Privacy & Data Protection

Privacy Policy XM66Data Security You Come First

Xm66 is committed to protecting every member's personal information to the highest security standards. Learn how we collect, use, and safeguard your data here.

🔒
Your Data Is Safe
256-bit SSL Encryption & full personal data protection
Updated: January 2026

Commitment Privacy xm66 to Members

The xm66 platform takes data security seriously. Here are the six key pillars of our privacy policy.

High-Level Encryption

All data transmitted between your device and xm66 servers is protected by industry-recognised 256-bit SSL encryption.

Minimum Data Collection

Xm66 only collects information that is strictly necessary for account operations, the KYC process, and payment processing.

No Data Selling

Member personal information is never sold, rented, or shared with third parties for marketing purposes without consent.

User Data Controls

Members have the full right to access, correct, or request deletion of their personal information at any time.

Secure & Integrated Servers

Member data is stored on servers protected by multi-layered access controls and 24/7 security monitoring.

Immediate Breach Notification

In the event of any data security incident, affected members will be notified promptly in accordance with established procedures.


Last Updated: 1 January 2026

This Privacy Policy explains how xm66 ("Platform", "We") collects, uses, stores, and protects your personal information ("Member", "You") when using xm66.vu services. Please read this document carefully.

1Introduction

Xm66 values the privacy and security of every member's personal information on our platform. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the industry's best international data security standards.

By registering an account and using xm66 services, you agree that your personal information will be processed in accordance with the terms set out in this policy. If you do not agree, please discontinue use of the platform and contact customer support to close your account.

This Policy applies to all users of the xm66 platform, including website visitors, registered members, and any individuals who interact with our services via xm66.vu or the xm66 mobile app.

2Data Collected

Xm66 collects various types of information depending on how you interact with our platform. The following are the categories of data we collect:

Data Categories Data Examples Primary Purpose
Personal Identity Full name, date of birth, identification card number Identity verification (KYC)
Contact Information Email address, phone number, residential address Communication & Account Verification
Financial Data Bank account number, transaction records, payment methods Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Security & fraud detection
Behavioral Data Game records, wagering habits, session duration Responsible gaming & service improvement
Preference Data Preferred language, notification settings, game preferences Personalise user experience

Xm66 only collects information that is strictly necessary. We do not collect sensitive data such as medical information or religious beliefs unless you voluntarily provide it for a specific purpose such as responsible gaming controls.

3How We Use Your Data

Personal information collected is used by xm66 for the following purposes:

  • Account management — processes registration, verifies identity, and manages member profiles.
  • Transaction processing — verifies and processes deposits, withdrawals, and bonus payments.
  • Platform Security — detects and prevents fraud, money laundering, and unauthorised access.
  • Customer support — helps resolve member enquiries, complaints, and technical issues.
  • Legal Compliance — fulfils regulatory requirements, KYC obligations, and mandatory reporting to the relevant authorities.
  • Service improvement — analyses usage patterns to improve the interface and gaming experience.
  • Promotional Communications — sends offers, bonuses, and updates exclusively to members who have consented to receive such communications.
  • Responsible gaming — monitors gaming habits and activates self-control tools when required.

Xm66 does not use your data to make automated decisions that negatively affect your rights or interests without appropriate human review.

4Data Sharing with Third Parties

Xm66 does not sell, rent, or trade members' personal information to any third party for marketing purposes. However, we may share data in limited circumstances as follows:

  • Payment service providers — required financial data is shared with payment processors such as DuitNow, FPX, and other supported payment gateways to complete transactions.
  • Game software providers — limited account information is shared with licensed game providers for authentication and game record purposes.
  • Regulatory authorities — xm66 is required to disclose certain information to government agencies, regulatory bodies, or law enforcement when required by law.
  • Technical service providers — IT infrastructure providers, cloud services, and cybersecurity vendors that support platform operations may access data within a limited scope and are subject to strict confidentiality agreements.

All third parties working with xm66 are required to comply with strict data confidentiality policies. They are not permitted to use your data for any purpose other than what has been agreed in writing with xm66.

5Cookies & Tracking Technologies

The xm66 platform uses cookies and similar tracking technologies to enhance user experience, maintain login sessions, and analyse platform usage patterns in aggregate.

