Privacy Policy Contents
At xera88, user trust is the cornerstone of our operations. This Privacy Policy is designed to ensure that every individual using our online betting platform — whether via the website or mobile app — fully understands how their personal data is managed responsibly and transparently.
We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in data management. This Policy applies to all users who register, browse, or interact with the xera88 platform, including activities such as account registration, deposits, withdrawals, Slot Games participation, Live Casino, Sports Betting, and any communication with our support team.
By registering an xera88 account, you confirm that you have read and understood this Privacy Policy. If you disagree with any provision, please contact us before continuing to use the platform.
Why Your Data Is Safe with xera88
256-bit SSL Encryption
Every piece of data transmitted between your device and xera88's servers is protected by military-grade 256-bit SSL encryption. No third party can intercept or read your information during transmission.
Dedicated Secure Servers
Xera88 user data is stored in data centres protected by multi-layered firewalls, biometric access controls, and round-the-clock active security monitoring. Physical access to servers is restricted and logged.
No Data Sales
Xera88 has never sold, rented, or transferred users' personal data to advertisers or third-party data brokers, and never will. Your data is used solely for the platform operational purposes you have consented to.
Internal Access Controls
Only xera88 staff who have undergone background checks and compliance training are granted access to user data. Every access is recorded in an audit log that is reviewed periodically by our security team.
Malaysia PDPA Compliance
All our data management practices are aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). We have appointed a Data Protection Officer responsible for ensuring ongoing compliance.
Right of Access & Deletion
You have the right to request a copy of your personal data, correct inaccurate information, or request deletion of your data from our systems. All requests are processed within 72 business hours.
1Information We Collect
Xera88 only collects information that is strictly necessary to deliver quality services, meet legal requirements, and ensure platform security. The information we collect falls into three main categories:
1.1 Information You Provide Directly
This information is collected when you register an account, submit a support request, or complete a form on the platform:
- Full name as shown on official identification documents
- Date of birth for age verification (minimum age requirement: 18)
- MyKad number or passport number for KYC processing
- Active email address for account communications
- Mobile phone number for OTP verification and notifications
- Bank account or digital wallet information for payment processing
- Full address for identity verification if required
1.2 Information Collected Automatically
When you use the xera88 platform, our systems automatically record the following technical information:
- IP address and network location (state/city only, not exact address)
- Web browser type and operating system version used
- Pages visited, session duration, and navigation patterns
- Device information including device type and screen resolution
- Access time logs and in-account activity
1.3 Transaction Information
Every financial transaction on the xera88 platform is automatically recorded for anti-money laundering (AML) compliance, dispute resolution, and tax reporting purposes where applicable. This information includes:
- Date, time, and amount of each deposit and withdrawal
- Payment method used (FPX, TnG, GrabPay, Boost)
- Wagering records including game type, bet amount, and outcome
- Bonus and promotion claim history
We do not store full credit or debit card numbers. All sensitive payment information is handled directly by third-party payment providers with PCI-DSS Level 1 certification.
2How We Use Your Data
Xera88 uses collected data solely for legitimate and transparent purposes. Below is a concise overview of how your data is used:
| Purpose of Use | Data Type | Legal Basis |
|---|---|---|
| Account management & identity verification (KYC) | Name, IC, date of birth, photo | Contractual & legal requirement |
| Deposit & withdrawal processing | Banking details, transaction amounts | Contractual requirement |
| Service communications & notifications | Email, phone number | Legitimate interest & consent |
| Fraud detection & platform security | IP address, activity logs | Legitimate interest |
| AML compliance & regulatory reporting | Transaction data, identity | Legal obligation |
| User experience improvement | Browsing & navigation data | Legitimate interest |
| Promotions & personalised offers | Betting history, game preferences | Consent (withdrawable) |
Xera88 will not use your data for any purpose beyond those stated above without your prior consent. If we need to use your data for a new purpose, you will be informed and given the option to agree or decline.
3Information Sharing
The core policy of xera88 is does not share users' personal data for third-party marketing purposes. However, there are limited situations where data must be shared to ensure the platform functions properly and remains legally compliant:
3.1 Trusted Service Providers
Xera88 works with a carefully selected group of third-party service providers to support platform operations. All such providers are bound by strict data confidentiality agreements and are only permitted to process data in accordance with our instructions:
- Payment provider — FPX, TnG eWallet, GrabPay, Boost to process financial transactions
- KYC provider — licensed identity verification companies to authenticate user documents
- Hosting & infrastructure provider — secure data centres for data storage
- Analytics provider — anonymised data for platform UX improvement
3.2 Legal Requirements
Xera88 may disclose user data to the relevant authorities if required by Malaysian law or a valid court order. This includes investigations into financial crime, money laundering, or online fraud. In all such cases, we will notify affected users if permitted by law.
