Official Document — Last Updated 1 January 2026

Privacy Policy X Bet — Malaysian User Data Protection

At X Bet, your privacy is more than a legal obligation — it is a responsibility we take seriously every day. This policy clearly explains what data we collect, why we need it, how we protect it, and your rights as a member to control your own personal information.

X Bet's Privacy Commitment
  • 256-bit SSL encryption for all data and transactions
  • Your data is never sold to third parties
  • Compliance with the Personal Data Protection Act 2010 (PDPA)
  • You can request deletion or review of your data at any time.
  • Servers are housed in certified data centres with 24/7 physical security

X Bet's Six Core Privacy Principles

This is the foundation of how X Bet handles the personal data of every one of our Malaysian members.

🔐
Minimum Data Collection
X Bet collects only the data strictly necessary to operate your account, process payments in MYR, and comply with regulatory requirements. We do not collect excessive information that serves no clear operational purpose.
Necessary Only • No Excess
🛡️
Advanced Technical Protection
All member data is protected with 256-bit SSL encryption during transmission and AES encryption during storage. Access to members' personal data is restricted to staff with a clear operational need, and every access is recorded in a secure audit log.
SSL 256-bit • AES • Audit Logs
🚫
No Sale of Data to Third Parties
X Bet has never and will never sell, rent, or share member personal data with advertising companies, data brokers, or any commercial third party. Your data belongs to you — it is not a business asset of ours.
No Data Sales • Privacy Guaranteed
⚖️
Malaysian PDPA Compliance
X Bet operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally recognised rights to access, correct, and request the deletion of your personal data that we hold.
PDPA 2010 • Legal Rights
🔔
Full Transparency in Data Usage
This policy clearly sets out every purpose for which we use the data we collect. There are no "hidden purposes" or undisclosed uses of your data. If our data usage changes, we will inform you and request fresh consent where required.
Transparent • No Hidden Purposes
🗑️
Right to Erasure & Data Control
You have the right to request that X Bet delete your personal data when it is no longer needed, provided there are no legal obligations requiring its retention. Deletion requests will be processed within 30 business days.
Right to Erasure • 30-Day Processing Period
This Privacy Policy was last updated on 1 January 2026. By using the X Bet platform, you agree to the latest version of this privacy policy.

1. Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how X Bet ("we", "Platform") handles personal data in connection with the online casino services we offer in Malaysia through xbet.asia. This Policy applies to all registered members, prospective members in the process of registering, and visitors to our platform.

X Bet operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the country's primary data protection legislation. We are committed to ensuring that the personal data you share with us is handled with full responsibility, security, and transparency.

Your privacy matters to us — not just because the law requires it, but because the trust you place in X Bet when you register and use this platform is something we never take lightly. In the online entertainment industry, trust is the foundation of everything, and we understand that it can only be built through consistent, transparent action over time.

Quick Summary: X Bet collects only the data necessary to run our services, protects it to the highest technical standards, never sells it to anyone, and gives you full control over it. That is our commitment to every Malaysian member.


2. Personal Data We Collect

X Bet collects personal data in several different situations throughout your journey on our platform. Below is a detailed explanation of each category of data we collect:

Data Category Example Information Time Collected
Identity Information Full name, MyKad/passport number, date of birth, gender Registration & KYC
Contact Information Email address, Malaysian phone number, residential address Registration
Financial Information E-wallet account numbers (TNG, GrabPay, DuitNow), FPX bank account details Deposits/Withdrawals
Game Activity Data Game records, total wagers, winnings, losses, session duration During Gameplay
Technical Data IP address, browser type, operating system, screen resolution, general location Automatic
Communication Data Support chat records, inbound/outbound emails, complaint tickets. Support Interactions
Cookie Data Session cookies, preference cookies, analytics cookies (see Section 9) Platform Visits

2.1 Data We Do Not Collect

It is equally important for you to know what we do not collect. X Bet does not directly store credit or debit card numbers — all payments are processed through third-party e-wallet and banking providers that comply with their own security standards. We also do not collect sensitive information such as medical records, political affiliations, or religious beliefs.

2.2 Data Provided Voluntarily

Some of the data we collect is provided by you voluntarily — for example, when you complete the registration form, contact customer support, or update your account profile. This data can be updated by you at any time through the "Account Settings" section on the X Bet platform.


3. How We Use Your Personal Data

X Bet uses the personal data we collect solely for the following purposes. We will not use your data for any purpose not stated here without first obtaining your fresh consent.

