Xvg8 Privacy Policy – Member Personal Data Protection

Xvg8 is an online gaming platform operating in Malaysia, offering a wide range of digital entertainment including slot games, Live Casino, fish shooting games, bingo, and more. We understand that your trust is our most valuable asset, and protecting your personal information is our top priority.

This Privacy Policy has been developed to fulfil the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and details in full how we handle your personal data from the moment you register through the entire duration of your membership with xvg8.

We encourage you to read this document carefully. Should there be any material changes to this Privacy Policy, we will notify you via an in-platform notification or through the email registered to your account.

Xvg8 only collects personal data that is strictly necessary to provide you with a quality, secure, and responsible service. The following are the categories of data we collect:

We do not collect sensitive data such as your health information, religious beliefs, or political affiliations unless you voluntarily disclose it while communicating with our team.

Xvg8 collects your personal data through several transparent and lawful methods:

• Account Registration: Information you provide during the new account registration process, including your name, email, phone number, and login details.
• KYC Process: Identity documents and supplementary information submitted during the Know Your Customer (KYC) identity verification process for compliance purposes.
• Financial Transactions: Information provided during the deposit and withdrawal process, including bank account details and payment records.
• Platform Usage: Data collected automatically while you use the xvg8 Platform, including pages visited, games played, and session duration.
• Communications: Information you share when contacting our customer support team via live chat, email, or other channels.
• Cookies and Similar Technologies: Data collected via cookies, tracking pixels, and similar technologies to enhance user experience and platform security.
• Approved Third Parties: In certain cases, we may receive information from approved third-party identity verification providers or fraud prevention agencies.

Xvg8 uses collected personal data solely for legitimate, identified purposes as follows:

• Account Management: Creating, verifying, and maintaining your member account, including the login process and password resets.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments accurately and securely.
• Identity Verification (KYC): Meeting legal compliance requirements related to anti-money laundering (AML) and counter-terrorism financing (CFT).
• Customer Service: Providing technical support and assistance to members when needed.
• Platform Security: Detecting and preventing fraud, system abuse, unauthorised access, and other suspicious activities.
• Service Improvement: Analysing usage patterns to improve game quality, interface design, and the overall user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support tools.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — you may unsubscribe at any time through your account settings.
• Legal Compliance: Fulfilling reporting and compliance obligations to relevant authorities in accordance with applicable Malaysian law.

Xvg8 does not sell or disclose your personal data to third parties for their own marketing purposes. However, we may share your data in the following limited and controlled situations:

• Trusted Service Providers: Companies we engage to perform specific functions on our behalf, such as gaming software providers, payment processors, KYC solution providers, and cloud computing services. All such providers are bound by strict confidentiality agreements.
• Regulatory Authority: Information required by Malaysian authorities or relevant regulatory bodies in accordance with applicable legal provisions.
• Legal Proceedings: Information required in response to court orders, legal proceedings, or requests from legitimate law enforcement agencies.
• Fraud Prevention: Information is shared with approved fraud prevention partners for the purpose of identifying and blocking fraudulent activity affecting the platform.
• Business Transfers: If xvg8 is involved in a merger, acquisition, or asset transfer, user data may be transferred to the successor entity with equivalent protections guaranteed.

In all data sharing instances, xvg8 ensures that the receiving party adheres to data protection standards equivalent to or higher than those we uphold.

Xvg8 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure:

• 256-bit SSL/TLS Encryption: All communications between your device and xvg8's servers are encrypted using the latest industry-standard encryption protocols.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 encryption algorithms.
• Multi-Layer Access Control: Access to member personal data is restricted to staff with a legitimate operational need only, with all access logged and monitored.
• Two-Factor Authentication (2FA): xvg8's internal systems require two-factor authentication for all access to sensitive user data.
• Regular Security Audits: Our security systems are regularly audited by independent security experts to identify and address any potential vulnerabilities.
• Intrusion Detection System: 24/7 real-time monitoring to detect and respond to any suspicious activity or intrusion attempts.

Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by xvg8:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 business days.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that we correct it promptly.
• Right to Withdraw Consent: You may withdraw consent for the processing of your personal data at any time, subject to applicable legal and contractual requirements.
• Right to Object to Processing: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Information: You have the right to know the purpose of data collection, the parties receiving your data, and the retention period of that data.

To exercise any of the above rights, please contact the xvg8 compliance team via email at [email protected] or via our 24/7 live chat. We will respond within the timeframe required by law.

Xvg8 uses cookies and similar tracking technologies to enhance your experience on our Platform. The following are the types of cookies we use:

• Essential Cookies: Required for core Platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance Cookies: Collecting anonymous data on how visitors use our Platform, helping us understand the most frequently visited pages and response times.
• Functional Cookies: Saving your preferences such as language, display settings, and login information for a more convenient return experience.
• Analytics Cookies: Helping us understand aggregated usage patterns to make better-informed platform improvement decisions.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the xvg8 Platform.

In the course of its operations, xvg8 may transfer your personal data to servers or processing facilities located outside Malaysia. Such transfers are carried out only when:

• The recipient country has data protection laws equivalent to or stricter than Malaysia's PDPA.
• Adequate data transfer agreements are in place between xvg8 and data recipients in the relevant countries.
• The transfer is necessary to perform a contract between you and xvg8, or to take steps at your request prior to entering into a contract.
• You have given explicit consent for the transfer after being informed of the potential risks involved.

All international data transfers carried out by xvg8 are safeguarded by internationally recognised standard contractual clauses to ensure consistent protection standards.

Xvg8 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law:

• Active Account Data: Retained for as long as your account is active and for a period of 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with legal requirements relating to anti-money laundering.
• KYC Documents: Retained for 5 to 7 years after the business relationship with you ends.
• Communication Logs: Customer support records are retained for 2 years for quality control and reference purposes.
• Analytics Data: De-identified usage data is collected and retained indefinitely.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our strict data deletion procedures.

Xvg8 is a platform exclusively for adult users aged 18 and above only. We do not knowingly collect any personal data from individuals under the age of 18.

If we find that we have inadvertently collected personal data from someone below the stipulated age limit, we will take immediate steps to delete that data and close the relevant account.

If you believe that someone under the age of 18 has registered on our Platform, please contact us immediately at [email protected] so that we may take the appropriate action.

Xvg8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new operational needs.

• The new effective date will be clearly stated at the top of this page.
• For significant amendments, we will send a notification to your registered email address or via an in-platform notification.
• Your continued use of the xvg8 Platform after amendments are published constitutes your acceptance of the updated Privacy Policy.
• It is your responsibility to review this page periodically to ensure you remain informed of the latest policy.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact us through the following channels: