OFFICIAL DATA PROTECTION

Xx68 Privacy Policy – Malaysia User Personal Data Protection

At xx68, your privacy is more than a formality. We ensure that every piece of personal data you share with us is protected with the latest encryption technology and managed to the strictest data protection standards. This document transparently explains how we collect, use, and safeguard your information.

Updated: 1 January 2026
Our Privacy Commitment
256-bit SSL encryption for all data
No sale of data to third parties
Data access restricted to authorised staff only
User rights are fully respected
Compliance with the Personal Data Protection Act 2010
Regular security audits

The Six Core Principles of the xx68 Privacy Policy

The following are the six core principles that underpin how xx68 handles your personal data. Each principle reflects our commitment to transparency and trust.

Advanced-Level Encryption

All data transmitted between your device and xx68 servers is protected by 256-bit SSL/TLS encryption. Sensitive data such as payment information and identity verification documents is stored in fully encrypted form, unreadable by any party without a valid decryption key.

No Data Sales

Xx68 has never sold, rented, or traded users' personal data to any third party for commercial purposes, and never will. Your data belongs to you. We only use your data for the purposes stated in this Privacy Policy, without any hidden exceptions.

Strict Access Control

Access to user personal data within xx68's internal systems is restricted solely to staff with a legitimate operational need. All access is automatically logged and monitored. No xx68 employee may access user data without proper authorisation and a clear audit trail.

Legal Compliance

The xx68 Privacy Policy is developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and update our policy whenever relevant legislation changes to ensure user rights remain protected at all times.

Limited Retention Period

Your personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. When data is no longer needed, it will be securely deleted or anonymised in accordance with xx68's established data disposal procedures.

Regular Auditing

The security systems and privacy policy of xx68 are subject to periodic independent audits by qualified third parties. The results of these audits are used to identify and address any gaps in data protection, ensuring our platform consistently meets the latest industry security standards.

1 Information We Collect

As a responsible online gaming platform, xx68 collects several categories of personal data from users. This data collection is necessary to ensure a safe, fair, and high-quality gaming experience, as well as to fulfil applicable legal compliance obligations in Malaysia.

A. Registration and Identity Information

  • Full name as shown on a valid identity document.
  • Malaysian Identity Card number (MyKad) or passport number.
  • Date of birth for age verification purposes.
  • Email address for account communication and verification.
  • Mobile phone number for two-factor authentication (2FA) and communications.
  • Current residential address for KYC requirements.

B. Financial and Transaction Information

  • Registered bank account number for fund deposits and withdrawals.
  • Registered e-wallet information (Touch 'n Go eWallet, Boost, ShopeePay).
  • Full transaction history of deposits and withdrawals in your account.
  • Payment information required for processing via FPX and DuitNow QR.

C. Usage and Technical Data

  • IP address and geographical location information derived from it.
  • Device type, operating system, and web browser version used.
  • Game session data including date, time, game type, and wagering amount.
  • Account activity logs maintained for security and fraud detection purposes.
Note: We only collect data that is genuinely necessary for the stated purpose. We do not collect excessive or irrelevant data in relation to the operation of the xx68 platform.

2 How We Use Your Personal Data

Personal data collected by xx68 is used specifically and exclusively for legitimate purposes only. We do not use your data beyond the scope stated below without first obtaining your additional consent.

Purpose of Use Description Data Involved
Account Management Creation, verification, and maintenance of secure user accounts Name, email, phone number
Payment Processing Process deposits and withdrawals and manage transaction records Banking information, transaction records
Identity Verification (KYC) Verify user identity and fulfil AML compliance requirements MyKad, supporting documents
Platform Security Detect and prevent fraud, account abuse, and illegal activity IP address, activity logs
Customer Support Resolve inquiries, complaints, and technical support requests Account information, communication records
Service Improvement Analyse usage patterns to improve the user experience Usage data (anonymised)
Marketing Communications Send relevant promotions and offers (with your consent) Email, phone number

For marketing and promotional communications, you have the right to withdraw your consent at any time by contacting our support team or via the communication preference settings in your account.

3 Legal Basis for Data Processing

Xx68 processes your personal data on the basis of one or more legal grounds recognised under the Personal Data Protection Act 2010 (PDPA) of Malaysia. We ensure that every data processing activity has a valid and justifiable legal basis.

  • Contract Performance: Processing required to fulfil the contractual obligations between xx68 and users, including account management and payment processing.
  • Legal Requirement: Processing required to comply with legal obligations applicable to xx68, including AML and KYC requirements set by the relevant authorities.
  • Legitimate Interest: Processing carried out on the basis of xx68's legitimate business interests, such as fraud prevention and platform security improvements, provided it does not override your fundamental interests and rights.
  • Consent: For certain processing activities such as marketing communications, we obtain your explicit consent in advance. You may withdraw this consent at any time.

