Official Privacy Documents

Privacy Policy x888 — Personal Data Protection for Malaysian Players

X888 treats your privacy as a non-negotiable priority. This Privacy Policy clearly and transparently explains how we collect, use, store, and protect your personal information — all in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

SSL 256-bitFull encryption
PDPA 2010Full compliance
24/7Security monitoring
Updated: 1 January 2026
x888 Privacy Commitment
Your data is not sold to any third party
Personal information fully encrypted
You can request, update, or delete your data at any time
Full compliance PDPA 2010 Malaysia

Why Your Data Secure With x888

We invest in industry-leading security infrastructure so that every piece of information you provide to x888 is protected at every level.

256-bit SSL Encryption

All data transmitted between your device and x888 servers is protected with military-grade 256-bit SSL encryption — the same technology used by Malaysia's leading banks. No one can intercept or read your information while it is in transit.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and strict access controls. Only authorised staff with a legitimate operational need may access user data — and all access is automatically logged for audit purposes.

Secure KYC Verification

Identity documents you upload for the KYC process are transmitted through encrypted channels and stored separately from regular account data. Access to KYC files is restricted to compliance team members who have undergone rigorous background checks.

No Data Sales

X888 has never and will never sell, rent, or trade players' personal data to advertisers, data brokers, or any commercial third party. Your information is used solely for platform operations and defined legal compliance purposes.

24/7 Monitoring

X888's automated monitoring system operates around the clock to detect any unusual activity or unauthorised access attempts. If any threat is detected, our security team will respond in under 15 minutes.

Data Backup & Recovery

Your data is automatically backed up daily to geographically separate server locations. Data recovery procedures are tested regularly to ensure service continuity and zero information loss in any technical emergency.


Welcome to the x888 Privacy Policy page. This document is part of our commitment to operating transparently and responsibly in handling the personal data of all our players in Malaysia. By using the x888 platform, you agree to the data collection and usage practices described here. We encourage you to read this document carefully — not because it is an obligation, but because you have every right to know exactly how your information is managed.

1Information We Collect

X888 collects your personal information through two main methods: information you provide directly when registering or using the platform, and information collected automatically as you browse our website.

Information you provide directly:

  • Full name as per identity card or passport
  • Identity card number (MyKad) or passport number
  • Date of birth and gender
  • Current residential address
  • Active mobile phone number
  • Valid email address
  • Bank account or e-wallet details for transactions
  • KYC verification documents (ID card photo, utility bill, selfie)
  • Any information you share when contacting customer support

Automatically collected information:

  • IP address and estimated geographic location
  • Device type, operating system, and web browser version
  • Session log data including login times, session duration, and navigation activity
  • Records of deposit transactions, withdrawals, and wagering history
  • Game performance data and platform usage patterns
  • Cookies and device identifiers for a smoother experience
Data Minimisation Principle: x888 only collects information that is strictly necessary for legitimate operational purposes. We do not request information beyond what is needed — this is our commitment to the principle of data minimisation under PDPA 2010.

2How We Use Your Data

Every piece of information we collect is used for a clear and lawful purpose. x888 does not use your data for purposes unrelated to platform operations without your prior consent.

Purpose of Use Data Type Legal Basis
Identity verification & KYC Name, IC, documents Legal Obligation
Financial transaction processing Banking details, transaction history Contract performance
Customer support & communications Email, phone, conversation records Legitimate Interest
Security & Fraud Prevention IP, session logs, activity patterns Legitimate Interest
Personalised gaming experience Game history and preferences Consent
Promotions & offers delivery Email, phone number Consent
Regulatory compliance & audits All data related to Legal Obligation

You can withdraw consent for marketing and personalisation purposes at any time by contacting x888 support. Withdrawing consent will not affect data processing required for the operation of your account.

3Sharing Information with Third Parties

X888 does not sell, rent, or disclose players' personal data to third parties for commercial purposes. However, in the course of operating a secure and legally compliant platform, there are limited situations where information sharing is required:

  • Payment processors: Transaction details are shared with payment service providers such as FPX, DuitNow, and e-wallet processors solely to facilitate your transactions. All our payment processors are bound by strict data protection agreements.
  • Identity verification providers: For KYC purposes, identity information may be transmitted to certified third-party identity verification platforms operating under international security standards.
  • Legal authorities: x888 will disclose required information to Malaysian authorities when mandated by a court order, warrant, or valid regulatory requirement.
  • Anti-money laundering: In compliance with Malaysia's AMLA legislation, suspicious transactions may be reported to the Financial Intelligence Unit (UFID) without notifying the player concerned.
Our Commitment: Every third party working with x888 has signed a Data Processing Agreement (DPA) requiring them to protect your data to the same or higher standard as our internal policies.