3.1 Account Operations and Services

  • Creating and managing your X Bet member account
  • Verifying your identity during registration and the KYC process
  • Processing deposits and withdrawals in Malaysian Ringgit (RM) via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
  • Enabling you to access and play slots, live casino, lottery, jackpot, and other games on the X Bet platform
  • Sending notifications for transactions, winnings, and relevant account activity.

3.2 Security and Compliance

  • Detecting and preventing fraud, money laundering, and other illegal activities
  • Compliance with applicable Malaysian regulatory and legal requirements
  • Verifying that members meet the minimum age requirement (18 years old) and other eligibility criteria
  • Supporting responsible gaming tools such as deposit limits, loss limits, and self-exclusion
  • Resolving disputes and investigating complaints using accurate system records

3.3 Communications and Customer Service

  • Customer support available in Malay and English, 24/7
  • Sending relevant promotional information and bonuses — only if you have consented to receive marketing communications.
  • Sending important notifications regarding changes to terms, new promotions, or account activity that requires your attention

3.4 Platform Improvements

Aggregated data that cannot be individually identified is used to analyse platform usage patterns, identify areas for improvement, and develop new features that are more useful to members. This analysis never uses personal data that can identify you as an individual.


4. Data Sharing with Third Parties

X Bet does not sell, rent, or disclose member personal data to third parties for commercial purposes. However, in the course of operating the platform, we may need to share certain data with a limited number of service partners in the following circumstances:

4.1 Recognised Service Providers

X Bet works with carefully selected third-party service providers to help us operate the platform. These include payment processing providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX banks), gaming software providers (Pragmatic Play, Evolution Gaming, Microgaming, and others), identity verification providers for KYC, and cloud infrastructure and cybersecurity providers.

All third-party providers are bound by strict data protection agreements and are permitted to use shared data solely for the purposes specified in those agreements. They are not authorised to use the data for any other purpose.

4.2 Legal Requirements

X Bet may be required to disclose members' personal data to Malaysian authorities such as the police, courts, or regulatory bodies when mandated by applicable law, or when such disclosure is necessary to protect public safety or prevent financial crime. In such situations, X Bet will disclose only the minimum data required and will notify you of the disclosure where permitted by law.

Important Clarification: X Bet has never and will never share your data with insurance companies, third-party advertisers, data brokers, or any commercial entity not directly involved in delivering X Bet's services to you.


5. Data Security — How We Protect Your Information

X Bet continually invests in technical security infrastructure and organisational procedures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. Below are the layers of protection we have implemented:

5.1 Technical Security

  • Transmission Encryption: All communications between your device and X Bet's servers are secured with TLS 1.3 protocol using 256-bit SSL certificates — the same standard used by Malaysia's leading banks.
  • Storage Encryption: Sensitive data stored in our databases is encrypted using the AES-256 algorithm
  • Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of account protection
  • Real-Time Monitoring: Our security monitoring system operates 24/7 to detect and respond to any unauthorised access attempts
  • Regular Security Testing: The X Bet platform undergoes regular penetration testing and security audits conducted by independent security experts

5.2 Access Controls

Access to member personal data within X Bet's internal systems is strictly controlled under a least-privilege principle — only staff with a clear operational need are permitted to access such data, and all access is logged in a secure audit system. Staff who handle member data undergo background checks and regular data protection training.

5.3 Data Breach Response

While X Bet takes all reasonable steps to protect your data, no system can guarantee 100% security in a digital environment. In the event of a data breach that may affect your rights and freedoms, X Bet will notify you within 72 hours of detecting the breach, in line with data protection best practices. The notification will include the nature of the breach, the data potentially affected, and the steps we have taken to address it.


6. Data Retention Period

X Bet does not retain your personal data indefinitely. Data is kept for as long as necessary to fulfil the purpose for which it was collected, or for as long as required under applicable Malaysian law, whichever is longer.

Data Type Retention Period Reason
Active Account Information Throughout the active account period Service operational requirements
Financial Transaction Records 7 years after transaction Malaysian legal requirements (Tax Act, AML)
KYC Documents 5 years after account closure Anti-money laundering requirements
Game Records 3 years after session Dispute resolution & audits
Support Communication Logs 2 years Service referrals & improvements
Analytics Cookie Data 13 months Platform usage analytics

Once the retention period expires, data will be securely deleted or permanently anonymised so it can no longer be linked back to you as an individual.


7. Your Rights as an X Bet Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and X Bet's privacy policy, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via Live Chat or email support@xbet.asia.

