Privacy Policy xe8 — Protection of Your Personal Data

Xe8 collects various types of information depending on how you interact with our platform. Below is a detailed summary of the data we collect and the purposes for collecting it:

We also collect information automatically through cookies and pixel tracking technology as you browse our platform. This helps us understand how users interact with the platform and improve the overall experience.

Xe8 uses your personal data only for legitimate and necessary purposes. We do not use your data for any other purpose without obtaining your consent first. The following are the primary purposes for which your data is used:

• Account management — processing registration, verifying identity, and managing your gaming account.
• Transaction processing — processing deposits, withdrawals, and any financial activity in your account.
• Platform Security — detecting and preventing fraud, money laundering, and unauthorised access to your account.
• Legal compliance — fulfilling reporting and compliance requirements with the relevant authorities when necessary.
• Customer support — providing technical assistance and resolving any issues or complaints you report.
• Service improvement — analysing usage patterns to improve platform features and the overall user experience.
• Marketing communications — sending information about promotions, bonuses, and exclusive offers (only if you have given your consent).
• Responsible gaming — monitoring gameplay patterns to identify players who may need assistance with gambling control.

All data processing is carried out on a valid legal basis, whether that is your consent, contractual necessity, a legal obligation, or the legitimate interests of xe8 that do not override your privacy rights.

Xe8 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are specific situations where we need to share your information with certain parties to ensure smooth platform operations:

• Payment processors — banks, credit card companies, and e-wallet providers that process your financial transactions. They are subject to strict data security standards.
• Game software providers — companies that supply slot games, live casino, and betting products to the xe8 platform. Data shared is limited strictly to what is necessary to operate the games.
• Support service providers — companies that assist us with customer support operations, analytics, and technical platform maintenance.
• Statutory authorities — we will disclose information when required by law, court order, or directive from a legitimate authority.
• Fraud prevention — in cases of suspected fraud or money laundering, relevant information may be shared with financial crime prevention agencies.

All third parties working with xe8 are required to comply with strict data protection policies and are only permitted to use your data for the purposes specified in their service agreements with us.

The xe8 platform uses cookies and similar tracking technologies to enhance user experience, secure login sessions, and understand how users interact with our platform.

Types of cookies we use:

• Essential cookies — required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Preference cookies — saving your personal settings such as language and display preferences to enhance ease of use.
• Analytics cookies — collecting anonymised usage data to help us understand which parts of the platform are most frequently used.
• Performance cookies — helping us identify technical issues and optimise the speed and performance of the platform.

You can manage cookie settings through your web browser. However, disabling mandatory cookies may affect certain functions of the xe8 platform. Continued use of this platform is considered your consent to the use of cookies as described above.

The security of your personal data is xe8's top priority. We continuously invest in the latest security infrastructure to keep your information protected against cyber threats, data breaches, and unauthorised access.

The security measures we implement include:

• Data encryption in transit using TLS/SSL 256-bit protocol.
• Data encryption at rest using AES-256 standard.
• Two-factor authentication (2FA) to protect member accounts.
• Continuous 24/7 monitoring of suspicious activity within the system.
• Regular security audits conducted by independent cybersecurity experts.
• Role-based access control (RBAC) for internal staff.
• A tested incident response plan for data breach emergencies.

While we take all reasonable precautions, no system is completely immune to threats. In the event of a security incident affecting your data, we will notify you within the timeframe required by applicable law.

As a xe8 platform user, you have a range of rights regarding your personal data. We fully respect these rights and provide straightforward mechanisms for you to exercise them:

To exercise any of the rights above, please contact the xe8 support team through the available channels. We will process your request within 30 calendar days. For complex cases, we may require up to 60 days and will notify you in advance.

Xe8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are our data retention guidelines:

• Active account data — retained for as long as your account is active and for 5 years after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with legal requirements relating to financial records and anti-money laundering.
• Support communication logs — retained for 3 years for reference and dispute resolution purposes.
• Cookies and analytics data — anonymised analytics data is retained for 26 months; session cookies are automatically deleted when you close your browser.
• KYC Documents — retained for 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.

Once the specified retention period has ended, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

The xe8 platform is strictly for individuals aged 18 years and above. We do not intentionally collect any personal data from individuals under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that information and close the associated account. Parents or guardians who become aware that their child has registered an account on the xe8 platform are asked to contact our support team right away.

Xe8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to you through:

• In-platform notifications on the xe8 platform upon login.
• Email to your registered email address.
• Announcements on the xe8 website homepage.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. It is your responsibility to review this page periodically. Your continued use of the xe8 platform after any revision takes effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the xe8 Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

• Privacy Email: [email protected]
• Customer Support: Via the live chat button available on the xe8 platform.
• FAQ: Visit page FAQ for answers to common questions.

We are committed to responding to all privacy-related inquiries within 14 working days. For cases requiring deeper investigation, we will keep you informed of the progress and expected resolution timeframe.