletion of your personal data, subject to applicable legal retention requirements.
You may request that we restrict the processing of your data in certain situations as defined by law.
You have the right to receive your data in a machine-readable format for transfer to another platform.
You may object to the processing of your data for direct marketing purposes at any time without providing a reason.
xim88 will process your data rights request within 30 calendar days. If your request is complex or you have submitted multiple requests, we may extend this period by up to 60 days with prior notice.
Xim88 is a gambling platform intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
If we find that we have collected data from an individual under 18 years of age without proper age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered a xim88 account are invited to contact our support team immediately.
Important Notice: Gambling by individuals under age is strictly prohibited on the xim88 platform. We encourage parents to use parental control software to prevent children from accessing gambling websites.
Xim88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or newly introduced platform features. Each new version will include an updated "Last Updated" date at the top of this document.
For significant changes that affect how we use your personal data, we will send a notice to your registered email address at least 14 days before the changes take effect. For minor changes such as clarifications or language corrections, notice will be provided via an update to this page only.
Continued use of the xim88 platform after the effective date of any policy change will be considered your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our privacy team via:
We value your feedback and are committed to addressing any privacy concerns seriously and promptly. Our dedicated team will respond to all privacy-related enquiries professionally and transparently.
For enquiries related to responsible gaming, deposit limits or temporary self-exclusion, please visit our Responsible Gaming page or read our Terms and Conditions for more information.
Every layer of protection we build is to ensure your personal and financial information remains safe and secure at all times.
All communications between your device and xim88's servers are protected with 256-bit SSL encryption — the same security standard used by major banks in Malaysia. No one can intercept your data while it is in transit.
Our KYC process uses the latest document verification technology to ensure every user's identity is accurately verified. Your documents are processed in a secure environment that is inaccessible to unauthorized parties.
Your financial information is processed through payment channels integrated with PCI-DSS security standards. We do not store your credit card number directly — all transactions are handled by licensed payment processors.
Xim88 has never and will never sell your personal data to advertisers or third-party data brokers. Your data is used solely for the purposes you have consented to — nothing more.
The xim88 Privacy Policy is designed to comply with relevant data protection requirements. We continuously monitor legislative changes and update our privacy practices to ensure ongoing compliance.
Xim88 has a dedicated team to handle privacy-related enquiries and complaints. Every data rights request is processed professionally and within the stipulated timeframe, with no lengthy waiting.