Privacy Policy xs66 – Member Personal Data Protection

This Privacy Policy ("Policy") is published by xs66 and applies to all users and members who access or use the xs66 platform at xs66.pw, including all services, mobile apps, games, and features provided by xs66.

This Policy explains in detail how xs66 handles your personal information — from how we collect it, what it is used for, who it may be shared with, and your rights as the owner of that data. We are committed to complying with all applicable data protection laws and regulations.

Xs66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to members via the xs66 platform or registered email.

Xs66 collects various types of personal information from members during the registration process and platform usage. Below is a complete list of the data we collect along with the purpose of collection:

Xs66 does not collect sensitive data such as members' health information, religious beliefs, or political views. All data collected is strictly limited to what is necessary for platform operations.

Personal data collected by xs66 is used solely for the following purposes. xs66 will not use your data for any other purpose without obtaining your consent first:

• Account management: Creating and maintaining your xs66 member account, processing registration, and managing your account settings.
• Transaction processing: Processing deposits, withdrawals, and all financial activities associated with your xs66 account.
• Identity verification (KYC): Verifying the true identity of members to prevent fraud, money laundering, and other illegal activities.
• Customer Support: Providing effective technical support and customer service based on your account history and activity.
• Platform security: Detecting and preventing unauthorised access, fraud, cyberattacks, and other security breaches.
• Regulatory compliance: Meeting applicable legal and regulatory obligations, including reporting requirements to authorities as required by law.
• Platform improvements: Analysing aggregated usage patterns to improve the user experience, platform performance, and xs66 product offerings.
• Promotional communications: Sending information about promotions, bonuses, and special offers — only to members who have consented to receive such communications.

Xs66 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, in the following limited circumstances, xs66 may need to share members' personal data:

• Payment service providers: To process deposits and withdrawals, xs66 shares the necessary transaction information with approved payment providers subject to strict confidentiality agreements.
• Technical service providers: Cloud computing, cybersecurity, and technical infrastructure service providers that support xs66 platform operations, all subject to strict data processing agreements.
• Legal authorities: xs66 will disclose personal data to government authorities or law enforcement agencies when required to do so by applicable law, court order, or valid legal process.
• Fraud prevention: In cases involving fraud, money laundering, or criminal activity, xs66 reserves the right to share necessary information with the relevant authorities for investigation purposes.

The xs66 platform uses cookies and similar tracking technologies to enhance the user experience, secure login sessions, and analyse platform performance. The following are the types of cookies used by xs66:

• Essential Cookies: Required for core platform operations, including login session management and security. These cookies cannot be disabled.
• Preference Cookies: Saving your personal settings and preferences, such as preferred language and display theme, to enhance your experience.
• Analytics Cookies: Collecting anonymised usage data to help xs66 understand how members interact with the platform and identify areas for improvement.
• Security Cookies: Used to detect and prevent suspicious activity, including unauthorized login attempts and brute-force attacks.

You can manage cookie settings through your browser preferences. Please note, however, that disabling essential cookies may affect the functionality of the xs66 platform and your login experience.

Xs66 retains members' personal data only for as long as it is needed for the purposes stated in this Policy or as required by applicable law. The following are general data retention period guidelines:

• Active account data: Retained for as long as the account remains active and for the required period following account closure.
• Financial transaction records: Retained for seven (7) years after the transaction date in accordance with applicable financial and tax legal requirements.
• Security logs: Retained for two (2) years for the purposes of security incident investigation and fraud prevention.
• KYC records: Retained for five (5) years after account closure in line with anti-money laundering compliance requirements.
• Communication data: Customer support chat records are retained for one (1) year for quality control and dispute resolution purposes.

Upon expiry of the designated retention period, your personal data will be securely deleted or anonymised in accordance with xs66's established data disposal procedures.

As an xs66 member, you have the following rights regarding your personal data held by xs66. To exercise any of these rights, please contact the xs66 support team via live chat or email at [email protected]:

• Right to Access: You have the right to request a copy of all personal data xs66 holds about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances, subject to applicable legal retention obligations.
• Right to Restriction of Processing: You have the right to request that xs66 restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.

Xs66 continuously invests in security infrastructure to ensure members' personal data is protected at the highest level. The security measures we employ include:

• End-to-end encryption: All data in transit is protected with TLS 1.3 protocol, while stored data is secured using AES-256 encryption.
• Two-factor authentication (2FA): Available to all xs66 members as an additional security layer for the login and withdrawal process.
• 24/7 Monitoring: An automated security monitoring system operates around the clock to detect and respond to cyber threats in real time.
• Internal access controls: Access to member personal data within xs66 staff is restricted based on the principle of least privilege — only staff who require access to perform their duties are permitted.
• Regular security audits: xs66 conducts regular security audits and penetration testing by independent security experts to identify and address any vulnerabilities.
• Data backups: Member data is automatically backed up daily to a secure, offsite location to ensure service continuity.

While xs66 takes all reasonable steps to protect your data, no security system is entirely perfect. We therefore encourage members to also take proactive measures to protect their accounts, including using strong passwords and enabling 2FA.

The xs66 platform is strictly for individuals aged 18 years and above. xs66 does not intentionally collect or process personal data from individuals under the age of 18.

If xs66 discovers that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe your child or a minor has registered an xs66 account, please contact us immediately at [email protected].

Xs66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable legal requirements, or improvements to the xs66 platform. The following outlines how we manage changes to this Policy:

• Any significant changes will be communicated to members via in-platform notifications on xs66 or through their registered email address at least 14 days before the changes take effect.
• The "Updated" date at the top of this page will always reflect the date of the most recent changes.
• Continued use of the xs66 platform after a change notice is deemed acceptance of the updated Privacy Policy terms.
• If you disagree with any changes made, you have the right to close your xs66 account by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how xs66 handles your personal data, please do not hesitate to contact us. The xs66 privacy team is committed to responding to every inquiry thoroughly and promptly.

You can reach us via live chat available on the xs66 platform, or by email at [email protected]. Our team is on duty 24 hours a day, 7 days a week and are ready to assist you with all matters relating to privacy and data security.

For more information on other xs66 policies and regulations, you may also refer to the Terms and Conditions and the FAQ xs66.