Official Documents

Privacy Policy xim88 – Personal Data Protection

Xim88 takes your privacy seriously. This document transparently explains how we collect, use, store and protect your personal information as a player on our platform.

Our Privacy Commitment

Your data is not our product. xim88 never sells or rents your personal information to any third party for marketing purposes.

Updated: January 2026
256-bit SSL Encryption

All data transmitted between your device and xim88 servers is protected by industry-standard SSL encryption, ensuring your sensitive information cannot be intercepted by third parties.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and an intrusion detection system (IDS) operating around the clock.

Strict Access Controls

Only authorised xim88 staff may access your personal data, and every access is logged for internal security audit purposes.

No Data Sales

Xim88 does not sell, rent or share your personal data with third parties for marketing or advertising purposes without your explicit consent.

Malaysia PDPA Compliance

The xim88 Privacy Policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a data subject are fully respected.

Your Data, Your Control

You have the right to access, correct, or request deletion of your personal data at any time through your account settings or by contacting our support team.

1Introduction

Xim88 ("we", "Platform") is committed to protecting the privacy of all users who access and use our services. This Privacy Policy clearly explains how we handle your personal data when you register, login, make transactions or interact with any part of the xim88 platform.

As an online gaming platform operating in Malaysia, xim88 fully complies with the requirements of the Personal Data Protection Act 2010 (PDPA) and its regulations. We take a responsible and transparent approach to all matters relating to our users' personal data.

By using the xim88 platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform.

This Privacy Policy should be read together with Terms and Conditions xim88 which also contains provisions relating to privacy and user protection.

2Information We Collect

2.1 Information You Provide Directly

During the registration process and while using the platform, you provide us with the following information:

  • Full name as shown on official identification documents
  • Date of birth for age verification
  • Active mobile phone number
  • A valid email address
  • Bank account or e-wallet details for deposit and withdrawal purposes
  • Identity documents (national ID, passport) for the KYC process
  • Current residential address

2.2 Information Collected Automatically

When you use the xim88 platform, our systems automatically record the following technical information:

  • Your device's IP address
  • Browser type and operating system version
  • Mobile device information including model and unique device identifier
  • Session activity logs including login time, logout time and game duration
  • Records of all financial transactions on the platform
  • State-level geolocation data for operational area verification

2.3 Information from Third-Party Sources

In certain circumstances, we may receive additional information about you from trusted sources such as third-party identity verification service providers, financial institutions for transaction verification, and industry fraud prevention agencies.

Data Type Purpose of Collection Retention Period
Identity Information Account registration & KYC verification Throughout the active account period + 7 years
Financial Data Deposit & withdrawal processing 7 years after transaction
Activity Logs Security & fraud detection Rolling 2 years
Technical Data Platform improvements & technical support Rolling 12 months
Cookies & Analytics User experience & site performance Up to 13 months

3How We Use Your Data

Xim88 uses your personal data only for legitimate and necessary purposes. The following are the primary uses of the data we collect:

3.1 Platform Operations

  • Create and manage your player account
  • Process deposits, withdrawals and all financial transactions
  • Provide access to xim88 games and services
  • Verify your identity to ensure account security

3.2 Security & Compliance

  • Detect and prevent fraudulent activity, money laundering and platform abuse
  • Meet applicable legal and regulatory obligations
  • Investigate user complaints and disputes
  • Ensure compliance with age restrictions and operating territory requirements

3.3 Service Improvements

  • Analyse usage patterns to improve the player experience
  • Develop new features relevant to the needs of Malaysian users
  • Optimise platform performance across various device types

3.4 Communications

  • Send important notices related to your account and transactions
  • Notify you about promotions and bonuses (subject to your notification preferences)
  • Provide effective customer support

4Information Sharing

Xim88 does not sell or rent your personal data to any third party. However, we share information in the following limited situations:

4.1 Service Providers

We share necessary data with third-party service providers who help us operate the platform, including:

  • Payment gateway providers for transaction processing
  • Identity verification companies for the KYC process
  • Cloud service providers storing data in a secure environment
  • Licensed game providers integrating content into the xim88 platform

All these third parties are bound by strict data protection agreements and may only use your data for purposes we have specified.

4.2 Legal Requirements

Xim88 will disclose your personal information if required by Malaysian law, court order, or a valid request from regulatory agencies such as Bank Negara Malaysia or other relevant authorities.

