Data Protection Policy

Xeus138 Privacy Policy – Data Protection for Malaysia Users

Your privacy is our priority. This page clearly explains how xeus138 collects, uses, stores and protects your personal information as a user of our platform.

Last updated: January 2026
Our Privacy Commitment

Six Data Protection Principles at xeus138

We don't just comply with regulations – we build systems that genuinely put every user's data security first.

256-Bit SSL Encryption

All data transmitted between your device and xeus138 servers is protected with 256-bit SSL encryption – the same standard used by major financial institutions in Malaysia.

Secure Data Storage

Your personal information is stored on fully secured servers with layered access controls. No general staff member has access to sensitive user data.

Secure KYC Process

Identity verification (KYC) is conducted through secure channels and documents collected are used solely for verification purposes – they are not shared without your consent.

No Sale of Data to Third Parties

Xeus138 does not sell, rent, or trade users' personal data to any third party for marketing or commercial purposes without your explicit consent.

Privacy Controls in Your Hands

You have the right to access, amend, and request deletion of your personal data. All requests are processed within the timeframe set by our policy.

Manageable Cookies

You can manage cookie settings through your browser. xeus138 only uses cookies that are necessary for platform functionality and to improve the user experience.

Types of Data We Collect

Full Name Email Address Phone Number IC / Passport Number Bank Information Full Address KYC Documents Activity Log Transaction History Browser Data IP Address Device Information
This Privacy Policy describes the data protection practices of xeus138. By using our platform, you agree to the collection and use of information as described here. Please also read Terms and Conditions us for a more complete understanding.

1. Introduction – Who We Are and Why Privacy Matters

The foundation of xeus138's privacy commitment

Xeus138 is an online entertainment platform operating for adult users in Malaysia. As a platform that handles users' financial and personal information, we understand the sensitivity of the data entrusted to us.

This Privacy Policy is written in plain, easy-to-understand language — not dense legal jargon. We want xeus138 users to genuinely understand what happens to their data, rather than simply scrolling down and clicking "Agree" without knowing what they're consenting to.

This policy applies to all information collected through the xeus138 website, our mobile app, and every form of interaction you have with our platform — including during registration, account verification, gameplay activity, deposit and withdrawal transactions, and any communication with our customer support team.

2. Information We Collect from You

Types of data and how they are collected

Xeus138 collects several categories of information depending on the type of interaction you have with our platform. Generally, there are two main types of data we collect:

Information You Provide Directly:

  • Full name, date of birth and identification card number upon account registration
  • Email address and mobile number for communication and verification purposes
  • Bank account or e-wallet details for processing deposits and withdrawals
  • Supporting documents such as a copy of your IC, passport, or utility bill for the KYC process
  • Information shared when contacting customer support

Automatically Collected Information:

  • Your device's IP address and general location information
  • Type and version of web browser used
  • Device information including operating system and screen resolution
  • Platform activity logs including games played and transactions made
  • Cookie data and session identifiers for an improved user experience

3. How We Use Your Information

Purpose of collected data usage

Every piece of data collected by xeus138 has a clear and legitimate purpose. We do not collect unnecessary information and do not use your data for purposes unrelated to the platform's services.

  • Processing account registration and identity verification (KYC)
  • Enable deposit and withdrawal transactions to be carried out securely
  • Detect and prevent fraud, money laundering and other illegal activities
  • Provide effective and accurate customer support
  • Send important notifications relating to your account and transactions
  • Personalise your in-platform experience based on your preferences
  • Comply with legal obligations and applicable regulatory requirements
  • Analyse usage patterns for continuous platform improvement
xeus138 does not use user data to sell or share with third-party advertisers. Any marketing communications you receive come solely from xeus138 itself and consent can be withdrawn at any time.

4. Sharing Your Data with Third Parties

When and with whom your data may be shared

Xeus138 does not sell users' personal data to any third party. However, there are certain situations where data sharing is necessary for the platform to function properly.

  • Payment Processors: Transaction information is shared with payment service providers to process deposits and withdrawals.
  • Game Providers: Minimum account data required for game access is shared with licensed game providers
  • KYC Verification: Identity documents are shared with approved identity verification service providers
  • Legal Requirements: Data may be disclosed to authorities if required by law or a valid court order
  • Fraud Prevention: Certain information may be shared with relevant parties to detect or prevent fraudulent activity.

All third parties that receive xeus138 user data are bound by strict confidentiality agreements and are required to uphold data protection standards equivalent to our own.

5. Data Security Measures

How xeus138 protects your information

User data security is the aspect we take most seriously in the operation of the xeus138 platform. We continuously invest in security infrastructure to ensure your data is always protected.

