Privacy Policy

XE77 Privacy Policy & Data Protection

Your privacy is our priority. This document transparently explains how XE77 collects, uses, stores, and protects the personal data of every member in Malaysia.

Last Updated: 1 January 2026

xe77's Commitment: We never sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. Your data is used solely to enhance your experience on the XE77 platform.

1 Introduction

XE77 deeply values the trust every member places in us. As an online gaming platform operating in Malaysia, we understand that privacy is more than a legal obligation — it is the foundation of trust we build together with our member community.

This Privacy Policy describes our practices regarding the collection, use, storage, and protection of your personal data when you use the XE77 website, mobile app, and services. By registering or using our platform, you agree to the terms set out in this Privacy Policy.

This policy applies to all registered members, website visitors, and any individual who interacts with the XE77 platform in any capacity. We encourage you to read this document carefully and contact our support team if you have any questions.


2 Data We Collect

In operating the XE77 platform, we collect various categories of personal data depending on your interactions with our platform. The following are the types of data we may collect:

Data Category Examples of Information Primary Purpose
Identity Data Full name, date of birth, identification card number (MyKad), gender KYC verification, fraud prevention
Contact Data Email address, mobile number, residential address Account communications, transaction notifications
Financial Data Payment method details, deposit and withdrawal history Transaction processing, AML compliance
Technical Data IP address, device type, web browser, operating system Security, fraud detection, analytics
Usage Data Game history, wagering activity, game preferences Personalised experience, relevant promotions
Communication Data Support chat records, complaint tickets, feedback Issue resolution, service improvement

XE77 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information or religious beliefs unless specifically required by law.


3 How We Collect Data

XE77 collects personal data through several different channels, all within the limits permitted by law:

Information You Provide Directly

When you register a XE77 account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or fill in any form on our platform, you are directly providing us with personal data. This data is the most complete and accurate as it comes directly from you.

Automatically Collected Data

When you browse or use the XE77 platform, our systems automatically record certain technical information including your IP address, browser type, pages visited, session duration, and actions performed. This data is collected via cookies, tracking pixels, and similar technologies to ensure security and improve the user experience.

Data from Authorised Third Parties

In certain circumstances, we may receive your personal data from authorised third parties such as identity verification service providers, payment providers (DuitNow, FPX, Touch 'n Go, GrabPay, Boost, ShopeePay), and fraud prevention agencies. This data is used solely for account verification and security purposes.


4 Personal Data Usage

XE77 uses your personal data for legitimate and necessary purposes to operate our services effectively. The following are the primary purposes for which your data is used:

  • Account Management: Creating, verifying and maintaining your member account, including the KYC process required by law.
  • Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and other suspicious activities.
  • Legal Compliance: Fulfilling our legal obligations under the Personal Data Protection Act 2010 (PDPA), AML regulations and relevant regulatory requirements.
  • Customer Support: Providing responsive and effective technical support and customer service.
  • Personalise Your Experience: Personalising content, promotions and game recommendations based on your preferences and gaming habits.
  • Service Communications: Sending important notifications related to your account, security, transactions and policy changes.
  • Analytics & Improvement: Analysing usage patterns to improve the functionality, performance and overall experience of the xe77 platform.

Marketing: XE77 will only send you marketing communications if you have given your consent. You may withdraw marketing consent at any time through your account settings or by contacting our support team.


5 Data Sharing

XE77 has never sold your personal data to any third party. We only share your data in the following limited situations, and always within a framework of strict protection:

  • Service Providers: Selected technical and business partners who help us operate the platform, including payment providers, identity verification providers, and cloud infrastructure providers. All partners are bound by strict confidentiality agreements.
  • Relevant Authorities: Government agencies, law enforcement bodies, or regulatory authorities when required by applicable Malaysian law or a valid court order.
  • Fraud Prevention: Fraud detection agencies and industry security networks that help us protect all members from malicious activity and money laundering.
  • Business Transfers: In the event of a merger, acquisition, or sale of company assets, member data may be transferred to the new entity, which will continue to be bound by an equivalent or stricter privacy policy.

Cross-Border Transfers: If your data needs to be transferred outside Malaysia, XE77 ensures that protection equivalent to Malaysia's PDPA standards is upheld through appropriate data transfer agreements.


6 Data Security & Encryption

XE77 invests seriously in the latest cybersecurity infrastructure to ensure your personal data is always protected. The security measures we implement cover multiple layers of defense:

  • 256-bit SSL encryption: All data transmitted between your device and XE77's servers is encrypted using TLS 1.3 — the same highest industry standard used by leading banking institutions.
  • Stored Data Encryption: Sensitive data stored in our databases is encrypted using AES-256 encryption, which cannot be broken without the correct encryption key.
  • Two-Factor Authentication (2FA): We provide and encourage the use of 2FA for all member accounts to add an extra layer of protection.
  • 24/7 Monitoring: A real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity immediately.
  • Strict Access Controls: Only XE77 staff with a legitimate business need are permitted to access member personal data, and all access is logged and audited on a regular basis.
  • Penetration Testing: The xe77 platform undergoes regular security testing by independent security experts to identify and address any vulnerabilities before they can be exploited.

Important: While XE77 takes all reasonable precautions, no system is 100% immune to cyber threats. In the event of any security incident affecting your data, we will notify you within the timeframe required by law.