Right of Access
You have the right to request a copy of the personal data we hold about you. We will fulfil this request within 21 business days.
Right to Rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic information can be updated directly through Account Settings.
Right to Erasure
You may request deletion of your personal data that is no longer required, subject to applicable legal retention obligations.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time by contacting us or clicking the unsubscribe link in any marketing email.
Data Portability Rights
You have the right to receive your personal data in a machine-readable format for transfer to another service provider upon request.
Right to Restriction of Processing
In certain circumstances, you may request X Bet to restrict the processing of your data while a dispute or investigation is ongoing.

How to Exercise Your Rights: Send a written request to support@xbet.asia with the subject line "Data Privacy Rights Request" along with your account number and the type of request. We will verify your identity and process your request within the timeframe required by law.


8. Children's Privacy

X Bet is an adult entertainment platform intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from children or minors under the age of 18.

Every registration goes through an age verification process. Should we discover that personal data belonging to an individual under 18 has been collected without our knowledge — for example, as a result of false information provided during registration — the account in question will be terminated immediately and all related data deleted as soon as possible.

If you are a parent or guardian and believe your minor child has registered an account with X Bet, please contact us immediately at support@xbet.asia so we can take the appropriate action.


9. Cookies & Tracking Technologies

X Bet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the X Bet platform. They help us remember your preferences, keep your login session secure, and understand how members interact with our platform.

10. Amendments to This Privacy Policy

X Bet reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Members will be notified of any significant changes via email and in-platform notifications at least 14 days before they take effect, giving you sufficient time to review the updates.

For minor changes that do not affect your fundamental rights — such as spelling corrections or language clarifications — we will update the "Last Updated" date without sending a separate notification. The date at the top of this document always reflects the latest version.

If you do not agree with any amendments to the Privacy Policy, you have the right to close your account before the amendments take effect. Continued use of the platform after that date will be considered acceptance of the revised Privacy Policy.

11. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how X Bet handles your personal data, we encourage you to reach out to us directly. The X Bet support team is available in both Bahasa Malaysia and English, 24 hours a day, 7 days a week.

Privacy Email

For privacy rights requests, policy enquiries, or complaints related to personal data:

Support@xbet.asia

Response time: within 3 business days

24/7 Live Chat

For immediate assistance or enquiries in Bahasa Malaysia, use the in-platform Live Chat:

Log in to access Live Chat →

Average response time: < 2 minutes

X Bet Privacy Frequently Asked Questions

X Bet does not sell or share your personal data with other companies for commercial purposes. We only share the data necessary with service providers who help us operate the platform — such as payment processing providers (Touch 'n Go, GrabPay, DuitNow, FPX) and gaming software providers. All such providers are bound by strict confidentiality agreements and may only use the data for the specified purposes.

Yes, you may request deletion of your personal data by contacting support@xbet.asia. Please note, however, that some data may not be deleted immediately due to legal retention requirements. For example, financial transaction records must be retained for 7 years under Malaysian law. Data eligible for deletion will be processed within 30 business days from the date your request is received and your identity is verified.

X Bet does not directly store credit or debit card numbers. All card transactions are processed through third-party payment providers that comply with PCI DSS standards. For e-wallets such as Touch 'n Go, GrabPay, and DuitNow, we retain only the associated e-wallet account ID to facilitate withdrawals — not your password or full e-wallet account details. This means your sensitive financial data is never stored directly within X Bet's systems.

When you close your X Bet account, we will immediately stop using your data for account operation and marketing purposes. However, certain data will be retained for periods required by law: financial transaction records for 7 years, and KYC documents for 5 years after account closure. This is not our choice — it is a legal requirement under Malaysian law relating to anti-money laundering and tax reporting obligations. Once the statutory retention period ends, all data will be securely deleted.

X Bet uses analytics data to understand platform usage patterns at an aggregate level — for example, which games are played most, peak usage hours, and which pages frequently cause technical issues. This helps us make better development decisions. However, these analytics are conducted using aggregated data that does not identify you as an individual. Individual game activity records are stored separately for operational and dispute resolution purposes only, and are not shared with any external parties.

In the event of a serious data breach, X Bet is committed to notifying affected members within 72 hours of detecting and confirming the breach. Notification will be sent to your registered email address and will include: the nature of the breach and the data potentially affected, the steps we have taken to address it, and recommended actions you can take to protect yourself. X Bet continually invests in security to minimise this risk, but we believe transparency is our obligation to every member should an incident occur.
Play with Confidence at X Bet

Your Data Is Safe — Your Gaming Experience Is Protected at X Bet

Now that you know how X Bet protects your privacy, sign up with complete confidence. Enjoy over 1,200 games, easy deposits via Touch 'n Go & DuitNow, and 24/7 support in Bahasa Melayu.

256-bit SSL Protected Data No sale of data to third parties Malaysian PDPA Compliance 24/7 Malay Language Support
Bahasa Melayu