Privacy Policy

Privacy Policy x168 — Member Personal Data Protection

X168 takes our responsibility to protect every member's personal data seriously. This document clearly explains how your information is collected, used, stored, and protected in accordance with the highest standards of digital privacy.

Updated: January 2026 PDPA 2010 Compliance 256-bit SSL Encryption
Privacy Policy Summary
  • Your data never sold to third parties
  • Encryption SSL 256-bit for all data in transit
  • Right to access, correct, and delete your data
  • Full compliance Malaysia PDPA 2010
  • Cookies are used only for user experience
  • Data is stored on servers that secure and monitored

The Six Core Pillars of x168 Privacy Protection

Privacy is more than a word in a document — it is a daily practice deeply embedded in how x168 manages every member's data.

End-to-End Data Encryption

All data transmitted between your device and x168 servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Secure Data Storage

Member personal data is stored in data centres equipped with multi-layered physical and digital protection — including strict access controls and continuous 24/7 monitoring.

Personal Data Control

You have full control over your data — you can access, correct, or request deletion of your personal information at any time through your x168 account settings.

No Data Selling

X168 has never sold, rented, or distributed members' personal data to third parties for marketing or commercial purposes, and will never do so without your explicit consent.

PDPA 2010 Compliance

All data management operations at x168 comply with Malaysia's Personal Data Protection Act 2010 — the primary law governing personal data processing in the country.

Communication Controls

You can opt in or out of marketing communications from x168 at any time — no questions asked, no hassle, directly from your account settings.


Introduction

X168 is an online entertainment platform operating in Malaysia. We understand that your trust is the most valuable asset we hold. That is why protecting members' personal data is more than a legal obligation — it is a sincere commitment we uphold in every aspect of this platform's operations.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information when you register, log in, or use any x168 service — including the x168.ml website and the x168 mobile app.

Important: By using the x168 platform, you agree to the terms of this Privacy Policy. Please read this document together with x168 Terms and Conditions for a comprehensive understanding of your rights and responsibilities as a member.

This policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations in force thereunder. In the event of any conflict between this policy and applicable Malaysian law, Malaysian law shall prevail.

Personal Data We Collect

X168 only collects data that is genuinely necessary to provide a safe, efficient, and responsible service to our members. The following are the categories of data we collect:

2.1 Personal Identification Information

  • Full name as stated on identity card
  • Identity Card Number (MyKad) or passport number
  • Date of birth and gender
  • Current residential address

2.2 Contact Information

  • Active and valid email address
  • Malaysian mobile phone number

2.3 Financial Information

  • Bank account number and bank name for withdrawal purposes
  • Deposit and withdrawal records
  • Transaction history within the x168 platform

2.4 Technical & Usage Data

  • IP address and approximate location
  • Device type, operating system and browser version
  • Login records, session duration, and in-account activity
  • Cookie data and device identifiers
Data Categories Example Requirements
Identity Verification Name, IC, date of birth Required (KYC)
Contact Email, phone number Required
Finance Bank account details, transaction records Required (withdrawal)
Technical IP address, device type Automatic
Cookies Preferences, login session Optional (partial)

How We Collect Data

X168 collects your personal data through several transparent and legitimate channels:

3.1 Directly from You

When you register a new account, complete the KYC process, submit a withdrawal request, contact our support team, or fill in any information in your account settings — all data you provide is collected directly with your knowledge.

3.2 Automatically During Use

X168 platform automatically collects technical data as you browse our website or use our mobile app. This includes your IP address, session data, device information, and records of your interactions with the user interface.

3.3 Via Cookies and Similar Technologies

X168 uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how members use our platform. You can manage your cookie settings through your browser, although this may affect certain platform functions.

100% Transparent: x168 never purchases personal data from third-party sources or collects data from your social media without your explicit consent. We only use data you voluntarily provide or that is lawfully generated through your use of the platform.

Data Usage Purpose

Every piece of data collected by x168 has a clear and legitimate purpose. We use your data to:

  • Account management: creating, verifying, and securely managing your member account
  • Transaction processing: processing deposits, withdrawals, and all financial transactions on the platform
  • Identity verification (KYC): verifying member identity to prevent fraud and ensure legal compliance
  • Customer support: helping resolve inquiries, complaints, and technical issues more effectively
  • Platform security: detecting and preventing fraudulent activity, hacking, and multi-account abuse
  • Legal compliance: fulfilling Malaysia's legal obligations, including reporting to authorities when required
  • Service improvement: analysing usage patterns to improve the overall user experience
  • Marketing communications: sending offers, promotions, and platform updates — only if you have given your consent
Note: x168 does not use your data to make automated decisions that significantly affect you without human intervention, except in cases of clear and urgent fraud detection.