Types of cookies used:

  • Session cookies — used to maintain your login status during an active session. These cookies are automatically deleted when you close your browser.
  • Preference cookies — saves your language settings, display preferences, and game preferences for future convenience.
  • Analytics cookies — collects statistical data on how members use the platform for internal service improvement purposes.
  • Security cookies — used to detect suspicious activity, verify requests, and protect your account from unauthorised access.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the xm66 platform.

6Data Security

Xm66 continuously invests in security infrastructure to ensure member data is always protected against cyber threats, unauthorised access, and misuse. The following are the key security measures we practise:

  • Data in transit is encrypted using TLS 1.3 and SSL 256-bit protocols.
  • Data stored in databases is encrypted using the AES-256 algorithm.
  • Multi-layered access controls based on the principle of least privilege — staff can only access the data required for their specific role.
  • Two-factor authentication (2FA) is available and recommended for all member accounts.
  • Vulnerability scanning and penetration testing are conducted periodically by independent security experts.
  • Real-time platform activity monitoring by the xm66 security team, 24 hours a day.
  • Regular data backups to ensure service continuity and data recovery in the event of an incident.

Although xm66 takes all reasonable precautions, no system can be guaranteed 100% secure. You are also responsible for keeping your password and account login credentials safe.

7Your Rights as a Member

As an xm66 member, you have the following rights regarding the personal information we hold:

Right to Access

You have the right to request a copy of the personal information we hold about you at any time.

Right to Rectification

If any information we hold is inaccurate or outdated, you have the right to request an immediate correction.

Right to Erasure

You may request deletion of your personal data, subject to any legal data retention obligations we are required to comply with.

Right to Opt Out of Marketing

You may withdraw consent to receive promotional communications at any time via your account settings or by contacting support.

Right to Data Portability

You have the right to request a copy of your personal data in a machine-readable format for transfer to another service provider.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how your data is processed while a dispute is being resolved.

To exercise any of the rights above, please contact the xm66 support team via live chat or email. We will process your request within 14 business days.

8Data Retention & Deletion

Xm66 retains members' personal information for as long as the account is active and for the required period after account closure to fulfil legal obligations, resolve disputes, and enforce our agreements.

  • Active account data — retained for the duration of the active account.
  • Financial transaction records — retained for a minimum of 7 years after account closure in accordance with anti-money laundering (AML) legal requirements.
  • KYC Documents — retained for a minimum of 5 years from the date of the last related transaction.
  • Support Communication Logs — retained for 2 years for reference and dispute resolution purposes.
  • Technical data and access logs — retained for 90 days for security and incident investigation purposes.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

9Third-Party Links

The xm66 platform may contain links to third-party websites or services, including game providers and payment partners. The xm66 Privacy Policy does not apply to those third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit. xm66 is not responsible for the privacy practices or content of any third-party website.

All game software providers partnered with xm66 have undergone thorough security reviews and are required to comply with data protection standards equivalent to our own.

10Changes to the Privacy Policy

Xm66 reserves the right to amend, improve, or update this Privacy Policy at any time. Any material changes will be communicated to members via an in-platform notice or registered email at least 14 days before the changes take effect.

Continued use of the xm66 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. The last updated date is always displayed at the top of this page.

We encourage you to review this page from time to time to stay informed about how we protect your information. A version history of this Privacy Policy is available upon request through customer support.

11Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights in relation to this Privacy Policy, please contact the xm66 Data Protection Officer through the following channels:

  • Live Chat: Available 24/7 directly within the xm66 platform or app — the fastest way to get immediate assistance.
  • Email: [email protected] — for written enquiries regarding privacy and data protection.
  • FAQ: Visit FAQ page us for answers to frequently asked questions about your account and security.

We are committed to responding to all privacy-related enquiries within 3 to 5 business days. For urgent matters, please use the live chat feature within the platform.

Xm66 complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring that every member's privacy rights are fully respected and protected.


Safe & Trusted Platform

Your Data Protected — Join XM66 With Confidence

With 256-bit SSL encryption, PDPA compliance, and 24/7 support, xm66 safeguards your personal data while you enjoy over 500 games of your choice.

256-bit SSL Encryption Malaysia PDPA Compliance 24/7 Support
Bahasa Melayu