Privacy Policy xgo88 — Our Commitment to Protecting Your Data

This Privacy Policy is published by xgo88 ("we", "Platform" or "xgo88") and describes our privacy practices regarding the collection, use, disclosure, and protection of your personal information when you browse and use the xgo88 website and platform at https://xgo88.vin.

By registering an account, accessing, or continuing to use xgo88 services, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us for further assistance.

Xgo88 is an online casino entertainment platform operating under a recognised licence and in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection regulations. We take this responsibility seriously and continually strive to improve our privacy practices in line with the latest technological and legislative developments.

This Privacy Policy applies to all users of the xgo88 platform, including website visitors, prospective members, registered members, and former members whose data we retain in accordance with the conditions set out in this policy.

Xgo88 collects two main categories of information: information you provide directly and information collected automatically when you use our platform.

Information you provide directly:

• Registration information — full name, date of birth, phone number, email address, password (stored in encrypted form)
• Identity verification information (KYC) — a copy of MyKad or passport, selfie photo, proof of address such as a utility bill or bank statement
• Financial information — bank account number, bank name, account holder name for deposit and withdrawal processing purposes
• Communication information — records of correspondence with our support team via Live Chat, email, or other channels
• Preference information — language preferences, account settings, and notification preferences

Information collected automatically:

• Technical data — IP address, browser type and version, operating system, screen resolution
• Usage data — pages visited, session duration, games played, access time and date
• Transaction data — history of deposits, withdrawals, wagering, and wins on the platform
• Device data — device identifier, phone model, app version (if using the mobile app)
• Cookie data — information stored via cookies and other tracking technologies (see Section 5)

Xgo88 uses the personal information collected for the following purposes, and only for those purposes:

• Account management — creating, verifying, managing, and securing your member account
• Transaction processing — processing deposits, withdrawals, bonuses, and all financial transactions on the platform
• Identity verification (KYC) — fulfilling legal compliance requirements and preventing fraud and money laundering
• Customer support — handling inquiries, complaints, and technical support requests more efficiently
• Service communications — sending important notifications related to your account, transactions, and policy changes
• Marketing (with consent) — sending promotional information, bonus offers, and platform updates where you have consented to receive them
• Platform improvements — analyzing usage patterns to improve the design, performance, and user experience of the xgo88 platform
• Security & fraud prevention — detecting, investigating, and preventing fraudulent activity, account abuse, and security threats
• Legal compliance — fulfilling legal obligations, licensing regulations, and directions from relevant authorities

Xgo88 understands the importance of your privacy and does not share members' personal information indiscriminately. Information sharing only occurs in the following limited situations:

• Authorised service providers — technology partners, payment processors (payment gateways), cloud service providers, and third-party KYC companies that assist us in operating the platform. All such providers are bound by strict confidentiality agreements.
• Legal requirements — when required by court order, law enforcement agency investigation, or direction from a legitimate regulatory authority
• Fraud prevention — sharing information with other platforms or industry bodies for the purpose of detecting and preventing fraud and money laundering across platforms
• Business transfers — in the event of a company merger, acquisition, or asset sale, member information may be transferred to the new entity, subject to equivalent privacy protections
• With your consent — in any other situation where you have provided explicit consent

Xgo88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Mandatory cookies — required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance cookies — collecting information on how visitors use our platform (most frequently visited pages, error messages) to help us improve our services.
• Functional cookies — remembering your preferences such as language and display settings to provide a more personalized experience.
• Marketing cookies — used to display advertisements relevant to your interests. These cookies require your consent.

You can manage cookie settings through your browser preferences. However, disabling mandatory cookies may affect the functionality of the xgo88 platform. For more information on managing cookies, refer to your browser's documentation.

Xgo88 implements comprehensive technical and organisational security measures to protect members' personal information from unauthorised access, disclosure, alteration, or destruction.

• Data encryption in transit — all data transmitted using TLS 1.3 protocol and 256-bit SSL encryption
• Data encryption at rest — sensitive data stored in our databases is encrypted using AES-256 encryption standards
• Multi-layered access control — only authorised xgo88 staff with a legitimate business need may access members' personal data
• Continuous security monitoring — our threat detection system operates 24/7 to identify and respond to any suspicious activity
• Regular security audits — we conduct regular penetration testing and security audits by accredited independent cybersecurity firms
• Two-factor authentication (2FA) — available to all member accounts as an additional layer of protection

While we take all reasonable steps to protect your data, no security system is entirely foolproof. We encourage members to also take an active role in protecting their accounts by using strong, unique passwords and enabling two-factor authentication.

As an xgo88 member, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

Xgo88 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations.

• Active account data — retained for the duration your account remains active on the xgo88 platform
• Transaction & financial data — retained for a minimum of 7 years in accordance with anti-money laundering (AML) legal requirements and accounting regulations
• KYC & identity verification data — retained for a minimum of 5 years after account closure in accordance with licensing compliance requirements
• Support communication logs — retained for 2 years for quality control and dispute resolution purposes
• Marketing data — retained until you withdraw consent or request deletion
• Cookie & analytics data — retained according to cookie type; typically ranging from the current session up to a maximum of 24 months

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised in accordance with xgo88's internal procedures, which comply with industry standards.

In the course of its operations, xgo88 may need to transfer or store members' personal data on servers located outside Malaysia. This occurs when we utilise cloud service providers or technology partners based in other countries.

In every case of international data transfer, xgo88 ensures that:

• The recipient country or region has a level of data protection equivalent to or exceeding Malaysia's standards
• Data processing agreements incorporating standard data protection clauses are in place with all third-party service providers
• All transfers comply with the requirements of PDPA 2010 and the guidelines of the Personal Data Protection Commissioner of Malaysia
• Transferred data is encrypted in transit using the latest industry-standard security protocols

If you would like more information about the safeguards in place for international data transfers related to your account, please contact our privacy team.

Xgo88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Members will be notified of any material changes via:

• In-platform notification or email to the address registered in your account
• Updates the "Last Updated" date displayed at the top of this page
• In the event of highly significant changes, we may request renewed consent from members

We encourage you to review this Privacy Policy page periodically to ensure you stay informed about how we protect your data. Continued use of the xgo88 platform after any changes are published will be considered acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by xgo88, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the xgo88 platform — the fastest way to get a response
• Privacy Email: [email protected] (please state the subject: "Data Privacy Enquiry")
• FAQ: Browse our FAQ page for answers to commonly asked privacy-related questions

The xgo88 privacy team is committed to responding to every personal data enquiry within 14 working days from the date the request is received. For more complex requests, we will notify you if additional time is required.