Xera88 will not share user data in response to unofficial requests, unverified phone calls, or suspicious emails purporting to come from government agencies. All official requests must go through the proper legal channels.
4Security & Encryption
User data security is an absolute priority at xera88. We continuously invest in the latest security infrastructure to ensure your data remains protected at all times.
All communications between your browser or the xera88 app and our servers are encrypted using TLS 1.3 — the most current security protocol available today. User passwords are never stored in plain text; instead, they are processed through the bcrypt hashing algorithm with a unique salt for each account.
For financial transactions, xera88 uses payment tokenisation, where sensitive information is replaced with meaningless tokens that can only be interpreted by our internal security systems. This means that even in the event of a security breach, your actual financial information remains protected.
Our security team conducts regular penetration testing and annual third-party security audits to identify and patch any system vulnerabilities before they can be exploited.
If you suspect any suspicious activity on your account, contact our support team immediately via Live Chat. We can freeze your account instantly while an investigation is carried out.
5Cookies & Tracking Technologies
Xera88 uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and maintain login session security. The types of cookies we use are as follows:
- Essential Cookies (Required) — Required for core platform functions such as login authentication, session management, and CSRF security. These cookies cannot be disabled without affecting platform functionality.
- Performance Cookies — Collects anonymised information on how users interact with the platform to help us identify pages that need improvement.
- Functional Cookies — Stores user preferences such as preferred language, display theme, and other personal settings so they do not need to be reconfigured on every login.
- Analytics Cookies — Used in a limited capacity to understand overall platform usage patterns. All analytics data is anonymised and cannot be traced back to any individual.
You can manage your cookie preferences through your web browser. However, disabling essential cookies may affect certain features of the xera88 platform. For more information on managing cookies, refer to your browser settings.
6Data Retention & Deletion
Xera88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. Retention periods vary by data type:
Active Account Data
Retained for the duration the account is active and up to 7 years after account closure to comply with financial audit and AML legal requirements.
Financial Transaction Records
Retained for a minimum of 7 years from the transaction date in line with Malaysia's LHDN requirements and the AMLA.
Security & Access Logs
Retained for 2 years for fraud detection, dispute resolution, and security investigation purposes.
Support Communication Data
Chat history with our support team is retained for 3 years to provide continuity of context should you contact us again.
Analytics Data & Cookies
Anonymous browsing data and analytics cookies are automatically deleted 13 months from the date of collection.
When the retention period expires or you request data deletion, xera88 will securely delete or anonymise your data so that it can no longer be associated with you as an individual.
7User Rights
Under Malaysia's PDPA and the data protection principles we uphold, you as an xera88 user have the following rights regarding your personal data:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate, incomplete, or outdated data.
Right to Erasure
Request deletion of your data, subject to legal retention requirements.
Right to Object
Object to the use of your data for direct marketing or profiling purposes.
Right to Restriction of Processing
Request that we restrict the processing of your data while a dispute or review is in progress.
Right to Data Portability
Receive your data in a machine-readable format for transfer to another service.
To exercise any of the above rights, contact our Data Protection Officer by email at [email protected] with the subject line "Personal Data Rights Request". We will process your request within 72 business hours.
8Children's Data
The xera88 platform is strictly for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.
Our rigorous KYC process, including date-of-birth verification via official identification documents, is designed to ensure that no minors can register an account on our platform. Should we discover that a minor's data has been inadvertently collected, that data will be deleted immediately and the account in question will be suspended pending the outcome of an investigation.
If you believe your child has registered an account with xera88 without your knowledge, please contact us immediately at [email protected]. We will take immediate action to close the account and delete all related data.
9Policy Amendments
Xera88 reserves the right to amend this Privacy Policy from time to time to reflect changes in law, technology, or our operational practices. Users will be notified of any material amendments through:
- Email notifications sent to the address registered in your account
- Prominent notice on the platform's home page for at least 14 days
- Update the "Last Updated" date at the top of this page
Continued use of the xera88 platform after the effective date of any amendment constitutes acceptance of the latest version of the Privacy Policy. If you do not agree with the amendments, you may close your account before the amendment's effective date.
We encourage users to review this page periodically to stay informed about how we protect your information. Previous versions of the Privacy Policy are available upon request via email to our team.
10Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact xera88's Data Protection Officer through the following channels:
If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.
Our team is ready to help you understand how your data is handled securely.
View Our FAQ