Privacy & Data Security

Xx5 Privacy Policy – Member Personal Data Protection

Xx5 prioritises your privacy. This document clearly explains how we collect, use, store, and protect your personal information as a member of the xx5 Malaysia platform.

Updated: 1 January 2026  |  Bahasa Melayu
xx5's Commitment to Your Privacy

Six core principles that form the foundation of personal data protection for every xx5 member

Full Data Encryption

All your personal information and financial transactions are protected with 256-bit SSL encryption, the highest security standard in the industry. Every data point passing through our network is fully encrypted.

No Data Sales

Xx5 has never sold, rented, or transferred your personal data to third parties for marketing purposes without your explicit consent, and never will. Your data belongs to you — it is not our business commodity.

Member Control Rights

You have the full right to access, correct, download, and request deletion of your personal data at any time. The xx5 privacy team will process your request within 14 business days.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of physical and digital security. Access to data is restricted to authorised personnel only and is regularly audited.

Legal Compliance

Xx5 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data privacy regulations. We continually update our privacy practices to keep pace with the latest legal developments.

Communication Controls

You can choose the types of communications you wish to receive from xx5 — promotions, platform updates, or account notifications — and unsubscribe at any time through your account settings.

Privacy Notice: By using the xx5 platform, you agree to the terms set out in this Privacy Policy. This policy applies to all services provided through the xx5.bz website, the xx5 mobile app, and all official xx5 communication channels.

1 Introduction

Xx5 ("we", "Platform", "xx5") values the privacy of every individual who uses our services. This Privacy Policy explains in detail how we handle your personal information — from the moment you register an account to the time you enjoy your favourite games on the xx5 platform.

As an online gaming platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your data is handled transparently, securely, and in accordance with applicable laws.

We understand that trust is the foundation of our relationship with you. We are therefore committed to being consistently transparent about our privacy practices and giving you meaningful control over your own personal information.

Policy Scope: This policy applies to all personal data collected through the xx5.bz website, the xx5 mobile app, customer support, official social media, and all other touchpoints between you and xx5.

2 Personal Data We Collect

Xx5 collects your personal information through various means depending on how you interact with our platform. The following are the categories of data we collect:

Data Category Examples of Information Collection Method
Identity Information Full name, date of birth, identification card number, selfie photo Registration form, KYC process
Contact Information Phone number, email address, residential address Account registration, profile updates
Financial Data Bank account number, e-wallet details, transaction history Deposit and withdrawal process
Technical Data IP address, device type, web browser, operating system Automatic access log
Usage Data Game records, betting history, platform access times Platform tracking system
Communication Data Support chat records, emails sent to us Customer service interactions

We only collect data that is genuinely necessary to provide services to you. This data minimisation principle ensures we do not retain irrelevant or excessive information.

3 Personal Data Usage Purpose

Xx5 uses your personal data for the following lawful purposes:

  • Account Management: Creates, verifies, and manages your xx5 account, including a secure login process.
  • Identity Verification (KYC): Verifies your identity to meet anti-money laundering (AML) legal compliance requirements.
  • Transaction Processing: Securely and accurately processes deposits, withdrawals, and all financial transactions on the platform.
  • Fraud Prevention: Detects and prevents fraudulent activity, money laundering, and unlawful use of the platform.
  • Service Improvement: Analyzes usage patterns to improve the user experience and develop new features.
  • Service Communications: Sends important notifications related to your account, security, and platform updates.
  • Marketing (with consent): Delivers promotional offers, bonuses, and updates on new games — only if you have consented to receive them.
Purpose Limitation Principle: xx5 will not use your data for any purpose other than those stated above without first obtaining your renewed consent.

4 Lawful Basis for Data Processing

Every personal data processing activity we carry out has a solid legal basis. Under Malaysia's PDPA and international privacy principles, we rely on the following grounds:

  • Contract Execution: Processing necessary to fulfil our contractual obligations to you as an xx5 member — including payment processing and account management.
  • Legal Obligation: Processing required under Malaysian law, including KYC and AML requirements and reporting to regulatory authorities.
  • Legitimate Interest: Processing for fraud prevention, network security, and internal business analytics that does not affect your rights and freedoms.
  • Consent: Processing for marketing and promotional communications purposes requires your explicit consent — you may withdraw this consent at any time.

