Privacy Policy — xbet100

This Privacy Policy ("Policy") is issued by xbet100 ("xbet100", "we", "us", or "our"), the operator of the online betting and gaming platform accessible at xbet100.cam and all associated subdomains, mobile interfaces, and ancillary services (collectively, the "Platform"). This Policy governs the collection, use, disclosure, storage, and protection of personal data provided by or collected from users ("you", "the Player", or "the User") of the Platform.

xbet100 is committed to handling personal data responsibly and in accordance with applicable international data protection principles. We recognise that our players — including those accessing the Platform from Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru — entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference. By registering an Account on the Platform or continuing to use xbet100 services, you confirm that you have read, understood, and consent to the data practices described in this Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

xbet100 collects personal data across several categories depending on your level of interaction with the Platform. The following table summarises the categories of data collected and their primary purpose:

xbet100 collects personal data through the following primary channels:

4.1 Directly from You

• Account Registration: When you create an xbet100 Account, you provide identity, contact, and date-of-birth information.
• KYC Submission: When completing identity verification, you submit documentary evidence of identity, address, and payment method ownership.
• Deposit and Withdrawal Transactions: Payment processing requires collection of relevant financial account identifiers, whether via FPX, DuitNow, e-wallets (Touch 'n Go, Boost, GrabPay), or cryptocurrency wallets.
• Customer Support Interactions: When you contact our support team by live chat or email, the content of that communication is recorded for quality and compliance purposes.
• Promotional Participation: When claiming bonuses, entering tournaments, or participating in VIP programme activities, you may be asked to provide or confirm personal details.

4.2 Automatically Through Platform Use

• Cookies and Tracking Technologies: The Platform uses cookies, web beacons, and similar technologies to collect technical and behavioural data during your session. See Section 10 for full details.
• Server Logs: Our servers automatically record technical information including your IP address, device type, browser version, and page access timestamps whenever you access the Platform.
• Betting and Gaming Activity: All betting, wagering, and game session activity is logged automatically as part of Platform operations and is retained for dispute resolution, regulatory compliance, and responsible gambling monitoring.

4.3 From Third Parties

• Payment Processors: FPX gateway operators, DuitNow, and e-wallet providers may transmit transaction metadata to xbet100 as part of payment confirmation.
• Identity Verification Services: Where third-party KYC or age verification service providers are engaged, they may transmit verification results (pass/fail determinations and risk indicators) to xbet100.
• Fraud Prevention Partners: Third-party fraud detection systems may provide risk scoring data associated with Account activity or login events.

xbet100 processes personal data for the following specific, documented purposes:

• Account Management: To create, maintain, and administer your xbet100 Account, including authentication, security, and account recovery.
• Identity Verification and KYC Compliance: To verify that you meet the minimum age requirement of 21 years and that your identity matches the documentation you have submitted, in compliance with our licensing obligations.
• Payment Processing: To process deposits and withdrawals via your chosen payment method — including FPX bank transfers, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency — and to reconcile all transaction records.
• Anti-Money Laundering (AML) and Fraud Prevention: To detect, investigate, and prevent fraudulent, abusive, or financially criminal activity on the Platform in compliance with applicable AML regulatory standards.
• Customer Support: To provide timely and accurate responses to queries, complaints, and account-related requests submitted via live chat or email.
• Responsible Gambling Monitoring: To monitor betting patterns for indicators of problem gambling behaviour and to administer responsible gambling tools including deposit limits, self-exclusion, and session controls.
• Promotion and VIP Programme Administration: To determine bonus eligibility, calculate cashback and VIP tier status, award birthday bonuses, and administer referral reward programmes.
• Platform Improvement and Analytics: To analyse aggregate usage patterns, identify technical issues, and improve the functionality and user experience of the Platform.
• Legal and Regulatory Compliance: To fulfil obligations under our international gaming licence, including record-keeping requirements, and to respond to lawful requests from regulatory authorities or law enforcement agencies.

xbet100 processes personal data on one or more of the following legal bases, depending on the specific processing activity and jurisdiction:

• Contractual Necessity: Processing is necessary to perform the contract between xbet100 and you — specifically, to operate your Account, process transactions, and provide betting and gaming services as described in our Terms & Conditions.
• Compliance with Legal Obligations: Processing is required to comply with xbet100's obligations under its international gaming licence, including KYC verification, AML transaction monitoring, and age enforcement.
• Legitimate Interests: Processing is carried out for xbet100's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud detection, platform security, and service analytics — provided these interests do not override your fundamental privacy rights.
• Consent: Where neither contractual necessity nor legal obligation applies — for example, in the case of optional marketing communications — xbet100 relies on your freely given, explicit consent. You may withdraw consent at any time without detriment to the continuation of core services.

xbet100 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your personal data may be disclosed to the following categories of third parties, strictly on a need-to-know basis and subject to binding data protection obligations:

7.1 Authorised Service Providers

• Payment Processors and Gateways: FPX operators, DuitNow banking partners, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network processors receive only the minimum data required to execute your requested transactions.
• Identity Verification Providers: Third-party KYC and age verification service providers who process documentation on behalf of xbet100 to confirm your eligibility to use the Platform.
• Game and Software Providers: Casino game and sportsbook software providers receive anonymised or pseudonymised identifiers required to deliver game sessions and record outcomes. These providers do not receive your full identity data.
• IT Infrastructure and Cloud Providers: Hosting, cloud storage, and cybersecurity service providers who maintain the technical infrastructure on which the Platform operates, subject to strict data processing agreements.
• Customer Support Platforms: Live chat and email support technology providers who facilitate communication between Players and the xbet100 support team.

