Data Privacy & Security

Privacy Policy xe77 – Personal Data Protection for Malaysia Members

Xe77 is committed to protecting the privacy and data security of every member. This Privacy Policy clearly explains how we collect, use, store and protect your information in accordance with the latest international data protection standards.

Last updated: January 2026 | 256-bit SSL Protected

Commitment xe77 Towards Your Privacy

Six core pillars of personal data protection that we practise every day to keep your information safe at all times.

Advanced-Level Encryption

All data transmitted between your device and xe77 servers is protected by 256-bit SSL encryption – the same standard used by leading banks worldwide. None of your information can be intercepted during transmission.

No Data Sales

Xe77 has never and will never sell, rent or permit third parties to use member personal data for marketing purposes. Your information belongs entirely to you and we respect that privacy.

Full Control in Your Hands

Xe77 members have the full right to access, edit, download, or request deletion of their personal data at any time via account settings or by contacting our support team.

Secure & Integrated Servers

Your data is stored in high-grade data centres with multi-layered security systems, including physical access controls, 24/7 monitoring, and automated backups to ensure continuity of your data.

International Standards Compliance

The xe77 Privacy Policy is built on internationally recognised data protection principles, including purpose limitation, data minimisation, and data quality, to ensure responsible data management.

Immediate Breach Notification

In the event of any security incident involving your personal data, xe77 is committed to notifying affected members within the stipulated timeframe and taking immediate remediation steps.

Important Note: This Privacy Policy forms part of the agreement between you and xe77. By registering or using the xe77 platform, you confirm that you have read and agreed to this policy. Please read it carefully before using our services.

1 Personal Data Collection

Xe77 only collects personal information that is strictly necessary to deliver quality, secure services and meet legal compliance requirements. We believe responsible data collection is the foundation of the trust you place in us.

1.1 Information You Provide Directly

When you register an xe77 account or interact with our platform, we collect information you provide directly, including:

  • Full name as shown on official identification documents
  • Date of birth for age verification (18 years and above)
  • Active email address for account communications
  • Mobile phone number registered in Malaysia
  • Bank account or e-wallet details for processing deposits and withdrawals
  • Identity document (MyKad or passport) during the KYC process
  • Proof of residential address when required for verification

1.2 Information Collected Automatically

When you use the xe77 platform – whether via the website or mobile app – our systems automatically collect technical information for security and service improvement purposes:

  • IP address and associated geographic location data
  • Device type, operating system, and browser version in use
  • Session records including pages visited, access times and session duration
  • Wagering data and financial transaction history within the platform
  • Cookie information and unique device identifiers

1.3 Information from Third Parties

In certain situations, xe77 may receive information about you from trusted sources such as identity verification service providers, financial institutions during payment processing, and recognised fraud prevention agencies. All such information is used solely for security, verification, and compliance purposes.

Minimum Collection Principle: xe77 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive information unrelated to the provision of our online betting platform services.

2 Use of Personal Information

Every piece of information we collect is used for a clear and transparent purpose. xe77 does not use your personal data for any purpose beyond the scope stated in this policy without first obtaining your additional consent.

Purpose of Use Types of Data Used Legal Basis
Account Management & Verification Name, email, phone, ID documents Contract performance
Deposit & Withdrawal Processing Banking information, transaction records Contract performance
KYC & AML Compliance Identity documents, address, financial records Legal obligation
Security & Fraud Prevention IP, device, transaction patterns Legitimate interest
Customer Support Email, phone, communication records Contract performance
Promotional Communications Email, phone (with consent) Consent
Platform Improvements Anonymous usage data Legitimate interest

2.1 Marketing Communications

Xe77 only sends marketing communications such as promotional information, bonus offers and platform updates to members who have given explicit consent. You may withdraw this consent at any time via the notification settings in your account without any effect on the core services you receive.

2.2 Automated Decision-Making

The xe77 system uses automated analysis to detect suspicious activity, prevent fraud and ensure platform security for all members. If you wish to contest any automated decision that affects your account, you have the right to request a review by our team.

3 Data Storage & Security

Protecting your personal data is more than a legal obligation for xe77 – it is a moral responsibility we take extremely seriously. We continuously invest in industry-grade security infrastructure to ensure your data is protected at all times.

3.1 Technical Security Measures

  • Encryption of Data in Transit: All communications between your device and xe77 servers use TLS 1.3 protocol with AES-256 encryption, ensuring no data can be intercepted during transmission.
  • Encryption of Data at Rest: Sensitive data stored in our databases is encrypted using industry-recognised algorithms, meaning it remains unreadable even in the event of unauthorised access.
  • Two-Factor Authentication (2FA): xe77 provides and encourages the use of 2FA for all member accounts as an additional layer of protection.
  • 24/7 Security Monitoring: Our cybersecurity team monitors the platform around the clock to detect and respond to threats in real time.
  • Regular Penetration Testing: Independent security assessments are conducted periodically by qualified third parties to identify and address any system vulnerabilities.

