Privacy Policy xvg8 — Personal Data Protection for Malaysian Players

Xvg8 understands that trust is the most fundamental cornerstone of the relationship between a digital platform and its users. As an online casino and Sports Betting platform serving hundreds of thousands of Malaysian players from Kuala Lumpur to Kota Kinabalu, we take our responsibility in handling the personal information entrusted to us very seriously.

This Privacy Policy explains in detail — in plain, straightforward language, not confusing legal jargon — how xvg8 collects, stores, uses, and protects your personal data. We believe transparency is a mark of trust, and we have nothing to hide in the fine print.

This policy applies to all your interactions with xvg8, including account registration, slots and Live Casino activity, Sports Betting on the Malaysia Super League and EPL, deposits via Touch 'n Go or DuitNow, communications with customer support, and visits to xvg8.ws.

Xvg8 only collects data that is strictly necessary for legitimate purposes. We do not collect excessive or irrelevant data beyond what is needed to operate our platform.

A. Data You Provide Directly

B. Data Collected Automatically

• IP address – to detect general location, prevent fraud, and ensure geographical compliance.
• Device type and browser — to optimise how the xvg8 platform displays on your smartphone, tablet, or computer.
• Game session data — gaming activity records for dispute resolution and auditing purposes.
• Financial transaction logs – deposit and withdrawal records for financial bookkeeping and legal compliance purposes.
• Cookies and analytics data — usage information to improve the user experience on the xvg8 platform.

Xvg8 uses your personal data exclusively for the following purposes. Each purpose has a valid legal basis, and we will not use your data for any other purpose without your explicit consent:

• Account management: Registering your account, verifying your identity, processing logins, and managing your xvg8 account settings.
• Financial transaction processing: Processing MYR deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your account.
• Provision of gaming services: Operating slots, live casino, table games, and Sports Betting fairly and transparently.
• Customer support: Helping you resolve any issues, enquiries, or complaints related to your xvg8 account or gaming experience.
• Security and fraud prevention: Detecting and preventing unauthorised access, account fraud, money laundering, and platform abuse.
• Legal compliance: Meeting regulatory oversight requirements, including mandatory reports to the relevant authorities.
• Service communications: Sending important notifications regarding your account, security updates, and changes to xvg8's services.
• Marketing (with your consent): Sending promotional information, bonuses, and xvg8 offers only if you have consented to receive marketing communications.

Xvg8 maintains a very strict policy on data sharing. We never sold, never lent, never disclosed your personal data to third parties for marketing or commercial purposes. The following are the limited circumstances under which data may be shared:

• Technical service providers: Companies that help us operate the xvg8 platform — such as server hosting providers, payment gateways, and security software vendors — receive only the minimum data necessary and are bound by strict confidentiality agreements.
• Game providers: Gaming companies such as Pragmatic Play, Evolution Gaming, and PG Soft may receive technical data necessary to operate games correctly. No personal data is shared beyond what is technically required.
• Legal authorities: xvg8 will only disclose data to the relevant authorities when required by law, court order, or to prevent serious crimes such as money laundering.
• Gaming regulatory body: The licensing and regulatory bodies that oversee xvg8 may require access to certain records as part of their compliance audits.

Xvg8 continuously invests in world-class security infrastructure to ensure your personal and financial data remains protected at all times. Our security measures are on par with the standards upheld by Malaysia's leading financial institutions:

• 256-bit SSL Encryption: All communications between your device and xvg8's servers are encrypted with 256-bit SSL technology, which cannot be broken by any current computing methods.
• Two-Factor Authentication (2FA): An extra layer of security for your account — every login requires additional verification via a one-time OTP code sent to your mobile phone.
• 24/7 Monitoring: A continuous security monitoring system that detects and alerts you to any suspicious activity in real time.
• Internal access controls: Only authorised xvg8 staff may access your data, and all access is automatically logged for audit purposes.
• Regular security testing: Penetration testing and independent security audits are conducted on a regular basis by third-party cybersecurity firms.
• Secure data backups: Data is regularly backed up to separate, encrypted locations, ensuring continuity of service under all circumstances.

While xvg8 implements all reasonable security measures, no digital system can be guaranteed 100% secure against every threat. We encourage you to play your part in keeping your account safe by using a strong, unique password for your xvg8 account and never sharing your login credentials with anyone.

Xvg8 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit xvg8.ws.

Types of Cookies We Use

You can manage or delete cookies through your browser settings. However, disabling all cookies may affect certain features of the xvg8 platform. Essential cookies are required for the platform to function properly and cannot be turned off.

As an xvg8 member, you are entitled to comprehensive privacy rights. xvg8 is committed to making it easy for you to exercise these rights without unnecessary hassle:

To exercise any of the above rights, contact the xvg8 privacy team at privacy@xvg8.ws or via our platform's live chat. We will respond within 30 working days.

Xvg8 does not retain your personal data for longer than necessary. Retention periods are determined by the original purpose of data collection and applicable legal requirements:

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

Xvg8 takes the protection of minors extremely seriously. The xvg8 platform is strictly for individuals aged 18 years and above only. We do not knowingly collect any personal data from individuals who are underage.

Should we determine that an underage individual has registered an xvg8 account, we will:

• Immediate termination of the relevant account.
• Deleting all associated personal data.
• Refunding any deposits made, subject to the appropriate verification process.
• Reporting the incident to the relevant authorities where required.

If you believe a minor has registered an xvg8 account, please contact us immediately at support@xvg8.ws with the relevant details so we can take prompt action.

Xvg8 reserves the right to update this Privacy Policy from time to time to reflect changes in law, technology, or our service operations. Any amendments will be handled with full transparency:

• Material amendments will be communicated to members via registered email at least 14 days before taking effect.
• In-platform notifications will be displayed when you log in, informing you of any policy updates.
• The "Last Updated" date at the top of this document will be revised to reflect the latest version.
• Previous versions of the Privacy Policy will be archived and are available upon request by any member who requires them.

Your continued use of the xvg8 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you may contact us to close your account.

If you have any questions, concerns, or wish to exercise your privacy rights, xvg8's privacy team is ready to assist. We have a dedicated team handling all data privacy matters:

• Privacy Email: privacy@xvg8.ws — for all privacy-related enquiries, data access requests, or complaints.
• General Support Email: support@xvg8.ws — for account and gaming-related issues.
• Live Chat: Available 24/7 within the xvg8 platform — average response time under 3 minutes.
• Response Time: Privacy-related enquiries will be answered within 5 business days. Data rights requests are processed within 30 business days.

Xvg8 takes every privacy complaint seriously. Each complaint will be thoroughly investigated, and you will receive a written response on the outcome. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority.