xvg8 Privacy Policy

01Who We Are

xvg8 is an online casino and sports betting platform operating at xvg8.app, serving players primarily in Malaysia. xvg8 operates under applicable international gaming authority regulations and acts as the data controller in respect of personal data collected through the Platform.

For the purposes of this Privacy Policy, "Platform" means xvg8.app and all related pages, services, games, and features. "Player" or "you" means any individual who registers an account, visits the Platform, or otherwise interacts with xvg8 services.

Questions about this Privacy Policy or requests to exercise your data rights may be directed to xvg8's support team via the contact details in Section 13 below.

02Data We Collect

xvg8 collects personal data in the following categories when you interact with the Platform:

Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, nationality, government-issued ID details	Registration & KYC verification
Contact Data	Email address, contact number	Registration & account settings
Financial Data	Payment method type, transaction amounts, deposit and withdrawal history	Deposits, withdrawals, transactions
Gaming Data	Bets placed, games played, win/loss records, session durations, responsible gaming settings	Platform usage
Technical Data	IP address, browser type, device identifiers, operating system, login timestamps	Automatically on Platform access
Communications Data	Support chat logs, emails, feedback submissions	Support & communications

xvg8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where expressly required for responsible gaming compliance purposes (such as self-exclusion records).

03How We Use Your Data

xvg8 uses collected personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your xvg8 account; verifying your identity and eligibility to use the Platform.
• Age Verification: Confirming that you are 21 years of age or older, as required for access to xvg8 gambling services.
• Payment Processing: Processing deposits via Touch n Go eWallet, Boost, and bank FPX transfers; processing withdrawal requests; maintaining transaction records.
• Regulatory Compliance: Meeting anti-money-laundering (AML) obligations, responsible gaming requirements, and reporting obligations under applicable gaming authority regulations.
• Platform Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised access to player accounts.
• Customer Support: Responding to your enquiries, resolving disputes, and providing account assistance.
• Service Improvement: Analysing aggregate, anonymised usage patterns to improve Platform performance, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to players who have opted in to receive such communications.

xvg8 does not use personal data for automated decision-making that produces significant legal effects on players, except where required by applicable AML or regulatory obligations.

04Legal Basis for Processing

xvg8 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the Terms & Conditions agreement you enter into when registering an xvg8 account — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, gaming authority licensing conditions, and age verification requirements.
• Legitimate Interests: Processing for fraud prevention, Platform security, and aggregate service analytics, where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have expressly opted in. You may withdraw consent at any time via your xvg8 account settings.

05Sharing Your Data

xvg8 does not sell, rent, or trade personal data to third parties for their own commercial purposes. xvg8 may share personal data with the following categories of recipients, strictly for the purposes outlined in this Policy:

• Payment Service Providers: Touch n Go eWallet, Boost, and bank payment processors require transaction data to facilitate deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and age verification service providers used to verify your identity and eligibility.
• Gaming Technology Providers: Game software providers (such as Pragmatic Play, Evolution Gaming, Habanero) receive the minimum game session data necessary to operate their products on the xvg8 Platform.
• Regulatory Authorities: xvg8 may be required to disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by applicable law or regulation.
• Professional Advisers: Legal, accounting, or audit firms engaged by xvg8 under appropriate confidentiality obligations.

All third-party service providers engaged by xvg8 are subject to data processing agreements that restrict their use of personal data to the purposes for which it was shared and require appropriate security measures.

06Cookies & Tracking Technologies

xvg8 uses cookies and similar technologies on xvg8.app to ensure Platform functionality, maintain session state, detect fraudulent activity, and measure anonymous usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for login sessions, account security tokens, and core Platform functionality. These cannot be disabled without affecting Platform access.
• Functional Cookies: Remember your Platform preferences such as language settings and responsible gaming configurations.
• Analytics Cookies: Collect anonymised data on how players interact with the Platform, used solely to improve xvg8 services. No personally identifiable information is included in analytics data.

xvg8 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair Platform functionality.

07Data Retention

xvg8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Account Data: Retained for the duration of your xvg8 account, and for a minimum of five (5) years following account closure, as required by applicable AML and gaming regulatory obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years in compliance with applicable financial record-keeping regulations.
• KYC & Identity Documents: Retained for the regulatory minimum period applicable under the gaming authority licence conditions under which xvg8 operates.
• Support Communications: Retained for up to three (3) years following the resolution of the relevant enquiry or dispute.
• Marketing Data: Retained until you withdraw consent or request removal, subject to any applicable minimum regulatory retention periods.

On expiry of the applicable retention period, personal data is securely deleted or anonymised.

08Your Rights

Subject to applicable law and regulatory obligations, you have the following rights in respect of your personal data held by xvg8:

• Right of Access: You may request a copy of the personal data xvg8 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where xvg8 no longer has a lawful basis to retain it, subject to overriding regulatory retention obligations.
• Right to Restrict Processing: You may request that xvg8 suspend processing of your data in certain circumstances.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to xvg8, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, and may withdraw consent for marketing communications at any time.

To exercise any of these rights, contact xvg8 support via the channel available in your logged-in account. xvg8 will respond to verified requests within thirty (30) days. Identity verification may be required before requests are processed.

09Data Security

xvg8 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between players and xvg8.app;
• Encryption of personal data at rest in xvg8's databases;
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures to detect, contain, and notify affected players of any data breach in a timely manner.

While xvg8 takes security seriously, no online platform can guarantee absolute protection against all possible threats. Players are advised to use strong, unique passwords for their xvg8 account and to notify xvg8 immediately if they suspect unauthorised access.

10Children & Minors

The xvg8 Platform is strictly intended for individuals aged 21 years and older. xvg8 does not knowingly collect personal data from any person under the age of 21. If xvg8 becomes aware that personal data has been collected from a person under the minimum age, that account will be immediately closed and all associated data deleted, subject to any mandatory regulatory retention obligations.

If you believe a minor has registered on the xvg8 Platform, please contact xvg8 support immediately.

11International Data Transfers

xvg8's operations involve data processing by service providers located in jurisdictions outside Malaysia, including gaming software providers and infrastructure partners. Where personal data is transferred internationally, xvg8 ensures that appropriate safeguards are in place, such as contractual data protection clauses that require recipient parties to maintain data protection standards equivalent to those applied by xvg8.

By using the xvg8 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia for the purposes described in this Policy.

12Updates to This Policy

xvg8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. Where changes are material, xvg8 will notify registered players via the Platform or by email to the address on file.

The "Last Updated" date at the top of this page indicates the effective date of the current version. Continued use of the xvg8 Platform following notification of any update constitutes your acceptance of the revised Privacy Policy.

13Contact Us

For privacy-related enquiries, requests to exercise your data rights, or to report a data concern, please contact xvg8 through the support channel available within your logged-in xvg8 account. You may also write to us at [email protected].

Please include your registered email address and a description of your request. xvg8 will acknowledge all privacy-related requests within 5 business days and aim to resolve them within 30 calendar days, subject to complexity and verification requirements.