Xe8my Privacy Policy – How We Protect Your Personal Data

Xe8my takes the privacy of every user on our platform seriously. This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and protect your personal information when you register and use xe8my's services.

This document was drafted with the needs and rights of Malaysian users in mind. xe8my is committed to ensuring your personal data is handled responsibly, in line with industry best practices and applicable data protection legislation.

When you register an account on xe8my, make a transaction, or interact with our platform in any way, you agree that your personal data will be handled in accordance with the terms set out in this Privacy Policy. If you do not agree, please stop using our platform.

Xe8my collects several types of personal data depending on how you interact with our platform. Below is a summary of the data we collect:

We do not collect unnecessary data. Every type of data we collect has a clear purpose and will not be used beyond the scope stated in this Policy.

Xe8my collects your personal data through several key channels:

• Registration Form: When you register an account, you provide basic information such as your name, email, and phone number.
• KYC Process: To enable withdrawals, you are required to upload identity verification documents including a copy of your MyKad and a selfie.
• Financial Transactions: Bank account or e-wallet details are collected when you make a deposit or withdrawal.
• Platform Usage: Technical and usage data is collected automatically via cookies and similar tracking technologies while you use the platform.
• Customer Support: Information you provide when communicating with our support team is also retained for record-keeping and service improvement purposes.
• Mobile Devices: When using the xe8my app, we may collect device data including unique device identifiers for security purposes.

The personal data we collect is used solely for legitimate and necessary purposes in operating the xe8my platform. The primary purposes of data use are:

• Account Management: To create, verify, and maintain your account on the xe8my platform.
• Transaction Processing: To process deposits and withdrawals safely and efficiently through your chosen payment method.
• Identity Verification (KYC): To meet legal compliance requirements and prevent fraud, money laundering, and other unlawful activities.
• Platform Security: To detect and prevent unauthorised access, fraud, and suspicious activity on your account.
• Customer Support: To provide accurate and effective assistance when you contact our support team.
• Responsible Gaming: To monitor gaming patterns and provide assistance to users who may need support related to responsible gaming.
• Platform Improvements: To analyse usage patterns and continuously improve the user experience on xe8my.
• Communications: To send important notifications regarding your account, transactions, and any policy updates that affect you.

Xe8my does not sell or rent your personal data to any third party. However, in limited circumstances, we may share your data with the following parties for legitimate operational purposes:

• Payment Service Providers: Transaction information that must be shared with banks, FPX operators, DuitNow, Touch 'n Go, GrabPay, and Boost to process your financial transactions.
• Technical Service Providers: Cloud infrastructure and IT service providers that help us operate the platform — all parties are bound by strict confidentiality agreements.
• Legal Authorities: In situations where we are required by law or court order to disclose certain data to relevant enforcement agencies or regulatory bodies.
• Game Providers: Data required for the operation of certain games may be shared with game platform providers integrated with xe8my, subject to data protection agreements.

Xe8my continuously invests in the latest security technologies and procedures to protect your personal data. Key protective measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and xe8my's servers is protected with industry-grade encryption.
• Two-Factor Authentication (2FA): An additional security layer for login and high-risk transactions, ensuring only you can access your account.
• Real-Time AI Monitoring: An AI system that continuously monitors account activity to identify suspicious patterns.
• Internal Access Controls: Only authorised staff with a legitimate operational need may access user data, and all access is recorded.
• Regular Security Testing: The xe8my platform undergoes regular penetration testing and security audits conducted by independent parties.
• Secure Data Backup: User data is backed up regularly to secure locations to ensure swift recovery in the event of a technical incident.

Xe8my retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, as well as to comply with applicable legal, tax, and regulatory requirements.

In general, our data retention policy is as follows:

• Active Account Data: Retained for as long as your account is active and for a defined period after account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• KYC Documents: Retained for the period required under applicable anti-money laundering legislation.
• Security Logs: Retained for the period required for the investigation of any security incidents that may arise.

When your data is no longer needed, xe8my will securely delete or anonymise it using industry-standard procedures.

As an xe8my user, you have the following rights regarding your personal data. To exercise any of these rights, please contact our support team.

Xe8my uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations, including login sessions and security. These cookies cannot be disabled.
• Functional Cookies: Stores your preferences such as language and display settings to deliver a more personalized experience.
• Analytics Cookies: Helps us understand how users interact with the platform for continuous improvement purposes.
• Security Cookies: Used to detect suspicious activity and protect your account from security threats.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the xe8my platform and your overall user experience.

Xe8my reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new platform features. Any changes will take effect immediately upon publication on this website.

When we make significant changes to this Policy, we will notify you by email or via an in-platform notification. The "Updated" date at the top of this page will always reflect the latest revision date.

We encourage you to review this page periodically. Continued use of the xe8my platform after any changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the xe8my platform — the fastest way to get a response
• Email: [email protected] (text display only — not clickable)
• FAQ: Visit FAQ page for answers to common privacy-related questions

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. All inquiries will be responded to in either Malay or English, based on your preference. For complete information on platform usage guidelines, please refer to Terms and Conditions us.