4Cookies & Tracking Technologies

X888 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them.
  • Analytics Cookies: Helps us understand how players use the platform — which pages are most popular, where players encounter difficulties, and how we can improve the overall experience. Analytics data is collected in aggregate and does not identify individuals.
  • Functional Cookies: Remembering your preferences such as display settings, favourite game selections, and account settings you have previously customised.
  • Performance Cookies: Optimising page load speeds and ensuring a smooth gaming experience by identifying and resolving technical issues.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help guide.

5Data Storage & Retention Period

X888 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law.

  • Active account data: Retained for the duration your account remains active and in use
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's tax legislation and financial compliance requirements
  • KYC documents: Retained for 5 years after account closure in accordance with AMLA requirements
  • Support communication logs: Retained for 3 years for dispute reference and quality assurance
  • Marketing data: Deleted within 90 days after you withdraw consent
  • Inactive account: Data is archived after 24 months of inactivity and permanently deleted after 7 years
Deletion Request: You can request deletion of your personal data by contacting the x888 support team. Please note that we may be required to retain certain data under legal obligations even after receiving your deletion request.

6Your Privacy Rights Under PDPA

As a x888 player in Malaysia, you are guaranteed rights under the Personal Data Protection Act 2010 (PDPA). x888 fully respects and facilitates the exercise of all these rights:

Right of Access Requesting a copy of the personal data we hold about you
Right to Rectification Correcting inaccurate or incomplete data
Right to Erasure Requesting data deletion under certain circumstances
Right to Object Objecting to data processing for marketing purposes
Right to Restriction Restricting data processing under certain circumstances
Right to Portability Receiving your data in a portable format

To exercise any of these rights, please contact the x888 support team via in-platform live chat. We will process your request within 14 working days. For complex requests, this period may be extended to up to 30 days with prior notice to you.

7Data Security Measures

X888 implements a comprehensive suite of technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or disclosure:

  • Encryption of data in transit and at rest: All data is encrypted using TLS 1.3 in transit and AES-256 at rest
  • Role-based access control (RBAC): Internal access to player data is divided by strict job-role permissions — no staff member has access beyond what their role requires
  • Two-factor authentication (2FA): Required for all staff access to systems containing player data
  • Periodic penetration testing: Independent security assessments are conducted periodically by certified third-party cybersecurity firms
  • Staff training: All x888 staff undergo regular data protection and cybersecurity training
  • Incident response plan: A clear procedure for detecting, reporting, and handling any data breach within the stipulated timeframe
In the Event of a Data Breach: In the event of a data breach that may affect your rights and freedoms, x888 will notify you and the Malaysian Personal Data Protection Commissioner within 72 hours of becoming aware of it, in accordance with applicable legal requirements.

8Children's Privacy

X888 is a platform exclusively for individuals aged 18 Years and Above only. We do not knowingly collect, process, or store any personal data from minors.

Our automated and manual age verification system is designed to identify and prevent registration by minors. If we find that a child's data has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian who believes your child has registered on our platform without permission, please contact the x888 support team immediately. We will investigate and take appropriate action within 24 hours.

9Amendments to the Privacy Policy

X888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to platform services. The "Updated" date at the top of this document will always reflect the latest version.

For changes that are material and directly affect your privacy rights, x888 will:

  • Displaying a clear notice on the platform's home page for a minimum of 14 days
  • Sending notifications via registered email or in-platform messages to all active players
  • In the event of significant changes, players will be asked to re-consent before the new policy takes effect

Continued use of the x888 platform after amendments are published will be considered your acceptance of the updated policy. If you do not agree with any amendments, you may close your account and request deletion of your data.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way x888 handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

  • 24/7 Live Chat: The fastest channel — live chat button available on every page of the x888 platform
  • Support email: [email protected] — response within 1–2 working days
  • Privacy complaint form: Available in the Account Settings section after login

If you are not satisfied with our response, you have the right to file a complaint with Department of Personal Data Protection (JPDP) Malaysia or the Personal Data Protection Commissioner appointed under PDPA 2010.


Play with Secure & Trusted

Your data is protected. Your games are provably fair. Your withdrawals are processed fast. Register an x888 account today and experience truly secure betting in Malaysia.

256-bit SSL Encryption PDPA 2010 Compliant Certified RNG 18+ Only
Bahasa Melayu