7 Cookies & Tracking Technologies

XE77 uses cookies and similar tracking technologies to enhance your experience, understand how members use our platform, and ensure login session security. The following are the types of cookies we use:

Essential Cookies

These cookies are required for the core functions of the xe77 platform and cannot be disabled. They include login session cookies, security cookies and cookies that store your language preferences. Without these cookies, the platform will not function properly.

Performance & Analytics Cookies

These cookies help us understand how members interact with the platform — which pages are most popular, how long sessions last and where users encounter issues. This information is used for the continuous improvement of the xe77 platform.

Functional Cookies

Functional cookies store your personal preferences such as display settings, selected language and game configurations. These cookies allow us to provide a more personalised experience each time you return to our platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the XE77 platform.


8 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold. XE77 is committed to respecting and facilitating the exercise of these rights:

  • Right to Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You may request the correction of any data that is inaccurate or incomplete.
  • Right to Withdraw Consent: You may withdraw consent for data processing at any time, subject to our legal obligations.
  • Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
  • Right to Information: You have the right to know how and why your data is being used.

To exercise any of these rights, please contact the XE77 customer support team via live chat. We will process your request within 14 business days.


9 Data Retention & Deletion

XE77 retains your personal data for as long as your account is active or as long as necessary to provide services to you. When data is no longer needed for its original purpose, we will securely delete or anonymize it.

However, there are certain categories of data we are required to retain for a longer period for legal compliance reasons — specifically financial transaction data and KYC records required under Malaysia's AML regulations, typically for five to seven years after account closure.

Once the defined retention period expires, your data will be permanently deleted from all XE77 systems using secure deletion methods that comply with industry standards.


10 Privacy Policy Amendments

XE77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal developments, or service improvements. Members will be notified of any material amendments via their registered email or a prominent notice on the platform's main page.

The "Last Updated" date at the top of this page will always reflect the date of the latest revision. Your continued use of the XE77 platform after any revision takes effect constitutes your acceptance of the updated policy.


11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, the XE77 data protection team is available to assist you 24 hours a day, 7 days a week.

Please contact us via live chat on the XE77 platform or email our team at: [email protected]

We are committed to responding to all privacy-related enquiries within 3 business days. Your satisfaction and security are our top priority.

Why Your Data Secure at XE77

XE77 implements multi-layered protection to ensure the privacy and data security of every member across Malaysia.

🔐
256-Bit SSL Encryption
Every bit of data moving between your device and XE77's servers is protected by TLS 1.3 encryption — the same technology used by the world's leading banks to secure financial transactions.
🛡️
24/7 Threat Monitoring
XE77's real-time security monitoring system runs continuously to detect unauthorized access attempts, suspicious activity, and cyber threats before they can affect your account.
🔑
Two-Factor Authentication
Protect your xe77 account with an extra layer of security through 2FA. Even if your password is compromised, hackers still cannot access your account without the second verification code.
📋
Malaysia PDPA Compliance
XE77 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We undergo regular compliance audits and continuously update our practices in line with the latest legislative developments.
🚫
No Data Sales
XE77 has never and will never sell, rent, or trade members' personal data to third parties for commercial purposes. Your data belongs to you — we are only its custodian.
⚡
Data Control in Your Hands
Through your xe77 account settings, you can access, update and manage your own personal data at any time. Your rights as a member are guaranteed and we make it easy for you to exercise them.

Rights Data Protection You

Under the Malaysian PDPA, you have the following rights, which XE77 is committed to respecting and facilitating.

Right to Access
Request a copy of all personal data we hold about you at any time.
Right to Rectification
Update or correct any personal information that is inaccurate or out of date.
Right to Withdraw Consent
Withdraw consent for marketing or specific data processing at any time.
Right to Object
Object to data processing for direct marketing purposes or specific uses.
Right to Information
Know exactly how, why and with whom your data is used or shared.
Right to Assistance
Contact our support team 24/7 for any privacy-related questions or requests.

Frequently Asked Questions — Privacy Policy

Absolutely not. XE77 has never and will never sell, rent, or trade members' personal data to any third party for commercial purposes. Your data is only shared with selected operational partners bound by strict confidentiality agreements, or with authorities when required by Malaysian law.

All your financial information is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest. We do not store full card details — only secure tokens issued by licensed payment providers. Our 24/7 monitoring system also detects any suspicious transactions in real time.

Yes, you may request deletion of your personal data by contacting the XE77 support team. However, certain data is required to be retained under Malaysian law — for example, financial transaction records and KYC data required under AML regulations for five to seven years. Other data not subject to legal retention obligations will be deleted within 30 business days.

The KYC (Know Your Customer) process is a legal requirement that all financial and online gaming platforms in Malaysia must comply with under anti-money laundering (AML) regulations. It also protects you — by verifying member identities, we can prevent fraud, unauthorized account takeovers, and other criminal activities that could harm you.

You can update most of your personal information directly through the profile page in your XE77 account. For changes to sensitive details such as your full name or ID number, please contact our support team and provide the appropriate verification documents to ensure the accuracy of your records.

When you close your XE77 account, we will deactivate your profile immediately. Personal data not subject to legal obligations will be deleted within 90 days. Financial and KYC records will be retained for the period required under Malaysian law before being permanently deleted using secure deletion methods that comply with industry standards.
🔐

Ready to Play with Privacy Guaranteed?

Join millions of XE77 members in Malaysia enjoying a premium gaming experience with full confidence that their personal data is always protected to the highest standard. Register now — free and secure.

256-bit SSL Encrypted Data Malaysia PDPA Compliance No Data Sales
Bahasa Melayu