Privacy Policy xvg8 –
Your Personal Data Protection

Welcome to the xvg8 Privacy Policy. This document explains in detail how xvg8 ("we", "Platform") collects, processes, stores, and protects your personal information when you use the xvg8.fun website and all related services we provide.

We take the handling of user personal data extremely seriously. As a responsible online wagering platform, xvg8 complies with the data protection standards set out by Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy laws.

By using the xvg8 platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, our team is available at any time through the channels listed at the end of this document.

Xvg8 collects various categories of personal data depending on the type of interaction you have with our platform. Below is a full breakdown of data we may collect:

We also collect data automatically as you browse our platform, including device information, language settings, screen resolution, and usage patterns. This data helps us ensure the platform runs smoothly and delivers a better experience for you.

Every piece of data we collect has a clear and legitimate purpose. xvg8 will not use your data for any unrelated purpose without your prior consent.

• Account management: Creating, verifying, and maintaining your user account so you can log in and play safely.
• Transaction processing: Processing all fund deposits and withdrawals accurately and securely through our payment gateways.
• Identity verification (KYC): Ensuring all users meet the minimum age requirement and comply with anti-money laundering (AML) legal obligations.
• Customer support: Resolving enquiries, complaints, and technical issues you report to our support team.
• Platform security: Detecting and preventing fraud, unauthorised access, account misuse, and other security threats.
• Service improvement: Analysing usage patterns in aggregate and anonymised form to improve platform performance, functionality, and user experience.
• Marketing communications: Sending promotional information, bonus offers, and important notifications — only to users who have given their consent to receive them.
• Legal compliance: Meeting the reporting and documentation obligations required by applicable laws and authorities.

We conduct all data processing activities on a solid legal basis — whether that is user consent, contractual necessity, legitimate interests, or legal obligation.

Xvg8 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where data sharing is necessary to operate our services:

• Payment providers: Payment gateways such as FPX, Touch 'n Go eWallet, GrabPay, and DuitNow receive only the transaction information necessary to process your payment.
• Technology service providers: Companies providing server hosting, platform analytics, and technical infrastructure support, bound by strict confidentiality agreements.
• Identity verification service providers: KYC partners who assist in verifying the identities of new users in accordance with compliance requirements.
• Legal Authority: Law enforcement agencies or regulatory bodies when xvg8 is legally required to disclose certain information.

All third parties receiving xvg8 user data are bound by strict data protection agreements and are only permitted to use that data for mutually agreed purposes. We are not responsible for the privacy practices of third parties operating outside the scope of these agreements.

Protecting your data is xvg8's top priority. We implement comprehensive layers of technical security and operational procedures to ensure your information remains secure at all times.

• 256-bit SSL encryption: All data transmitted between your device and xvg8 servers is encrypted using TLS 1.3 protocol — the same security standard used by leading banking institutions.
• Hashed password storage: Your account password is never stored in plain text. It is hashed using the bcrypt algorithm, which is irreversible.
• Two-factor authentication (2FA): You can enable 2FA through your account settings for an extra layer of security during login.
• 24/7 security monitoring: Our intrusion detection system monitors platform traffic around the clock to identify suspicious activity.
• Regular security audits: xvg8 conducts regular penetration testing and security audits by independent security experts to identify and address any vulnerabilities.
• Internal access controls: Only specific staff with a legitimate business need are permitted to access user personal data, and every access is logged for audit purposes.

Xvg8 uses cookies and similar tracking technologies to enhance the user experience, ensure proper platform functionality, and analyse general usage patterns.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting your use of the platform.
• Preference cookies: Saving your preferences such as language settings, display theme, and game preferences so you do not have to reconfigure them each time.
• Analytics cookies: Collecting information on how users interact with the platform — pages visited, time spent, buttons clicked — to help us improve design and functionality.
• Marketing cookies: Used to display relevant offers and promotions based on your interests and activity on the platform, only with your consent.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the xvg8 platform.

As an xvg8 user, you have certain rights regarding your personal data, which we fully respect. These rights include:

To exercise any of the above rights, please contact the xvg8 support team by email at [email protected]. We will process each request within 30 business days of receipt.

Xvg8 does not retain your personal data longer than necessary to fulfil the purpose for which it was collected. Retention periods vary by data type:

• Active account data: Retained for as long as your account is active and for a specified period after account closure to meet legal requirements.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with financial reporting and anti-money laundering requirements.
• KYC documents: Retained for five (5) years after account closure, or longer if required by applicable law.
• Support communication logs: Retained for two (2) years for reference and dispute resolution purposes.
• Analytics cookie data: Deleted or anonymised within 13 months from the date of collection.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you. Our data deletion procedures follow recognised industry standards.

The xvg8 platform may contain links or references to third-party websites or services, such as game providers or payment partners. This Privacy Policy applies solely to the xvg8.fun platform.

Xvg8 is not responsible for the privacy practices, content, or security policies of any third-party websites. We encourage you to read the privacy policy of each website you visit separately before providing them with any personal information.

Xvg8 strictly prohibits use of the platform by individuals under 18 years of age. We do not knowingly collect personal data from underage children or minors. If we discover that a child's personal data has been collected without our knowledge, that data will be deleted immediately and the account in question will be terminated.

Parents or guardians who become aware that their child has registered an account on xvg8 without permission are advised to contact our support team immediately so that appropriate action can be taken without delay.

Xvg8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. Any material changes will be communicated to you via your registered email or in-platform notification at least 14 days before the changes take effect.

The "Updated" date shown at the top of this page will always reflect the latest version of this policy. Continued use of the xvg8 platform after changes take effect constitutes your acceptance of the revised policy.

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact the xvg8 Data Protection Officer (DPO) through the following channels:

• Privacy Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 on xvg8.fun
• FAQ: Visit page FAQ us for frequently asked questions related to privacy.

We are committed to responding to all privacy-related enquiries within 5 business days from the date of receipt. For more complex matters such as data deletion requests or privacy disputes, processing may take up to 30 business days.