At xr888, protecting your personal data is not a compliance formality — it is a core commitment. This Privacy Policy explains in plain terms exactly what information we collect, why we collect it, how we use and protect it, and what rights you have as a registered player.
These six principles summarise our approach to privacy. They are not a substitute for the full policy below, which governs all data processing activities on the xr888 platform.
Every data transmission between your device and the xr888 platform is protected by industry-standard 256-bit SSL encryption. Your login credentials, payment details, and personal information are never transmitted in plain text over any network.
xr888 does not sell, rent, or trade your personal information to third-party marketing companies under any circumstances. Your data is used solely to operate your account, process transactions, prevent fraud, and improve your experience on our platform.
Player data is stored on encrypted, access-controlled servers. Sensitive fields — including passwords and payment instrument details — are hashed or tokenised at rest. Only authorised personnel with a legitimate operational need may access identifiable records.
We collect only the personal data that is strictly necessary to provide our services, comply with our obligations, and keep the platform secure. We do not request information that is unrelated to your account or betting activity on xr888.
You have the right to request a copy of all personal data xr888 holds about you, to correct inaccurate records, and to request deletion of your data where permitted by law. Submit a request at any time by contacting our customer support team.
xr888 uses cookies and similar technologies solely to maintain your session, remember your preferences, and analyse aggregate platform usage. We do not deploy third-party advertising trackers or cross-site behavioural profiling cookies on the xr888 platform.
Throughout this Privacy Policy, the following terms carry the meanings set out below. Capitalised terms not defined here carry the meanings given to them in the xr888 Terms & Conditions.
xr888 is the data controller responsible for Personal Data collected through the Platform. As data controller, xr888 determines the purposes for which your Personal Data is processed and the means by which that processing takes place. xr888 operates as an internationally licensed online gaming brand, and its registered operational entity is the legal entity responsible for data processing activities under this Privacy Policy.
Where xr888 engages Third-Party Processors, those processors act solely on xr888's documented instructions and are contractually bound to maintain appropriate technical and organisational security measures. xr888 remains responsible for ensuring that Third-Party Processors handle your data in a manner consistent with this Privacy Policy.
When you register an Account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide xr888 with Personal Data that we collect and store. This includes:
When you access or use the xr888 Platform, certain technical data is collected automatically by our systems:
xr888 does not collect or store full payment card numbers (PAN), CVV codes, or full bank account passwords. Payment instrument details are handled by our PCI-DSS compliant payment processors, who return only tokenised references to xr888 for transaction matching purposes.
| Data Category | Examples | Collection Method | Required? |
|---|---|---|---|
| Identity Data | Full name, date of birth, KTP number | Registration form, KYC submission | Mandatory |
| Contact Data | Email address, mobile number, residential address | Registration form | Mandatory |
| Financial Data | Bank account name & number, e-wallet ID | Deposit / withdrawal form | Mandatory for transactions |
| Technical Data | IP address, device type, browser | Automatic (server logs) | Automatic |
| Usage Data | Pages visited, games played, session duration | Automatic (analytics) | Automatic |
| Communications Data | Live chat transcripts, support emails | Customer support interactions | When you contact us |
xr888 uses your Personal Data only for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing a separate lawful basis for the new processing activity.
xr888 processes your Personal Data on the following legal bases, depending on the specific processing activity involved:
xr888 shares your Personal Data with Third-Party Processors strictly as necessary to operate the Platform. All processors are bound by contractual data processing agreements that require them to maintain equivalent levels of data protection. Our current categories of Third-Party Processor include:
xr888 may disclose your Personal Data to competent authorities, courts, law enforcement agencies, or regulatory bodies where such disclosure is required by applicable law, court order, or to protect the rights and safety of xr888, its players, or the public. xr888 will notify affected Players of such disclosures where it is lawfully permitted to do so.
xr888 does not sell, rent, auction, or otherwise commercially transfer your Personal Data to any third party for their own independent marketing or commercial purposes. This prohibition applies without exception and is not subject to any opt-in or opt-out mechanism.
xr888 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
Upon expiry of the applicable retention period, xr888 will securely delete or anonymise your Personal Data in a manner that prevents reconstruction or re-identification.
xr888 implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:
While xr888 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your Account login credentials confidential and for notifying xr888 immediately if you suspect that your Account has been accessed without your authorisation.
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember your preferences, and to provide analytical information to site operators. xr888 uses cookies and similar local storage technologies on the Platform.
xr888 does not deploy third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies on the Platform. We do not participate in any advertising exchange or retargeting network.
You may control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the Platform. Browser-level cookie controls vary by browser — please refer to your browser's help documentation for instructions on managing cookies on your specific device.
As a Player on the xr888 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our customer support team via live chat or by email. We will respond to all verifiable requests within 30 days.
The xr888 Platform is strictly restricted to individuals who are 21 years of age or older. xr888 does not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and any Account found to belong to a person under 21 will be closed immediately.
If you have reason to believe that a minor has registered on the xr888 Platform, please contact our customer support team immediately. Upon receipt of a substantiated report, xr888 will investigate and, if confirmed, close the Account and securely delete all associated Personal Data beyond what must be retained for legal compliance purposes.
xr888 is an internationally operated platform. In the course of providing services to Indonesian players, some of your Personal Data may be processed by Third-Party Processors whose infrastructure is located outside of Indonesia. Where such transfers occur, xr888 ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections afforded under this Privacy Policy.
Safeguards for international transfers include: contractual data processing agreements incorporating standard data protection clauses, transfers to processors operating under recognised international data protection frameworks, and technical security measures (encryption in transit and at rest) that apply regardless of the jurisdiction in which data is processed.
xr888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. When material changes are made, we will notify registered Players via email to the address associated with their Account and will post a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.
The date at the top of this Privacy Policy indicates when it was last updated. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how xr888 protects your data.
If you have questions, concerns, or requests relating to this Privacy Policy or xr888's handling of your Personal Data, please reach out to our team through any of the following channels:
All formal data rights requests must be submitted in writing (via email) and must include your registered Account username and sufficient information to identify the data concerned. xr888 will not process requests that cannot be verified as originating from the registered Account holder.
Now that you understand how xr888 protects your data, explore everything our platform has to offer — from live sports betting and premium slots to an immersive live casino experience, all accessible via instant Indonesian bank transfer.