Privacy Policy xera88 —
Your Data, Our Responsibility

01 Introduction

Xera88 ("we", "Platform", or "xera88") values the privacy of every member and visitor to our platform at xera88.pro. This Privacy Policy explains in detail how we collect, process, store, and protect your personal data when you use our website, mobile app, or any services offered by xera88.

We understand that your trust is our most valuable asset. That is why xera88 upholds a strict and transparent data protection policy — not merely to comply with the law, but because we believe privacy is a fundamental right of every individual that must be fully respected.

This policy applies to all xera88 users regardless of how they access the platform — whether via web browser, Android app, or iOS app. If you disagree with any part of this policy, we encourage you to contact us or discontinue use of the xera88 platform.

02 Personal Data We Collect

Xera88 only collects personal data that is strictly necessary to provide our members with safe, lawful, and high-quality services. The following are the categories of data we collect:

Xera88 not collect sensitive information such as biometric data, medical records, or religious information without your explicit consent. All data collection is conducted lawfully and transparently.

03 How We Use Your Data

The personal data we collect is used responsibly and only for legitimate purposes. The following are the key ways we use your information:

• Account Management: Create, verify, and maintain your member account on the xera88 platform securely and efficiently.
• Financial Transaction Processing: Process deposits and withdrawals quickly and accurately through payment systems integrated with local Malaysian banks and eWallet providers.
• Identity Verification (KYC): Comply with anti-money laundering (AML) legal requirements and verify that all members are aged 18 and above before they can fully use xera88 services.
• Platform Security: Monitor account activity in real time to detect and prevent fraud, unauthorized access, and any security threats that may compromise members' data or funds.
• Service Communications: Send important notices regarding accounts, transactions, system updates, and policy changes via email or SMS.
• Product Improvement: Analyze aggregated and anonymized usage patterns to improve platform design, service speed, and overall user experience.
• Responsible Gaming: Monitor wagering behavior to identify members who may need assistance, and provide limit management tools where required.
• Marketing (with consent): Send promotional information, exclusive bonuses, and special offers to members who have consented to receive marketing communications from xera88.

Xera88 will not use your data for any purpose other than those stated above without obtaining your consent beforehand. You may withdraw marketing consent at any time through your account settings.

04 Data Sharing and Disclosure

Xera88 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain limited and controlled situations, we may need to share your data:

• Payment Service Providers: Financial data that must be shared with local banks, eWallet providers (such as Touch 'n Go, GrabPay, Boost), and payment processors to complete your deposit and withdrawal transactions.
• Game Providers: Minimum account information required by third-party game providers to ensure a smooth and uninterrupted gaming experience. These providers are bound by strict data confidentiality agreements with xera88.
• Legal Authority: Where required by Malaysian law, a court order, or a lawful request from an enforcement agency, xera88 will disclose the necessary data to the relevant authorities.
• Auditors & Licensing Bodies: To meet compliance, financial auditing, and licensing requirements, certain data may be shared with authorised and recognised parties.
• Business Transfer: In the event of a merger, acquisition, or sale of company assets, user data may be transferred as part of the relevant business transaction. You will be notified in advance via a clear notice.

05 Personal Data Security

Protecting your personal data is the absolute priority of xera88. We continuously invest in the latest security infrastructure to ensure your information remains safe from unauthorized access, loss, or data breaches at all times.

• 256-bit SSL Encryption: All communications between your device and xera88's servers are encrypted using TLS 1.3 protocol with 256-bit encryption — the highest industry standard used by global financial institutions.
• Stored Data Encryption: Sensitive data such as financial information and identity verification documents are stored in fully encrypted databases, accessible only by authorised personnel through a multi-factor authentication process.
• Real-Time Threat Monitoring: xera88's security system operates 24 hours a day, 7 days a week to monitor any suspicious activity, intrusion attempts, or usage pattern anomalies that may indicate a security threat.
• Server Isolation: User data is stored on servers separate from the platform's operational servers, with distinct physical and digital security layers to prevent any unauthorised access.
• Periodic Security Audits: xera88 conducts regular penetration testing and independent security audits by certified cybersecurity experts to ensure there are no vulnerabilities in our systems.
• Staff Training: All xera88 staff with access to user data undergo comprehensive data protection training and are bound by strict confidentiality agreements.

While xera88 takes all reasonable precautions, no security system in the world can guarantee 100% absolute protection. In the event of any data security incident affecting your information, xera88 will notify you within 72 hours and take immediate action to mitigate any negative impact.

06 Cookies and Tracking Technologies

Xera88 uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how members interact with our platform. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for basic platform functions such as login, session management, and transaction security. Without them, the xera88 platform cannot operate properly. These cookies cannot be disabled.
• Preference Cookies: Save your preferences such as language, time zone, and display settings so you do not need to reset them every time you visit xera88.
• Analytics Cookies: Collect anonymized usage data to help us understand the most popular areas of the platform and identify areas that need improvement.
• Security Cookies: Used to identify and prevent fraudulent activity, monitor suspicious login attempts, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the xera88 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

07 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by xera88:

To exercise any of the above rights, please contact the xera88 data protection team via Live Chat in your account or by email at [email protected]. We will respond to all requests within 30 business days.

08 Data Retention Period

Xera88 only retains your personal data for as long as necessary for the purposes stated in this policy or as required by applicable law. The following are our general data retention period guidelines:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure to meet Malaysian financial law compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering (AML) compliance requirements and applicable tax legislation.
• KYC Verification Documents: Retained for 5 years after account closure, or longer if required by the relevant regulatory authority.
• Security Logs: Retained for 2 years to enable effective security incident investigation and fraud detection where required.
• Cookie & Analytics Data: Anonymous analytics data is retained for a maximum of 26 months; session cookies are automatically deleted when you close your browser.
• Support Communications: Live Chat conversation records and support emails are retained for 3 years for reference and service quality improvement.

Once the specified retention period has expired, your personal data will be securely deleted or anonymised using methods that ensure the data cannot be recovered.

09 Links to Third-Party Sites

The xera88 platform may contain links or integrations with third-party services such as game providers, payment processors, or content providers. Please note that:

• The xera88 Privacy Policy applies only to data collected and processed directly by xera88. We are not responsible for the privacy practices of third-party websites or services.
• When you interact with third-party services integrated within the xera88 platform, your data may be subject to those third parties' privacy policies.
• Xera88 conducts due diligence checks on all third-party partners to ensure they comply with reasonable data protection standards before any integration is implemented.

We encourage you to read the privacy policy of every third-party service you use through the xera88 platform, especially payment and game providers.

10 Changes to the Privacy Policy

Xera88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When significant changes are made:

• We will display a clear notice on the xera88 platform's main page at least 14 days before any changes take effect.
• We will send a notice to your registered email to inform you of important changes that may affect your privacy rights.
• The "Last Updated" date at the top of this document will be updated to reflect the latest version of the Privacy Policy.

Your continued use of the xera88 platform after any changes take effect will be considered your acceptance of the amended Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

11 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how xera88 handles your personal data, our Data Protection Officer (DPO) team is ready to assist:

• Live Chat: Available 24/7 directly within your xera88 account — the fastest way to get an immediate response from our team.
• Email: [email protected] — please state "Data Privacy Enquiry" in your email subject line to expedite the process.
• Response Time: All data privacy enquiries will be answered within 5 business days, and formal user rights requests will be resolved within 30 business days.

If you are not satisfied with our response, you also have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the official regulatory body under the Ministry of Communications and Multimedia Malaysia.