Xx68 Privacy Policy – Personal Data Protection for Malaysian Members

Xx68 ("we", "platform", "company") operates as an online betting and casino platform serving users in Malaysia. We understand that when you register and use the xx68 platform, you are entrusting us with valuable personal information — a responsibility we take seriously.

This Privacy Policy ("Policy") sets out in detail how xx68 collects, stores, uses, discloses, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

This policy applies to all information collected through the xx68 platform – including the website, mobile app (where available), and all our official communication channels including Live Chat and support email.

Xx68 collects personal data through various means — directly from you, automatically as you use the platform, and in some cases, from legitimate third parties.

Your personal data is used by xx68 solely for legitimate, necessary purposes directly related to delivering our platform services to you. We never use your data for purposes beyond the scope outlined below:

• Account Management: Creating, verifying, and managing your xx68 account, including the KYC (Know Your Customer) process required by law.
• Transaction Processing: All deposits in MYR (RM) and withdrawals to your local payment method are processed securely and accurately.
• Service Delivery: Enables you to access all games and features on the xx68 platform — from jackpot slots and Live Casino to EPL and Malaysia Super League Sports Betting, badminton, e-sports, and more.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and any other illegal activity that may compromise the safety of other members.
• Customer Support: Processing and responding to your enquiries, complaints, and support requests via Live Chat, email, and other xx68 support channels.
• Service Communications: Sending important notifications about your account, changes to our terms, and relevant promotions and offers (you may unsubscribe from promotional emails at any time).
• Platform Improvement: Analysing aggregated usage data (without identifying individuals) to improve the user experience, platform performance, and various xx68 features.
• Legal Compliance: Fulfilling legal obligations, including maintaining required records and complying with directives from relevant authorities.

Xx68 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is our core commitment and it will not change.

In certain limited circumstances, xx68 may share your personal data with the following parties, but only to the extent necessary and with appropriate safeguards in place:

• Trusted Service Providers: Technical partners and service providers that support xx68's operations – including payment gateway providers, game software suppliers, and cybersecurity services. All parties are bound by strict confidentiality agreements and may only use your data for agreed purposes.
• Government Authorities: Where required by Malaysian law or a directive from a competent authority, xx68 will disclose the requested information. This includes purposes related to crime prevention, financial investigations, or court orders.
• Fraud Prevention: In cases of suspected fraud or serious security threats, xx68 may share relevant information with law enforcement agencies or the appropriate industry bodies.
• Business Transfer: In the event of a merger, acquisition, or sale of xx68's assets, user data may be transferred to the new entity, which will be bound by this Privacy Policy.

Xx68 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit the xx68 platform.

Types of Cookies We Use

• Essential Cookies (Required): Required for core platform functionality – login, session security, and language preferences. Cannot be disabled.
• Performance Cookies: Collects anonymous data on how users interact with the platform to help us improve the overall user experience.
• Functional Cookies: Stores your preferences such as game settings, language choice, and login details (if you select "remember me").
• Analytics Cookies: Helps us understand aggregate usage patterns. This data does not identify you as an individual.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect the functionality of the xx68 platform. Please refer to your browser's documentation for guidance on managing cookies.

Xx68 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure.

• 256-bit SSL Encryption: All communications between your browser and xx68 servers are encrypted using bank-grade TLS/SSL protocols. This means that transmitted information — including login credentials, financial data, and personal details — cannot be intercepted by third parties.
• Two-Factor Authentication (2FA): xx68 supports and encourages the use of 2FA on all member accounts as an additional layer of security.
• 24/7 Monitoring: The xx68 security system is continuously monitored to detect any unusual activity or suspicious access attempts.
• Internal Access Controls: Internal access to xx68 members' personal data is strictly limited to staff who require it to perform their duties, subject to rigorous access auditing.
• Security Testing: xx68 conducts regular penetration testing and security audits to identify and address any vulnerabilities.

Xx68 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required under applicable Malaysian law.

• Active account data: Retained for as long as your xx68 account remains active
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with anti-money laundering (AMLA) legal requirements
• KYC and identity verification records: Retained for 5 years after account closure
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes
• Technical log data: Retained for 12 months for security and troubleshooting purposes

Once the retention period expires and there is no legal requirement to keep the data, xx68 will securely delete or destroy your personal data using industry-standard methods.

As an xx68 member based in Malaysia, you have certain rights regarding your personal data under the PDPA and xx68's policies. These rights can be exercised by contacting us via email at support@xx68.biz:

Xx68 maintains a strict zero-tolerance policy against the use of our platform by individuals under the age of 18. The xx68 platform is not intended for children or minors under the age of 18 under any circumstances.

We do not knowingly collect personal data from individuals under the age of 18. If we discover that data belonging to someone under 18 has been collected, we will delete it immediately and close the account without notice.

Xx68 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer to Malaysian members.

In the event of material changes, we will notify you through:

• In-platform notifications on xx68 (banners or pop-ups)
• Email sent to your registered address
• Update of the "Last Updated" date at the top of this page

Continued use of the xx68 platform after the effective date of any amendment constitutes acceptance of the revised policy. We encourage you to review this page periodically.

For any enquiries, concerns, or requests relating to your privacy and personal data, please contact the xx68 Data Privacy Officer through the following channels: