Official Documents

Privacy Policy xera88 — Your Personal Data Protection

Xera88 respects the privacy of every user. This document transparently explains how we collect, use, store and protect your personal data as a member of our platform.

256-bit SSL Encryption
Data Not Sold
No Third-Party Access
Last Updated: 1 January 2026  |  Version 2.4
This Privacy Policy applies to all users accessing the xera88 platform via xera88.fun or our official mobile app. By using our platform, you agree to the collection and use of information as described in this document.

1 Our Introduction and Commitment

At xera88, your privacy is not just a legal obligation — it is a core part of how we do business. We believe every player has the right to know exactly what happens to their personal data — with no confusing legal language and no unwanted surprises.

Xera88 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only collect data that is strictly necessary, store it securely, and never sell it to any third party for commercial purposes. Additionally, all xera88 staff involved in personal data handling undergo regular privacy compliance training.

This policy covers all types of data you share with us — whether during account registration, making a deposit, playing games, contacting customer support, or simply browsing our platform. We update this policy from time to time to reflect changes in our practices or applicable legal requirements.

xera88 has never sold, rented or traded your personal data to any third party for marketing purposes. Your data belongs to you.

2 Data We Collect

We collect various types of data depending on how you interact with the xera88 platform. Below is a full breakdown of the data categories we collect:

Data Category Example Information Primary Purpose
Personal Identity Full name, date of birth, identity card number KYC verification, fraud prevention
Contact Information Email address, phone number, residential address Account communications, transaction notifications
Financial Data Bank account number, bank name, transaction records Processing deposits and withdrawals
Technical Data IP address, device type, operating system, browser Security, fraud detection
Game Data Wagering history, wins, favourite games Responsible gaming, platform analytics
Communication Data Live chat transcripts, customer support emails Issue resolution, quality control

Data you provide directly: This includes all information you enter when registering an account, completing your profile, or during the KYC verification process. We only request information that is genuinely necessary to operate legally and securely.

Data collected automatically: When you use the xera88 platform, our systems automatically record certain technical information such as your IP address, device type, and session details. This data helps us detect suspicious login attempts and protect your account.

3 How We Use Your Data

Xera88 uses your personal data only for lawful and transparent purposes. Below is the complete list of data usage purposes:

  • Account Management: To create, verify and maintain your account on the xera88 platform.
  • Transaction Processing: To process deposits, withdrawals and any financial transactions you carry out through our platform.
  • Fraud Prevention and Anti-Money Laundering: Your data is used to identify and prevent suspicious activity, in line with Malaysia's AML (Anti-Money Laundering) requirements.
  • Customer Support: To enable our team to assist you in resolving any issues or inquiries more effectively.
  • Experience Personalisation: To display relevant game recommendations and promotions based on your gaming habits — not for sale to advertisers.
  • Responsible Gaming: Your gaming activity data allows our systems to detect early signs of problem gambling and suggest appropriate self-control tools.
  • Legal Compliance: To fulfil reporting obligations to the relevant authorities when required under Malaysian law.
  • Platform Improvement: Anonymised usage data is used to understand usage patterns and improve the performance and design of the xera88 platform.
xera88 does not use your personal data to make automated decisions that materially affect your rights without human review. Any account suspension involving data analysis will be reviewed by our compliance team.

4 Data Sharing with Third Parties

Xera88 does not sell or disclose your personal data to third parties except in the following limited and controlled circumstances:

  • Payment Providers: Required transaction data is shared with approved payment processors (such as bank gateways and e-wallet providers) solely to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
  • Game Software Providers: Certain game session data is shared with third-party game providers that supply games on the xera88 platform. This sharing is limited strictly to what is necessary to run the games.
  • KYC Service Providers: Your identity verification documents are processed through an approved KYC verification platform to confirm identity authenticity. This data is not used for any other purpose.
  • Regulatory Authority: xera88 will disclose personal data to Malaysian authorities if required by court order, official investigation, or applicable legal obligation.
  • Business Transfer: If xera88 is involved in any merger or acquisition, user data may be transferred as part of the business assets. Users will be informed in advance and the right to delete their account will be granted.

All third parties that receive personal data of xera88 users are contractually bound to protect that data to a standard equal to or higher than our own privacy policy.

5 Data Storage and Security

The security of your personal data is xera88's top priority. We continuously invest in security infrastructure that meets global industry standards.

  • Encryption: All data transmitted between your device and xera88 servers is protected by 256-bit SSL encryption. Sensitive data such as passwords is stored as bcrypt hashes that cannot be decrypted.
  • Access Controls: Only xera88 staff with a legitimate business need may access users' personal data. All access is logged and audited on a regular basis.
  • Firewall and Monitoring: xera88 servers are protected by multi-layered firewalls and an intrusion detection system (IDS) operating 24 hours a day.
  • Data Backup: Your data is automatically backed up to geographically separate locations to ensure service continuity in the event of a system failure.

Data Retention Period: xera88 retains your personal data for as long as your account is active and for up to 7 years after account closure, in line with Malaysia's AML legal requirements. Data that is no longer needed will be securely deleted or anonymised.

In the event of any data breach affecting your personal information, xera88 is committed to notifying you within 72 hours of becoming aware of the incident, in line with industry best practices.

6 Cookies and Tracking Technologies

Xera88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are essential to your account security.
  • Performance Cookies: Collects information on how you use the platform — pages visited, time spent, and any errors encountered. This data is used in aggregate form to improve platform performance.
  • Functional Cookies: Remembers your preferences such as language, display settings, and login details so you do not have to re-enter them on every visit.
  • Analytics Cookies: Helps us understand overall platform usage patterns. Analytics data is processed in a form that does not identify individual users.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the security features of the xera88 platform.

7 Your Privacy Rights

As an xera88 user and an individual protected under Malaysia's PDPA, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Correct any inaccurate or incomplete information in your account.

Right to Erasure

Request deletion of your data, subject to legal retention requirements.

Right to Object

Object to the processing of your data for direct marketing purposes.

Right to Portability

Receive your data in a structured format for transfer to another platform.

Right to Restriction

Request restriction of data processing while a dispute or investigation is ongoing.

To exercise any of the above rights, contact the xera88 privacy team via email at [email protected] with the subject "Privacy Rights Request". We will process your request within 14 business days.

8 Child Privacy

The xera88 platform is restricted to users who are aged 18 years and above. We do not intentionally collect or process personal data from individuals under the age of majority. All new account registrations go through an age verification process during KYC.

Should we discover that we have inadvertently received data from an underage user, the account in question will be terminated immediately and all associated data will be deleted within 48 hours. Any funds in that account will be returned through the appropriate process.

If you become aware of anyone under the age of 18 using the xera88 platform, please notify us immediately via our support email. We take the protection of children and young people seriously.

9 Links to External Sites

The xera88 platform may contain links to third-party websites in certain contexts, such as game provider information or payment method details. xera88 is not responsible for the privacy practices or content of those external websites.

We recommend reading the privacy policy of every website you visit. The xera88 Privacy Policy applies only to platforms and services operated directly by xera88.

10 Changes to the Privacy Policy

Xera88 reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or platform improvements. The latest version will always be accessible on this page.

If there are material changes — particularly those affecting how we use or share your data — we will send a notification to your registered email address at least 14 days before the changes take effect. Continued use of the xera88 platform after the effective date constitutes acceptance of the updated policy.

We recommend checking this page regularly. The latest update date is always displayed at the top of this page for your reference.

11 Contact Us

Any enquiries, concerns, or requests relating to the Privacy Policy and the handling of your personal data may be directed to the xera88 privacy team through the following channels:

  • Email: [email protected] (subject: "Privacy Inquiry") — response within 2 business days.
  • Live Chat: Available 24/7 via the chat icon at the bottom of the platform for immediate inquiries.
  • FAQ: Browse our FAQ page for answers to commonly asked privacy questions.

For formal privacy complaints requiring investigation, please send full details via email including your account number and a thorough description of the issue. Our team will respond within 5 business days.

How xera88 Protects Your Data

Protecting your personal data is a responsibility we take seriously. Here are the six core pillars of xera88's privacy commitment.

Encryption

256-bit SSL for Every Connection

Every bit of data moving between your device and xera88 servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions worldwide.

Secure KYC

Trusted Identity Verification

Xera88's KYC process uses a certified verification platform. Your identity documents are processed in an isolated environment and are never stored in plain text on any of our servers.

No Data Sales

Your Data Is Never Sold

Xera88 does not sell, rent or exchange user personal data with any third party for marketing or commercial purposes. This is not merely a promise — it is governed by our contractual policy.

PDPA Compliance

Compliance with Malaysian Law

Xera88 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our compliance team ensures every data handling process meets current legal requirements.

Fast Response

Breach Notification Within 72 Hours

In the event of any security incident affecting your data, xera88 is committed to notifying you within 72 hours and explaining the remedial steps taken.

User Controls

Full Rights Over Your Own Data

You may request access to, correction of, or deletion of your personal data at any time. The xera88 privacy team will process your request within 14 working days at no charge.

Your Privacy is Protected. Our Platform is Secure.

Join over 500,000 Malaysian players who have trusted xera88 as their online gaming destination. Register today and enjoy peace of mind with the best-in-class data protection.

Bahasa Melayu