Xo789 Privacy Policy — Personal Data Protection You Are Our Priority

01 Personal Information We Collect

To deliver the best service and ensure platform security, xo789 collects several categories of information from our members. All data collection is carried out transparently and solely for legitimate purposes.

Beyond information you provide directly during registration, we also collect data automatically through your use of our platform. This includes session data, game preferences, and usage patterns that help us personalize your experience.

02 How We Use Your Personal Data

Every piece of information we collect is used for a clear and legitimate purpose. xo789 does not use your data for purposes unrelated to our services without first obtaining your consent.

• Account management: Processes your registration, verifies your identity through the KYC process, and ensures your account operates safely and smoothly at all times.
• Transaction processing: Handles all deposits, withdrawals, and other financial transactions efficiently and securely using trusted integrated payment systems.
• Service communications: Sends important account notifications, security updates, transaction confirmations, and relevant promotional information (with your consent).
• Fraud prevention: Detects and prevents fraudulent activity, money laundering, and platform abuse through usage pattern analysis and transaction monitoring.
• Legal compliance: Fulfils applicable legal and regulatory obligations, including anti-money laundering (AML) reporting requirements and Know Your Customer (KYC) compliance.
• Service improvement: Analyses aggregated, non-identifiable usage data to improve platform quality, user experience, and our game offerings.
• Customer support: Provides effective and personalised assistance when you contact our support team, including verifying your identity for security purposes.
• Personalisation: Provides game recommendations, bonus offers, and content tailored to your preferences and playing habits.

03 Data Storage & Security

Xo789 continuously invests in the latest security infrastructure to ensure your personal data is always protected against unauthorized access, loss, misuse, or disclosure.

• Data encryption at rest: All sensitive information including passwords, banking details, and identification numbers is stored in an encrypted format that is unreadable even by xo789 staff.
• Data encryption in transit: Every communication between your device and xo789 servers is protected with SSL/TLS encryption, ensuring data cannot be intercepted in transit.
• Strict access controls: Only authorised personnel who require data access to carry out their duties are permitted to access member personal information. All access is logged and monitored on a regular basis.
• Regular security audits: The xo789 platform undergoes regular independent security audits by recognized cybersecurity firms to identify and address any potential vulnerabilities.
• Secure data centers: Your data is stored in data centres secured with multi-layered physical security, temperature controls, redundant power supply systems, and comprehensive disaster protection.
• Incident response: xo789 has a comprehensive security incident response plan. In the event of any data breach, we will notify affected members and the relevant authorities within the timeframe required by law.

04 Sharing Information with Third Parties

Xo789 does not sell, rent, or disclose your personal data to third parties for commercial marketing purposes. Information sharing only occurs in the limited situations outlined below and is always subject to appropriate contractual protections.

• Payment service providers: Required financial information is shared with trusted payment processors and financial institutions solely to facilitate your deposit and withdrawal transactions.
• Game providers: Minimum necessary data is shared with third-party game providers (such as slot and live casino providers) to ensure games function correctly and game results are accurately recorded.
• Legal authority: xo789 will disclose information to law enforcement authorities or regulatory bodies when required to do so by law, court order, or valid legal proceedings.
• Anti-money laundering: In complying with our AML obligations, certain information may be reported to a financial intelligence unit or relevant authority when suspicious transactions are identified.
• Technology providers: Technical infrastructure providers such as cloud services and analytics tools may process your data as part of delivering their services to xo789, subject to strict data protection agreements.

05 Cookies & Tracking Technologies

Xo789 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure account security, and understand how users interact with our services.

• Essential cookies: These cookies are required for core platform functions including login authentication, session management, and security features. Without them, the platform will not function properly.
• Performance cookies: Used to collect information about how visitors use our platform, such as the most frequently visited pages and error messages received. All such information is collected in aggregate and non-identifiable form.
• Functional cookies: Allows the platform to remember your preferences such as language, region, and display settings to deliver a more personalised and consistent experience.
• Analytics cookies: Helps us understand overall platform usage patterns for continuous improvement. Data collected is in aggregate statistical form without identifying individuals.

You can manage your cookie preferences through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the xo789 platform.

06 Your Rights as a User

Xo789 fully respects your rights regarding personal data. We ensure you can exercise these rights with ease through the various channels we provide.

• Right of access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request an immediate correction. Contact our customer support to make the necessary changes.
• Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal data. However, this right is subject to our legal obligations that require us to retain certain records for a minimum specified period.
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you are disputing the accuracy of that data.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing. Once your objection is received, we will stop processing your data for that purpose.
• Right to withdraw consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Children's Data Protection

Xo789 takes child protection very seriously. Our platform is not intended for children, and we do not knowingly collect personal data from individuals under the age of 18.

Parents and guardians who believe their child has registered an account on xo789 are requested to contact our customer support team immediately. We will take prompt action to address the situation and ensure the child's data is fully deleted from our systems.

08 Cross-Border Data Transfers

In operating our global platform, your personal data may be transferred to and stored on servers located outside Malaysia. xo789 ensures that any such data transfers are carried out with adequate safeguards in place.

• Contractual protection: All international data transfers are covered by strict data processing agreements that ensure a level of protection equivalent to Malaysia's data protection laws.
• Countries with adequate protection: We prioritise transferring data to countries that have been recognised as providing an adequate level of data protection.
• Additional protection measures: For transfers to other locations, we implement additional safeguards such as end-to-end encryption and strict access controls.

09 Data Retention Period

Xo789 does not retain your personal data longer than necessary for the stated purpose or as required by law. Below are our data retention guidelines.

• Active account data: For as long as your account remains active on xo789, we retain all relevant information to ensure uninterrupted service and effective support.
• Financial transaction records: As required by law and regulation, financial transaction records are retained for a minimum of seven years from the transaction date, even after account closure.
• KYC and identity verification data: Identity verification documents and records are retained for a minimum of five years after the termination of the business relationship, in accordance with AML requirements.
• Marketing data: Information used for marketing communications is retained until you withdraw consent or request deletion, whichever comes first.
• Technical logs: Access and technical security logs are retained for 90 days for fraud detection and technical troubleshooting purposes.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymized in a way that ensures it can no longer be linked back to you.

10 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how xo789 handles your personal data, our team is ready to assist you.

• Privacy email: Send your written enquiry to our data protection team at [email protected] with the subject line "Privacy Enquiry".
• Live chat: Use the live chat feature on the platform for immediate enquiries related to your privacy and data protection.
• Response time: We aim to respond to all privacy-related enquiries within three business days. More complex requests may take up to 30 days.