  • 256-bit SSL/TLS encryption for all data transmitted between users and the server
  • Databases are secured with additional encryption for sensitive data such as passwords and financial information.
  • Layered access controls ensure only authorised staff can access user data.
  • 24/7 security monitoring to detect any threats or intrusion attempts
  • Two-factor authentication (2FA) is available for additional account protection.
  • Regular security audits conducted by independent third parties
  • Frequent data backups and a robust disaster recovery system
While we take all reasonable security measures, no system can guarantee 100% security. You are also responsible for keeping your account password confidential. xeus138 will never ask for your password via email, phone, or live chat.

6. Data Retention & Deletion

Data retention period and deletion process

Xeus138 retains users' personal data for as long as the account remains active and for the required period following account closure, in accordance with applicable laws and anti-money laundering regulations.

  • Active account data is retained for as long as the account remains in our system
  • After account closure, financial data and transaction records are retained for a minimum of 5 years in accordance with legal requirements
  • KYC documents are retained for the period required by applicable regulations
  • Activity logs and technical data may be deleted earlier once their intended purpose has been fulfilled.

Once the mandatory retention period has ended, data will be securely deleted or anonymised so that it can no longer be linked to any individual.

7. Your Rights as a User

Controls you hold over your personal data

As a xeus138 user, you have several important rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights.

User Rights Description
Access You may request a copy of the personal data we hold about you at any time.
Correction If your information is inaccurate or incomplete, you may request a correction through your account settings.
Deletion You may request data deletion subject to applicable legal requirements.
Processing Restriction You may request that we restrict data processing in certain situations.
Objection You may object to your data being processed for direct marketing purposes at any time.
Mobile You may request your data in a machine-readable format for transfer to another platform.

To exercise any of the above rights, contact the xeus138 support team via live chat on the platform. Requests will be processed within 30 business days.

8. Cookies and Tracking Technologies

Cookie usage on the xeus138 platform

Xeus138 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored in your browser when you visit our website.

  • Essential Cookies: Required for core platform functions such as login session verification and security
  • Performance Cookies: Gather information on how users interact with the platform for technical improvements
  • Functional Cookies: Store user preferences such as language and display settings

You can control or delete cookies through your web browser settings. Please note that disabling essential cookies may affect certain features on the xeus138 platform.

9. Children's Privacy

Special protection for underage users

Xeus138 is a platform intended solely for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we discover that personal data has been collected from anyone under the age of 18 without our knowledge, the account in question will be closed immediately and all related data will be deleted from our systems promptly.

If you believe your child or a minor has registered an account on the xeus138 platform, please contact our support team immediately so the necessary action can be taken.

10. Changes to This Privacy Policy

How we handle policy updates

Xeus138 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, changes in law, or new regulatory requirements.

  • Significant changes will be communicated to users via email or in-app notification.
  • The latest update date is always displayed at the top of this page
  • Continued use of the platform after changes are published will be considered acceptance of the updated policy.
  • We encourage you to review this page periodically to stay informed of any changes.

11. How to Contact Us About Privacy

Channel for privacy and data-related enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how xeus138 handles your personal data, we encourage you to reach out to us through the following channels:

  • Live chat on the xeus138 platform – available 24/7 and the fastest way to get a response
  • Email us at [email protected] for inquiries that require more detailed discussion
  • Section FAQ we also include answers to frequently asked questions about privacy and data security

All privacy-related enquiries will be handled in strict confidence and responded to within 3–5 business days.

FAQ

Xeus138 Privacy Frequently Asked Questions

No, xeus138 does not sell, rent, or trade users' personal data to any third party for marketing or commercial purposes. Your data is only shared with parties directly involved in processing our services (such as payment processors and KYC providers) and only when necessary for legitimate purposes.

Yes, you may request the deletion of your personal data by contacting the xeus138 support team. Please note, however, that certain data may need to be retained in accordance with Malaysian legal requirements, particularly financial and KYC records that anti-money laundering regulations require to be kept for a specified period.

Your bank account and e-wallet information is protected with 256-bit SSL encryption during data transmission. At the storage level, sensitive financial information is kept in databases secured with an additional encryption layer. Access to this information is strictly limited and only permitted to authorised staff for payment processing purposes.

After account closure, your personal and financial data will be retained for the minimum period required by Malaysian law (typically 5 years for financial records). Once that period ends, all data will be securely deleted or anonymised. Data not subject to legal retention requirements will be deleted earlier upon your request.

Your Data Is Safe with xeus138

Create your account with full confidence that your privacy and data security have been our top priority from day one.

Register a Free Account Check Our FAQ

This platform is for adults aged 18 and above only. Please play responsibly.

Bahasa Melayu