3.2 Data Retention Period

Xe77 retains your personal data for as long as your account is active and for the period required after account closure in accordance with relevant legal and regulatory requirements. In general:

  • Financial transaction records: Minimum 7 years from the transaction date
  • KYC documents: Minimum 5 years after account closure
  • Support communication logs: 2 years after case resolution
  • Anonymised usage and analytics data: May be retained indefinitely
Incident Response Plan: xe77 has a comprehensive incident response procedure. In the event of a data breach affecting members, we will notify the relevant authorities and affected members within the timeframe required by applicable law.

4 Data Sharing with Third Parties

Xe77 understands that sharing your personal data with third parties is a sensitive matter. We apply strict policies on when and how your data may be shared, and we never sell member data for any commercial purpose.

4.1 Trusted Service Providers

In operating the platform, xe77 works with third-party service providers that have undergone rigorous security screening. These providers are only permitted to access data necessary for their specific functions and are bound by data protection agreements:

  • Payment solution and transaction gateway providers
  • Game providers (casino and sports software vendors)
  • Identity verification and KYC services
  • Cloud infrastructure and data hosting providers
  • Fraud prevention and cybersecurity services

4.2 Mandatory Disclosure to Authorities

Xe77 may be required to disclose member personal information to government authorities or law enforcement bodies where there is a valid court order, a lawful law enforcement request, or compliance requirements under anti-money laundering (AML) and counter-terrorism financing (CTF) laws. In such circumstances, xe77 will disclose only the minimum information required by law.

4.3 Cross-Border Data Transfers

Some xe77 service providers operate outside Malaysia. Any cross-border data transfer is only carried out where the destination provides an adequate level of data protection or where appropriate contractual safeguards are in place, including the use of internationally recognised standard data protection clauses.

5 Cookies & Tracking Technologies

Xe77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how our platform is used. This section provides detailed information on the use of cookies on the xe77 platform.

5.1 Types of Cookies We Use

  • Essential Cookies (Required): These cookies are required for core platform functions such as login session management, transaction security, and basic navigation. The platform cannot function properly without them.
  • Performance & Analytics Cookies: Used to gather information on how members use the platform, helping us identify areas for improvement and optimise the overall user experience.
  • Functional Cookies: Allows the platform to remember your preferences such as language, display settings, and game choices to deliver a more personalized experience.
  • Security Cookies: Helps detect and prevent fraudulent activity, unauthorized access, and other security threats to your account.

5.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser or mobile app settings. Please note that disabling essential cookies may affect platform functionality and your user experience. For non-essential cookies, you may accept or decline them without affecting access to xe77's core services.

6 Your Rights as a Data Subject

Xe77 recognises and respects your rights regarding your personal data. We have established a straightforward and efficient process for you to exercise these rights. All valid requests will be processed within 30 business days.

Right of Access

You have the right to obtain a copy of all personal data we hold about you, including account information, transaction records, and communication logs.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request an immediate correction. We will update your information within 5 business days.

Right to Erasure

You may request deletion of your personal data, subject to data retention obligations applicable to the financial and gambling industry.

Right to Restriction of Processing

In certain situations, you may request that we restrict the processing of your data while an issue or dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transfer it to another service provider of your choice.

Right to Object

You may object to the processing of your data for direct marketing purposes or where processing is based on our legitimate interests.

7 Child & Young Person Protection

Child protection is an absolute priority for xe77. Our platform is designed exclusively for adults aged 18 and above, and we take robust measures to ensure that underage individuals cannot access our services.

7.1 Strict Age Verification

Xe77 employs a multi-stage age verification process during registration and throughout the KYC process. Our system is designed to detect registration attempts by underage individuals, and all accounts suspected of belonging to a minor will be suspended immediately while verification is carried out.

7.2 No Collection of Children's Data

Xe77 does not knowingly collect any personal data from individuals under the age of 18. Should we discover that we have received data from an underage individual, we will delete that information immediately and terminate the relevant account without any liability to xe77.

Parents & Guardians: If you believe your minor child has registered an account at xe77, please contact our support team immediately via live chat. We will take prompt action to close the account and delete all associated data.

8 Contact Us About Privacy

The xe77 Privacy Team is ready to assist you with any questions, concerns, or requests relating to your personal data. We are committed to providing prompt, transparent, and helpful responses to all privacy inquiries.

8.1 How to Reach Us

You may contact the xe77 Data Protection Officer via:

  • Live Chat: Available 24/7 via the xe77 platform for immediate response
  • Email: [email protected] (response within 1–2 business days)
  • Account Settings Section: For routine data access, correction and deletion requests

8.2 Privacy Policy Updates

Xe77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new technologies we adopt. Whenever the Privacy Policy is updated in a material way, we will notify members via in-account notifications or email at least 7 days before the changes take effect. The "Last updated" date at the top of this page always reflects the latest version currently in force.

Our Commitment: xe77 will always manage your personal data with integrity, transparency and accountability. Your trust is our most valuable asset and we never take this responsibility lightly.
Safe & Trusted

Your Data Is Safe. Join xe77 Today.

With 256-bit SSL encryption, a transparent privacy policy, and industry-grade security systems, you can play with peace of mind at xe77. Register now and enjoy a safe, fair, and rewarding betting experience.

256-bit SSL Protected  |  18+ Only  |  Trusted Platform

Bahasa Melayu