Xo368 takes the privacy of every member seriously. This Privacy Policy clearly explains what data we collect, how it is used, who can access it, and your rights as the owner of that data.
The core principles we uphold in handling every Malaysian player's personal data
All personal data and financial transactions on xo368 are protected by 256-bit SSL encryption — the same security technology used by leading Malaysian banking institutions such as Maybank and CIMB.
Xo368 does not sell, rent, or disclose players' personal data to any third party for marketing or commercial purposes. Your data is not a commodity we trade in.
We only collect data that is genuinely necessary to operate your account, process payments, and meet security requirements. No excess data is collected without a clear purpose.
Only xo368 staff who require access to specific data to carry out their duties are permitted to do so. All access is logged and continuously monitored.
You have the right to access, correct, delete, or transfer your personal data. All data rights requests will be processed within 14 working days.
If you do not wish to receive marketing communications from xo368, you can opt out at any time through your account notification settings or by reaching out to our team.
This Privacy Policy ("Policy") describes how xo368 ("we", "Platform" or "xo368") collects, uses, stores, and protects your personal information when you use the xo368.xyz platform and all related services. By registering an account or using xo368's services, you agree to the terms of this Privacy Policy. Please read this document carefully.
Xo368 is an online entertainment platform offering a wide range of games including slots, Live Casino, Sports Betting, e-sports, roulette, and cricket to players in Malaysia. In providing these services, we need to collect and process certain personal information from our members.
This Privacy Policy applies to all users of the platform xo368, including website visitors, registered players and former members. It covers all data collected through xo368.xyz, the mobile app (where applicable), email communications, customer support interactions and any other channels we use to engage with you.
Our Commitment: xo368 operates in accordance with recognised data protection principles — collecting only what is necessary, maintaining clear and transparent purposes, upholding robust security, and fully respecting your rights as the owner of your data.
Xo368 collects several categories of personal information depending on how you interact with our platform. The following are the main categories of data we collect:
A. Registration & Identity Data
B. Financial & Transaction Data
C. Activity & Gaming Data
D. Technical & Device Data
Data We Do Not Collect: xo368 does not store full credit or debit card numbers, your online banking passwords, e-wallet PINs, or any sensitive financial information beyond what is required to process the transaction you have requested.
Xo368 uses the personal data collected for the following purposes:
Account Management & Services
Security & Fraud Prevention
Customer Support
Responsible Gaming
Platform Improvements
Marketing Communications (with consent)
Xo368 processes your personal data on the following legal bases, depending on the type of data and the purpose of processing:
Xo368 does not sell, rent, or disclose players' personal data to third parties for marketing purposes. However, there are limited situations where data must be shared with certain parties to keep the platform running:
Trusted Service Providers
All third-party service providers are bound by strict confidentiality agreements and may only use shared data for the specific purposes defined in those agreements.
Legal Requirements
Xo368 does not share data with advertisers, data brokers, affiliate marketing networks, or any other commercial entity for profiling or targeted advertising purposes without your written consent.
The security of your personal data is xo368's top priority. We implement a range of technical and organisational measures to protect your data from unauthorised access, loss, destruction, or disclosure:
While we take comprehensive security measures, no security system is entirely infallible. In the event of a data security breach affecting your information, we will notify you within a reasonable timeframe in accordance with applicable legal requirements.
Xo368 retains your personal data for as long as your account remains active or for as long as necessary for the purposes set out in this Policy. Specific retention periods depend on the type of data:
| Data Type | Retention Period | After Account Closure |
|---|---|---|
| Account Registration Data | For as long as the account is active | 5 years |
| Financial Transaction Records | For as long as the account is active | 7 years |
| Game History | Last 2 years | 2 years |
| Technical Logs (IP, Device) | 90 days | Deleted |
| Customer Support Records | For as long as the account is active | 3 years |
| Identity Verification Data (KYC) | For as long as the account is active | 7 years |
Extended retention periods for financial and KYC records are required to meet legal compliance obligations related to anti-money laundering and financial audit requirements. Once the retention period ends, data will be securely deleted or anonymised.
Xo368 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored in your web browser when you visit our website.
Types of cookies we use:
You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to use certain platform features xo368. Third-party cookies from analytics providers are used solely for platform improvement purposes and not for personalised advertising.
