Privacy Policy

Xeus138 Privacy Policy – We Protect Your Personal Data

Your privacy is our priority. This document clearly explains how xeus138 collects, processes, stores, and protects your personal information as a user in Malaysia.

Updated: December 2026
Applicable in Malaysia
256-bit SSL Encryption
🔐
Encrypted Data

All personal data is encrypted to the highest industry standards

🚫
No Data Selling

Xeus138 has never sold your personal data to third parties

✋
User Rights

You have the right to access, update or request deletion of your data

📋
8 Clear Clauses

A straightforward privacy policy with no confusing legal jargon

xeus138's Privacy Commitment: We take every user's privacy seriously. Your information is only used for the purposes stated in this Policy and is never sold or shared without legitimate reason. If you have any questions, our support team is ready to help.

1 Introduction and Scope of This Policy

This Privacy Policy ("Policy") is published by xeus138 and applies to all users who access or use the xeus138 platform, including our official website and mobile app. This Policy describes our practices regarding the collection, use, disclosure and protection of your personal information.

Xeus138 is committed to protecting the privacy of Malaysian users and complying with the Personal Data Protection Act 2010 (PDPA) and other applicable legislation. We only collect information necessary for legitimate purposes and use it responsibly.

By registering an account or continuing to use the xeus138 platform, you are deemed to have read, understood and agreed to this Privacy Policy. If you do not agree with any part of this Policy, please stop using our platform.

2 Types of Personal Information We Collect

Xeus138 collects various types of personal information depending on your interactions with our platform. The information collected includes:

Registration and identity information:

  • Full name as it appears on your official identification document
  • Date of birth (to verify that you are 18 years of age or older)
  • National identification number (MyKad) or passport number
  • Email address and mobile phone number
  • Residential or delivery address

Financial information:

  • Bank account number registered for deposits and withdrawals
  • E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost) used on the platform
  • Records of deposit, withdrawal, and wagering transactions

Technical and usage information:

  • IP address, device type and operating system
  • Browser data including version and language settings
  • Game activity logs, session duration, and platform usage patterns
  • General location data (state/city) based on IP address

KYC Note: To comply with legal requirements and prevent fraud, xeus138 requires a copy of your official identification document during the account verification process. These documents are handled with the highest security standards.

3 Purpose of Data Collection and Processing

Every piece of information we collect has a clear and legitimate purpose. xeus138 uses your personal data for the following:

  • Account management: Create, verify, and securely maintain your user account.
  • Transaction processing: Process deposits, withdrawals, and all financial transactions accurately and promptly.
  • Legal compliance: Meet legal obligations, including KYC requirements and anti-money laundering (AML) compliance.
  • Platform security: Detect and prevent fraud, unauthorized access, or suspicious activity.
  • Customer support: Provide effective support when you contact our customer service team.
  • Service improvement: Analyze usage patterns to enhance the user experience and platform performance.
  • Important communications: Send account-related notifications, transaction updates, promotions, and platform announcements.
  • Responsible gaming: Monitor gaming patterns to identify signs of problem gambling and offer appropriate assistance.

Xeus138 will not use your data for purposes not stated above without obtaining your consent first.

4 Data Sharing and Disclosure to Third Parties

Xeus138 does not sell, rent, or distribute your personal information to third parties for marketing purposes. However, in certain limited circumstances, we may share your data with:

  • Payment processors: Financial institutions and e-wallet processors required to facilitate your deposit and withdrawal transactions.
  • Technology service providers: Third-party vendors supporting platform operations, subject to strict confidentiality agreements.
  • Regulatory and law enforcement bodies: When required by law, court order or directive from a competent authority.
  • Fraud prevention services: External systems that help us identify and prevent fraudulent activity to protect all users.

All third parties who receive xeus138 user data are required to uphold data protection standards equivalent to ours and may only use that data for agreed purposes.

Our guarantee: xeus138 has never and will never sell your personal data to any party for commercial or third-party marketing purposes.