4.3 Business Transfers

In the event of a merger, acquisition, or business asset transfer, user data may be transferred to the new entity. You will be notified in advance and given the option to opt out where applicable.

xim88 never sharing your personal data with advertisers, marketing companies or third-party data brokers without your consent.

5Data Security

Protecting your personal data is xim88's top priority. We implement multiple layers of technical and organisational safeguards to keep your information secure:

5.1 Technical Measures

  • 256-bit SSL/TLS Encryption – all communications between the platform and your device are fully encrypted
  • Two-Factor Authentication (2FA) – available for an additional security layer during login
  • 24/7 Monitoring – our systems are monitored around the clock to detect any unusual activity
  • Penetration Testing – the xim88 platform undergoes regular security testing by independent experts
  • Secure Data Backup – data is regularly backed up to separate secure locations

5.2 Organisational Measures

  • Role-based access control (RBAC) for all staff
  • Mandatory data security training for all xim88 employees
  • Strict password storage policy for internal systems
  • A clear incident response procedure in the event of a data breach

5.3 Breach Notification

In the event of a data breach that may affect your personal information, xim88 will notify you within 72 hours after we become aware of it, in line with international data protection best practices.

6Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you browse the xim88 platform. They help us recognise you on return visits, save your preferences and keep the platform running smoothly.

6.2 Types of Cookies We Use

  • Essential Cookies – required for core platform functions such as login sessions and security. Cannot be disabled.
  • Performance Cookies – collects anonymous data on how users interact with the platform for improvement purposes.
  • Functional Cookies – stores your preferences such as language, currency and display settings.
  • Analytics Cookies – helps us understand platform traffic and usage patterns in an aggregated and anonymous manner.

6.3 Cookie Management

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the xim88 platform. Essential cookies cannot be disabled as they are required for platform security.

7Data Retention Period

Xim88 retains your personal data only for as long as necessary to fulfil the purpose of its collection or as required by Malaysian law. Generally:

  • Active account data is retained for the duration your account remains active
  • Financial transaction records are retained for 7 years after the transaction date, in accordance with Malaysia's financial legal requirements
  • KYC data is retained for 7 years after account closure
  • Customer support communication logs are retained for 3 years
  • Technical data and activity logs are retained for 12 to 24 months mobile

Once the retention period expires, your data will be securely deleted or anonymised using industry-standard procedures.

8Your Rights as a Data Subject

Under Malaysia's PDPA, you have the following rights regarding your personal data held by xim88:

Right of Access

Request a copy of your personal data held by us at any time.

Right to Rectification

Request correction of inaccurate or outdated data in our records.

Right to Erasure

Request deletion of your personal data, subject to our legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Request your data in a machine-readable format for transfer to another platform.

Right to Restriction

Request restriction of your data processing under certain circumstances provided by law.

To exercise any of the above rights, you may contact our Data Protection Officer team via email at [email protected] or via the platform's Live Chat. We will process your request within 21 working days.

9Children's Privacy

The xim88 platform is strictly restricted to individuals aged 18 years and above. We do not intentionally collect or process personal data of individuals under 18 years of age.

If we discover that personal data of someone under 18 has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered on our platform are advised to contact us immediately.

10Privacy Policy Amendments

Xim88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform service improvements. Any material amendments will be communicated to you via:

  • Prominent notice on the xim88 platform homepage
  • Email to your registered address at least 7 days before the changes take effect
  • In-app notifications on the xim88 mobile app

The "Last Updated" date at the top of this document will always reflect the latest version of our Privacy Policy. Continued use of the xim88 platform after amendments take effect constitutes your acceptance of the updated policy.

11Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the xim88 Data Protection Officer:

Privacy Email

[email protected] – Response within 21 working days for personal data rights requests.

Live Chat 24/7

For general privacy enquiries, our support team is available 24 hours a day, 7 days a week.

For frequently asked questions relating to privacy and account security, also visit the FAQ us.

Your Data Is Safe With Us

Play Responsibly at xim88

With industry-grade data protection and an unwavering commitment to player privacy, xim88 is a platform you can trust. Register now and enjoy a safe, rewarding gaming experience.

256-bit SSL Encryption Malaysia PDPA Compliance No Data Sales 24/7 BM Support
Bahasa Melayu