As a xo368 player and owner of your personal data, you have the following rights, which we fully respect:
Six fundamental rights you hold as a data owner on the xo368 platform
You have the right to request a copy of the personal data xo368 holds about you. Requests will be processed within 14 working days.
If your personal data stored with xo368 is inaccurate or out of date, you have the right to request a correction free of charge.
In certain circumstances, you may request the deletion of your personal data — subject to applicable legal data retention obligations.
You may request that xo368 restrict the way your data is processed under certain circumstances, such as while a dispute over data accuracy is being reviewed.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider should you wish to do so.
You may object to the processing of your data for direct marketing purposes at any time. Your objection will be actioned immediately, no questions asked.
To exercise any of the rights above, please contact us at support@xo368.xyz. All requests will be processed within 14 working days.
Platform xo368 is intended exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from anyone under the age of 18. If we discover that we have collected data from a person under 18 without appropriate age verification, we will take immediate steps to delete that data and close the account.
Parents and guardians who become aware that their child has registered for or is using the xo368 platform are requested to contact us immediately at support@xo368.xyz so that we can take appropriate action without delay.
Xo368 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. When significant changes are made, we will notify you via:
The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy. We encourage you to review this page periodically to stay informed of the policy currently in effect. Continued use of the platform after any amendments take effect will be considered acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact the xo368 privacy team:
For requests relating to data access, correction, or deletion, please include your xo368 account number and a clear description of your request so we can process it as efficiently as possible. All data rights requests will be verified for security before processing to ensure that no third party can access or delete your data without your authorisation.
Data Rights Request Processing Time: xo368 will process all data rights requests within 14 working days from the date the request is received and verified. In more complex cases, this period may be extended to up to 30 days, with notice provided to you.
In today's digital world, trust is the most valuable asset between an online platform and its users. At xo368, we understand that the trust of Malaysian players is never given freely — it has to be earned through consistent, transparent and responsible handling of every piece of data entrusted to us.
When you register at xo368 and make your first deposit via Touch 'n Go or DuitNow, you're giving us more than just money — you're entrusting us with your personal information, financial account details, and activity patterns. We take that responsibility seriously. Every decision about how data is collected, stored, and used is made with our players' best interests in mind.
One thing we're proud of at xo368 is our transparency. We don't hide anything in the fine print. This Privacy Policy is written in plain, straightforward language — not legal jargon that requires a lawyer to decode. We believe every player in Malaysia deserves to know exactly what happens with their data.
Data security at xo368 is not merely about regulatory compliance — it is a culture we build into every aspect of the platform. From the way our developers write code to the way the support team handles enquiries involving account information, everyone in the xo368 organisation is trained and held accountable for protecting player data.
We are equally firm about not using your data for purposes you haven't consented to. Other online entertainment platforms may sell data to advertisers or use it to push intrusive ads. xo368 does not do this. Your gameplay and betting activity is used solely to manage your account, prevent fraud, and help us improve our services — never to be sold to third parties.
On the payments side, when you use GrabPay, Boost, ShopeePay, or FPX to make a deposit, we receive payment confirmation from the respective gateway without storing your full financial account credentials in our system. This means that even in a hypothetical scenario where xo368's systems were compromised, your full bank account or e-wallet details would not be at risk — because we simply do not store them.
For players who actively enjoy slots, live casino, or place bets on Malaysia Super League and EPL matches at xo368, your game activity data is retained for customer support and responsible gaming management purposes — not to build a personal profile for commercial use. You can also access these activity records yourself at any time through the game history section of your account.
Finally, we want to emphasise that this Privacy Policy is not a static document written once and forgotten. We review it regularly, updating it in line with changes in technology, the cybersecurity threat landscape, and applicable legal requirements. When updates are made, you will be clearly notified — because you have the right to know when and how the policy governing your data changes.
The questions players ask most frequently about how xo368 handles personal data
This Privacy Policy explains how xo368 collects, uses, and protects the personal data of Malaysian players. Your data is protected by 256-bit SSL encryption and will not be shared with third parties for marketing purposes without your consent. For more information about your rights or to submit a data-related request, contact us at support@xo368.xyz. You may also review Terms & Conditions and page Responsible Gaming our page for more information.
256-bit SSL, no data sharing with third parties, withdrawals in 15 minutes. Register a free account today and play with complete peace of mind.