5 Data Retention Period and Security Measures

Xeus138 retains your personal information for as long as necessary to fulfil the purpose of collection, or for the period required by applicable law. Generally:

  • Active account data: Retained for as long as your account is active and for several years after account closure.
  • Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial regulatory requirements.
  • Log and technical data: Retained for 90 to 180 days depending on data type.

Security measures we implement to protect your data:

  • 256-bit SSL Encryption for all data transferred between your device and our servers.
  • Database encryption for all stored sensitive information, including financial details.
  • Strict access controls — only authorised staff may access user data for legitimate operational purposes.
  • Continuous security monitoring by a dedicated IT security team around the clock.
  • Penetration testing periodically by independent third parties to identify and close any vulnerabilities.
  • Two-factor authentication (2FA) available for all user accounts as an additional layer of security.

6 Use of Cookies and Tracking Technologies

Xeus138 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use:

  • Essential cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
  • Performance cookies: Help us understand how users interact with the platform so we can continuously improve its performance.
  • Functional cookies: Save your preferences, such as language and display settings, for a more personalized experience.
  • Analytics cookies: Collect aggregated and anonymized usage data to help us understand platform usage trends.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of some parts of our platform. We recommend allowing essential cookies for the best experience.

Xeus138 does not use third-party cookies for targeted advertising or sell analytics data to advertisers.

7 Your Rights Regarding Personal Data

As a xeus138 user, you have the following rights regarding your personal data:

Your Rights Description Status
Right to Access You may request a copy of the personal data we hold about you at any time. Available
Right to Rectification You may request correction of any inaccurate or incomplete information in our records. Available
Right to Erasure You may request deletion of your personal data, subject to any legal obligations binding on us. Available
Right to Restrict Processing You may request that we restrict how your data is processed in certain situations. Available
Right to Data Portability You may request your data in a machine-readable format for transfer to another service. Available
Right to Object You may object to the processing of your data for specific purposes such as direct marketing. Available

To exercise any of the rights above, contact the xeus138 customer support team via live chat available on the platform. Your request will be processed within 30 business days, subject to the required identity verification.

8 Privacy Policy Amendments and How to Contact Us

Xeus138 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. Any material amendments will be communicated to users via in-platform notifications or email at least 14 days before taking effect.

The "Updated" date at the top of this policy indicates when changes were last made. We encourage you to review this page periodically to stay informed about how we protect your privacy.

Your continued use of the xeus138 platform following any policy amendment constitutes your acceptance of the latest version of this Privacy Policy.

For any inquiries, concerns, or requests regarding your data privacy:

  • Contact us via Live Chat available 24/7 on the xeus138 platform
  • Submit your enquiry via our support email
  • Our privacy team will respond within 3 business days

Your privacy is your right. At xeus138, we go beyond mere legal compliance — we believe that robust data protection is the foundation of trust between a platform and its users.

Our Privacy Commitment

How xeus138 Protects Your Data

We go beyond mere compliance — we invest in data security because we genuinely care about your trust.

Bank-Grade Encryption

Your data is protected with the same 256-bit SSL encryption used by leading banking institutions in Malaysia. Every bit of data travelling between your device and our servers is secure.

Protected Database

Your sensitive information, including financial details, is stored in an encrypted database with strict access controls. Only authorized personnel can access user records.

No Data Selling

Xeus138 has never and will never sell your personal information to advertisers or third-party data brokers. Your data is used solely to operate and improve our services for you.

Secure KYC

Our identity verification process uses a secure system, and the identity documents you submit are stored with full encryption. They are only accessed during legitimate verification procedures.

24/7 Security Monitoring

The xeus138 IT security team continuously monitors the platform to detect any threats or suspicious activity before they can affect your account.

Malaysia PDPA Compliance

Xeus138 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We treat adherence to privacy laws not merely as an obligation, but as a moral responsibility to our users.

Your Data Is Safe. Now, Let's Play!

Join 500,000+ xeus138 members who play with peace of mind, knowing their data and funds are fully protected.

Register a Free Account Login
Bahasa Melayu