Xm66 Privacy Policy —
Your Data Security, Our Priority

1 Introduction

Welcome to the xm66 Privacy Policy. This document is the official statement on how we at xm66 handle the personal information of registered members and visitors to our platform at xm66.plus. We understand that privacy is a fundamental right of every individual, and we take it very seriously.

Xm66 is an online casino platform operating under a valid international licence, delivering a safe, fair, and enjoyable gaming experience for players across Malaysia. In providing this service, we need to collect and process certain personal information. This Privacy Policy transparently explains what that information is, why we need it, how we use it, and your rights regarding that data.

This policy applies to all users of the xm66 platform, including our official website, mobile app, and any related services we offer. By using the xm66 platform, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

2 Information We Collect

Xm66 only collects information that is strictly necessary to provide our services safely and efficiently. The information we collect falls into three main categories:

We never collect sensitive information such as bank passwords, PINs, or full credit/debit card details. All financial transactions are processed through PCI-DSS certified third-party payment gateways, meaning xm66 does not store your full card number in our system.

3 How We Use Your Data

Every piece of information we collect has a clear and lawful purpose. xm66 uses your personal data for the following purposes:

• Creating and managing your account, including the identity verification (KYC) process required by our licensing authority.
• Processing deposits, withdrawals, and all financial transactions accurately and securely.
• Providing responsive and effective customer support whenever you need assistance.
• Sending important information related to your account, including security notices and service updates.
• Detecting and preventing fraud, money laundering, and other illegal activities that may occur on our platform.
• Fulfilling legal compliance obligations and reporting to the relevant authorities when required.
• Enhancing the user experience through analysis of usage patterns and feedback you provide to us.
• Sending you promotions, special offers, and new product information — but only if you have given consent to receive such marketing communications.

4 Information Sharing

Xm66 upholds the highest standards of data confidentiality. We do not sell, rent, or disclose your personal information to third parties for their own commercial purposes. However, there are limited situations where we may need to share your data with certain parties:

• Trusted Service Providers: Technical partners such as payment providers, game providers, analytics platforms, and cloud service providers who help us operate the platform. They are bound by strict confidentiality agreements and may only use your data for purposes we have specified.
• Regulatory Authority: When required by law, court order, or direction from a legitimate authority, we will disclose the necessary information to regulatory bodies, law enforcement agencies, or tax authorities.
• Fraud Prevention: In cases of suspected fraud or illegal activity, we may share relevant information with anti-fraud agencies or financial institutions for investigation and prevention purposes.
• Business Transfer: Should xm66 be involved in any merger, acquisition, or asset sale, user data may be transferred as part of the business assets, subject to the same privacy protection guarantees.

5 Cookies & Tracking Technology

The xm66 platform uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform operates at its best. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Helping us understand how users interact with the platform through aggregated and anonymised data, enabling us to identify areas for improvement.
• Functional Cookies: Storing your preferences such as language selection, display settings, and saved login details so you do not need to re-enter them each time.
• Analytics Cookies: We use analytics tools to understand overall usage patterns for continuous product improvement. This data is collected in aggregate and does not identify you individually.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the xm66 platform.

6 Data Security

Xm66 continuously invests in the latest security infrastructure to protect your personal data from any unauthorized access, disclosure, alteration, or destruction. The security measures we implement include:

• Data encryption in transit using TLS 1.3 protocol and 256-bit SSL encryption for all communications between your device and xm66 servers.
• Data encryption at rest for all sensitive information in our databases using AES-256 encryption algorithm.
• Role-based access control (RBAC) ensuring that only staff with specific authorization can access user data relevant to their duties.
• Two-factor authentication (2FA) available for all member accounts and mandatory for all xm66 internal staff accounts.
• Continuous security monitoring 24 hours a day, 7 days a week, 365 days a year by our cybersecurity team.
• Regular security audits by independent third parties to identify and address any potential system vulnerabilities.
• A comprehensive incident response plan to ensure any data breach is addressed promptly and affected parties are notified in accordance with legal requirements.

7 Your Rights

As an xm66 member, you have comprehensive data protection rights that we fully respect. The following are your key rights, which may be exercised at any time:

8 Data Retention Period

Xm66 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable laws and regulatory obligations. The following is a general guide to our data retention periods:

• Active account data is retained for the duration your account remains active, plus any legally required retention period following account closure.
• Financial transaction records and KYC documents are retained for a minimum of five years after the last transaction, in line with anti-money laundering (AML) legal requirements.
• Customer support communication logs are retained for three years to allow reference in the event of any related disputes.
• Anonymized analytics data may be retained for a longer period for the purposes of ongoing service improvement.

Once the retention period expires, your data will be securely deleted or permanently anonymized so that it can no longer be linked to your identity.

9 External Site Links

The xm66 platform may contain links to websites of our game providers or business partners. This Privacy Policy applies solely to the xm66 platform and does not cover the privacy practices of any external websites you may visit through those links.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information to them. xm66 is not responsible for the privacy practices or content of third-party websites that are not under our control.

10 Changes to the Privacy Policy

Xm66 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the expansion of our services. When any material changes are made, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying a clear notice on the xm66 platform regarding changes that have taken effect.
• Sending notification emails to all registered members for changes deemed material and requiring your attention.

Continued use of the xm66 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account by contacting our support team.

11 Contact Us

If you have any questions, concerns, or complaints about how xm66 handles your personal data, or wish to exercise any of your privacy rights, our team is ready to assist you promptly and respectfully.