5 Data Sharing with Third Parties

Xx5 does not sell or rent your personal data to any third party. However, we may share your data in the following limited and controlled situations:

  • Service Providers: Companies that help us operate the platform — such as payment processors, cloud service providers, and identity verification companies — who are bound by strict confidentiality agreements.
  • Legal Compliance: Government authorities, law enforcement agencies, or regulatory bodies when we are required to do so by law or court order.
  • Fraud Prevention: Companies and other platforms within the industry's fraud prevention ecosystem to detect and prevent illegal activity collectively.
  • Business Transfers: In the event of a merger, acquisition, or sale of xx5 assets, your data may be transferred — however, you will be notified in advance and the same privacy policy will continue to apply.
Important: All third parties we work with are contractually bound to protect your data and use it only for permitted purposes. We do not allow them to use your data for their own marketing purposes.

6 Data Storage & Security Measures

The security of your data is xx5's top priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

  • 256-bit SSL/TLS encryption for all data transmitted across our network.
  • Encryption of data at rest for all sensitive information stored in our databases.
  • Role-based access control — only authorised personnel may access your personal data.
  • 24/7 security monitoring and an intrusion detection system to identify unusual activity.
  • Regular security audits by independent third parties to assess and improve our security posture.
  • A comprehensive incident response plan — you will be notified within 72 hours in the event of a data breach affecting your information.

Regarding retention periods, xx5 retains your personal data for as long as your account is active and for the period required by law following account closure — typically not exceeding seven (7) years for financial records, in accordance with Malaysian legal requirements.

Data Deletion: When data is no longer needed and there is no legal obligation to retain it, xx5 will securely delete or anonymise that data using industry-recognised methods.

7 Cookies & Tracking Technologies

The xx5 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. The types of cookies we use are as follows:

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Performance Cookies: Helps us understand how users interact with the platform — including the most visited pages, time spent, and navigation patterns.
  • Functional Cookies: Saves your personal preferences such as language, display theme, and account settings to provide a more personalized experience.
  • Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the xx5 platform.

8 Your Rights as a Data Owner

Under Malaysia's PDPA and modern privacy principles, you have the following rights regarding your personal data held by xx5:

Right of Access

You have the right to obtain a copy of the personal data we hold about you, including information on how it is used and with whom it is shared.

Right to Rectification

If your personal data is inaccurate or incomplete, you may request that we correct or complete it promptly.

Right to Erasure

Under certain circumstances, you may request that we delete your personal data — subject to applicable legal record-keeping obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes or processing based on our legitimate interests at any time.

Right to Data Portability

You may request a copy of your data in a structured, machine-readable format for transfer to another platform where applicable.

Right to Restrict Processing

In certain situations, you may request that we restrict how we process your data while your request or complaint is being resolved.

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within 14 business days and may require identity verification before any action is taken.

9 Children's Privacy

The xx5 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a child has been collected inadvertently, we will take immediate action to delete that data and close the relevant account. Parents or guardians who suspect their child has registered a xx5 account are encouraged to contact us immediately at [email protected].

Warning: Account registration by individuals under the legal age is a serious violation of xx5's Terms and Conditions and may result in legal action.

10 Cross-Border Data Transfers

In operating the xx5 platform, some of your personal data may be processed or stored outside Malaysia — primarily through international cloud service providers we use. Such transfers only occur when:

  • The destination country has a level of data protection equivalent to or higher than Malaysia.
  • Robust data processing agreements have been signed with the relevant service providers.
  • Appropriate safeguards such as Standard Contractual Clauses (SCC) or equivalent protection certifications have been implemented.

We ensure that any cross-border data transfers comply with Malaysia's PDPA requirements and provide a consistent level of protection for your personal data.

11 Amendments to This Privacy Policy

Xx5 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant changes are made:

  • You will be notified via your registered email or in-platform notification at least 14 days before any changes take effect.
  • The "Updated" date at the top of this page will be updated to reflect the latest version.
  • For changes that require re-consent, you will be asked to agree before continuing to use the platform.

Continued use of the xx5 platform after any amendments take effect constitutes your acceptance of the updated policy.

12 Contact Us — xx5 Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how xx5 handles your personal data, please contact our Privacy Officer:

Privacy Email: [email protected]
General Support Email: [email protected]
Live Chat: Available 24/7 via the xx5 platform
Response Time: Privacy requests are processed within 14 business days

You may also refer to FAQ page for answers to common questions about privacy and account security. For information on responsible gaming and additional protections, visit our Responsible Gaming page.

Join the Safe & Trusted xx5 Platform

Your personal data is fully protected. Register your xx5 account today and enjoy a safe, fair, and transparent gaming experience alongside millions of members across Malaysia.

256-bit SSL Encryption Malaysia PDPA Compliance No Data Sales Full Member Control
Bahasa Melayu