xl88Privacy Policy

This page describes what we collect when you use xl88 and how we keep that data protected. We collect personal information only to operate our platform, verify your identity, process payments, and comply with legal obligations. Your data is encrypted in transit and at rest, and we do not sell or share it with third parties except where required by law or to process your transactions.

Our privacy practices apply to all users of xl88, whether you access our platform from Jakarta, Surabaya, Bandung, Medan, Semarang, or any other supported jurisdiction. We comply with data protection principles and local regulations where we operate. This policy is effective immediately and supersedes any prior privacy statement.

What data we collect on xl88

We collect information in three categories: account data, transaction data, and technical data.

Account data: When you sign up for xl88, we collect your email address, phone number, and password. During identity verification, we collect your full name, date of birth, national ID number (KTP, passport, or driving licence), and proof of address. We also store your preferred payment method and withdrawal destination.

Technical data: We log your IP address, device type, browser version, and session duration. We use cookies to remember your login state and preferences. We also collect error logs and performance metrics to diagnose technical issues and improve our platform.

How we use your data on xl88

We use your data for the following purposes:

• Account management: We use your email and phone to send login confirmations, password resets, and account notifications.
• Identity verification: We verify your ID and address to comply with KYC and AML regulations before allowing withdrawals.
• Payment processing: We share your payment details with our payment processors to execute deposits and withdrawals through mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, and bank partners.
• Fraud prevention: We analyze transaction patterns to detect suspicious activity and prevent unauthorized access to your account.
• Legal compliance: We retain records to comply with tax, AML, and gaming regulations in jurisdictions where we operate.
• Platform improvement: We use technical logs to diagnose bugs, optimize performance, and enhance the xl88 user experience.

Third-party processors and data sharing on xl88

We share your data with third parties only to the extent necessary to operate xl88:

Identity verification providers: We may use third-party services to verify your ID and address documents. These services are contractually obligated to delete your documents after verification completes.

Hosting and analytics: Our servers may sit outside your jurisdiction. We use cloud infrastructure providers to store data and analytics platforms to monitor platform performance. All data is encrypted in transit.

Legal requests: We may disclose your data if required by law, court order, or government agency. We will notify you of such requests unless legally prohibited from doing so.

Your rights and data access on xl88

Access: You can download a copy of your account data, including personal information and transaction history, by requesting a data export from our support team. We will provide this within 10 business days.

Correction: If your personal information is inaccurate, you can update it through your account settings. For identity documents, contact support to resubmit corrected versions.

Deletion: You can request account deletion, which will remove your personal data from our active systems. However, we retain transaction records for seven years to comply with AML and tax regulations. Deletion is permanent and cannot be reversed.

Cookies and tracking on xl88

We use cookies to enhance your experience on xl88. Cookies are small files stored on your device that remember your login state, language preference, and game history.

Essential cookies: These are required for xl88 to function. They store your session token so you remain logged in as you navigate between games and pages.

Preference cookies: These remember your settings, such as your preferred language and stake level, so you do not have to reconfigure them each time you visit.

You can disable cookies in your browser settings, but this may prevent xl88 from functioning correctly. We do not use third-party tracking pixels or cross-site cookies.

Data retention and security on xl88

We retain your data for as long as your account is active, plus seven years after closure to comply with AML and tax regulations. Transaction records are retained for the full seven-year period regardless of account status.

We protect your data through encryption (TLS 1.2 or higher in transit, AES-256 at rest), access controls (staff access is logged and audited), and regular security assessments. Our servers are hosted in secure data centres with physical access controls and redundant backups.

If we discover a data breach, we will notify affected users within 72 hours and cooperate with relevant authorities. We maintain cyber liability insurance to cover potential losses from security incidents.

Changes to this privacy policy on xl88

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through a prominent notice on xl88. Your continued use of the platform after such notice constitutes acceptance of the updated policy.

If you have questions about our privacy practices or wish to exercise your data rights, contact our support team. We are available in English and Indonesian, with response times typically within one business day during standard hours.

Summary of your privacy on xl88

We collect only the data necessary to operate xl88, verify your identity, and process payments. We do not sell your data or use it for marketing purposes. Your information is encrypted, access-controlled, and retained only as long as required by law. You have the right to access, correct, and delete your data, subject to legal constraints. If you have concerns about how we handle your information, contact our support team through the app or your account dashboard.