4 Data Sharing with Third Parties

Xx68 does not share, sell, or disclose users' personal data to third parties for their own commercial purposes. However, in the course of its operations, xx68 may need to share your personal data in limited and controlled situations as follows:

  • Payment Service Providers: Required transaction information is shared with integrated FPX, DuitNow, and e-wallet providers to securely process deposits and withdrawals.
  • Integrated Game Providers: Limited technical data required for the functioning of third-party games provided within the xx68 platform.
  • Cloud Service Providers: Data is stored on servers managed by certified cloud service providers bound by strict confidentiality agreements with xx68.
  • Legal Authority: xx68 will disclose personal data to government authorities, law enforcement bodies, or courts when required to do so by a valid court order or applicable legal provision.
Our Guarantee: All third parties with whom we share your data are bound by strict data protection agreements and are only permitted to use your data for specifically defined purposes. We have zero tolerance for any use of your data beyond the agreed scope.

5 Cookies and Tracking Technologies

The xx68 platform uses cookies and similar tracking technologies to enhance user experience and analyse platform performance. Cookies are small data files stored on your device when you visit our website.

Types of cookies used by xx68:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are critical to platform operations.
  • Performance Cookies: Collect information on how users interact with the platform to help us improve overall functionality and user experience.
  • Functional Cookies: Allows the platform to remember your preferences such as language and personal settings to deliver a more personalised experience.
  • Analytics Cookies: Helps us understand platform usage patterns to make better decisions on product improvements. Data collected is aggregated and anonymised.

You can control and manage cookie settings through your web browser settings. Please note that disabling essential cookies may affect the functionality and security of your account on the xx68 platform.

6 Data Security Measures

Xx68 invests seriously in data security infrastructure to ensure that users' personal information is always protected against unauthorised access, loss, misuse, or unintentional disclosure.

  • 256-bit SSL Encryption: All communications between your device and xx68 servers are secured with the latest TLS protocols, ensuring data confidentiality during transmission.
  • Two-Factor Authentication (2FA): An additional security layer requiring identity verification via a registered device during login or high-risk transactions.
  • 24/7 Monitoring: An automated monitoring system operating around the clock to detect and respond to suspicious activity in real time.
  • Data Segregation: Sensitive data is stored separately with access controls that vary according to the sensitivity level of the information.
  • Regular Backups: User data is backed up regularly and stored in a secure, separate location to ensure data recovery in the event of any technical incident.
Incident Response: In the event of a data breach affecting your information, xx68 will notify you within 72 hours of becoming aware of the breach, in line with industry best practices for data protection.

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and xx68's internal policies, you have the following rights regarding the personal data we hold about you:

Right of Access

You have the right to request and obtain a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data from our systems, subject to applicable legal requirements.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, including direct marketing.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transfer it to another party.

Right to Restriction of Processing

You have the right to request a restriction on the processing of your data in certain situations while awaiting a decision or review.

To exercise any of the above rights, please contact the xx68 Data Privacy Officer by email at [email protected]. We will process your request within 30 business days from the date the request is received.

8 Cross-Border Data Transfers

In the context of xx68 platform operations, your personal data may be processed or stored on servers located outside Malaysia, particularly in relation to cloud services and technology providers used by our platform.

Any transfer of personal data outside Malaysia is carried out in compliance with the requirements set out under PDPA 2010, including ensuring that the recipient country or territory provides a level of data protection equivalent to or higher than that required under Malaysian law.

Safeguards we implement for cross-border data transfers include comprehensive data processing agreements with all foreign service providers, the use of recognised data transfer mechanisms, and continuous monitoring of those service providers' compliance.

9 Children's Privacy

The xx68 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18.

If we discover or are made aware that we have collected personal data from an individual under the age of 18, we will take immediate action to delete that data from our systems and close the associated account. Parents or guardians who suspect that their minor child has registered or used the xx68 platform are required to contact us immediately through the available support channels.

Important for Parents: xx68 employs an age verification system during registration. However, we encourage parents to monitor their children's online activities and make use of parental control tools available on their devices.

10 Changes to This Privacy Policy

Xx68 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our platform services.

Any material changes to this Privacy Policy will be communicated to you via a prominent notice on the xx68 platform homepage or by email to the address registered on your account, at least 14 days before the changes take effect. The "Updated" date displayed at the top of this document will always reflect the date of the most recent revision.

Continued use of the xx68 platform after changes take effect will be considered your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and discontinue use of the xx68 platform.

Version History: We maintain an archive of previous Privacy Policy versions for reference. If you require a copy of any earlier version, please contact our Privacy Officer.

11 Contact Our Data Privacy Officer

If you have any questions, concerns, or complaints regarding how xx68 handles your personal data, or if you wish to exercise any of your rights as described in this Privacy Policy, please contact our Data Privacy Officer:

Support Email
Response within 1–2 business days
Live Chat
24/7 Live Support
Available on the xx68 platform
Processing Time
30 Working Days
For personal rights requests
FAQ
Answers to common questions

We are committed to responding to every privacy-related inquiry thoroughly and within a reasonable timeframe. Your satisfaction and trust are our top priority.

SECURE & TRUSTED

Start Your Safe Gaming Experience at xx68

Your personal data is fully protected. Register now and enjoy a wide range of exciting games with complete peace of mind — your security is our top priority.

Bahasa Melayu