7.2 Regulatory and Legal Disclosures

• xbet100 may disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where such disclosure is required by law, court order, or the conditions of our operating licence.
• In the event of a merger, acquisition, or sale of xbet100 assets, personal data held by xbet100 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

xbet100 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with xbet100's data disposal procedures. Anonymised or aggregated data that cannot be used to identify any individual may be retained indefinitely for analytical purposes.

xbet100 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• Transport Layer Encryption: All data transmitted between your device and xbet100 servers is encrypted using 256-bit SSL/TLS protocols, ensuring data cannot be intercepted in transit.
• Data-at-Rest Encryption: Personal data stored on xbet100's servers — including KYC documents and financial records — is encrypted using AES-256 encryption standards.
• Access Controls: Access to personal data within xbet100 is restricted on a strict need-to-know basis. All internal access to production data systems requires multi-factor authentication and is subject to comprehensive audit logging.
• Network Security: xbet100 employs web application firewalls, distributed denial-of-service (DDoS) mitigation, intrusion detection systems, and regular penetration testing to protect the Platform infrastructure.
• Account Security: Players are encouraged to enable two-factor authentication (2FA) on their Accounts. Unusual login activity triggers automated security alerts and, where appropriate, temporary account holds.
• Third-Party Security Auditing: xbet100 engages independent cybersecurity professionals to conduct periodic security assessments of our systems and data handling practices.

xbet100 uses cookies and similar tracking technologies to improve Platform functionality, maintain session security, and analyse usage patterns. The following categories of cookies are in use:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core features such as login authentication, session management, payment security tokens, and language preferences. You cannot opt out of strictly necessary cookies without materially impairing your ability to use the Platform.

10.2 Performance and Analytics Cookies

These cookies collect anonymised information about how Players use the Platform — including pages visited, time spent on site, and error messages encountered. This data is used to improve the performance and user experience of xbet100. No personally identifying information is transmitted through performance cookies.

10.3 Functionality Cookies

Functionality cookies remember your preferences — such as selected language, preferred payment method display, and odds format (e.g., decimal odds, commonly used in Malaysia) — so you do not need to re-configure them on each visit.

10.4 Managing Cookie Preferences

You may manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please be aware that disabling certain categories of cookies may affect the functionality and performance of the Platform.

As a data subject, you hold the following rights with respect to your personal data processed by xbet100. To exercise any of these rights, please contact our support team with a clear description of your request. xbet100 will respond within a reasonable timeframe, generally within 30 days of receiving a verified request.

Please note that certain rights are subject to exceptions under applicable data protection law — for example, the right to erasure may be limited where xbet100 is required to retain data to comply with its licensing obligations or AML record-keeping requirements.

xbet100 is strictly an adult platform. The minimum age of eligibility to register an Account and use the Platform is 21 years. xbet100 does not knowingly collect, process, or retain personal data from individuals below the age of 21 under any circumstances.

Age verification is a mandatory component of xbet100's KYC process. Where it is discovered that personal data has been collected from an individual who is under 21 years of age, xbet100 will immediately suspend the associated Account, delete the data collected, and — where legally required — report the incident to relevant authorities.

Parents and guardians who believe their child may have accessed or registered on the xbet100 Platform should contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

xbet100 operates as an internationally licensed platform. As a result, your personal data may be processed and stored on servers or by service providers located outside of Malaysia. Such international transfers may include jurisdictions with data protection frameworks that differ from those applicable in Malaysia.

Where personal data is transferred internationally, xbet100 implements appropriate safeguards to ensure an equivalent level of protection, including:

• Binding data processing agreements that impose data protection standards consistent with applicable international frameworks.
• Selection of service providers operating under internationally recognised privacy and security certifications.
• Minimisation of data transferred internationally to only what is strictly necessary for the relevant processing purpose.

By using the xbet100 Platform, you acknowledge and consent to the transfer of your personal data to service providers and infrastructure located outside Malaysia as described in this Policy.

xbet100 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, we will notify registered Players via their registered email address or via a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is shown at the top of this page.

We encourage you to review this Privacy Policy periodically to remain informed of how xbet100 is protecting your data. Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

For all privacy-related enquiries, requests to exercise your data rights, or concerns about how xbet100 handles your personal data, please contact our Customer Support team using the following channels:

For general account, payment, or platform enquiries, please visit our FAQ page or contact support via live chat. For information on your rights as a player, including self-exclusion and responsible gambling tools, please visit our Responsible Gambling page.