Data Sharing with Third Parties

X168 does not sell, rent, or disclose members' personal data to third parties for commercial purposes. However, in certain situations, we may share your data with the following parties:

5.1 Service Providers

X168 works with trusted service providers such as payment processors, cloud service providers, and identity verification systems. All such providers are bound by strict confidentiality agreements and may only process your data in accordance with x168's instructions.

5.2 Legal Obligations

X168 will disclose your personal data to Malaysian authorities when required by law — including criminal investigations, court orders, or official requests from competent government agencies.

5.3 Rights and Security Protection

In cases involving platform security protection, large-scale fraud prevention, or the protection of other members' rights, x168 may share necessary data with relevant parties such as fraud detection companies.

x168 Guarantee: In all of the above data-sharing situations, x168 discloses only the minimum data required and always ensures that recipients are bound by equivalent or stricter confidentiality obligations.

Data Storage & Security

6.1 Storage Location

X168 member personal data is stored in secure data centres meeting high-grade security standards. All storage facilities are equipped with physical access controls, intrusion detection systems, and disaster recovery procedures that are regularly tested.

6.2 Technical Security Measures

  • 256-bit SSL/TLS encryption for all data in transit
  • AES-256 encryption for stored sensitive data
  • Role-based access control (RBAC) — only authorised staff may access specific data
  • Continuous 24/7 security monitoring and threat detection system
  • Regular security audits by independent third parties
  • Automatic data backup with tested recovery procedures

6.3 Data Retention Period

X168 retains members' personal data for as long as necessary to fulfil the purpose of collection, or as required by Malaysian law. Generally, active account data is retained for the duration of active membership plus 7 years after account closure for legal compliance purposes.

Shared Responsibility: While x168 implements robust security measures, your account security also depends on your own practices. Make sure your password is strong, enable two-factor authentication (2FA), and never share your login credentials with anyone.

Your Rights as a Data Owner

As an x168 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Access Rights

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may correct inaccurate or incomplete data via your account settings or by contacting customer support.

Right to Erasure

You may request deletion of your data — subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Portability

You have the right to receive your data in a machine-readable format for transfer to another service.

Right to Restriction

You may request restriction of data processing in certain situations while a dispute is being resolved.

To exercise any of the above rights, contact the x168 privacy team via in-app live chat or email at [email protected]. We will process your request within 14 working days.

Cookie Policy

X168 uses cookies to enhance the user experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our website.

Types of Cookies Used

Cookie Types Function Duration
Essential Cookies Maintaining login sessions and account security Session only
Functional Cookies Saving language preferences and display settings 1 year
Analytics Cookies Understanding how users interact with the platform 90 days

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the Login functionality and account security on the x168 platform.

Third-Party Links

The x168 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the x168 platform and does not cover the privacy practices of any third party.

X168 is not responsible for the content, privacy policies, or security practices of any third-party websites or services. We encourage you to read the privacy policy of each website you visit separately.

Child Protection

X168 is a platform exclusively for individuals aged 18 years and above. We do not intentionally collect, store, or process personal data of individuals under the age of 18.

Should x168 become aware that a child's personal data has been collected unintentionally, we will take immediate steps to delete that data and close the account in question. Parents or guardians who discover that their child has registered an x168 account should contact us immediately.

Privacy Policy Amendments

X168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, technology, or our business practices. All amendments will be published on this page with a new "Updated" date.

For significant amendments — such as changes to how we use sensitive data — x168 will notify members via email or in-app notification at least 14 days before the amendments take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or x168's handling of your personal data, please contact us:

Complaints to the Authorities: If you are not satisfied with our response to your privacy complaint, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia, which is the PDPA regulatory authority in this country.

Play with Confidence on the x168 Platform

Your privacy and security are our top priority. Register your x168 account today and enjoy a fully protected online entertainment experience, backed by the latest encryption technology and a transparent privacy policy.

Your data is protected with 256-bit SSL encryption. x168 fully complies with Malaysia's PDPA 2010.

Bahasa Melayu