Reference

How we protect your account and privacy

When you open an account with xl88, your personal details, payment information and gaming history stay secure and private.

Account data encryptedPayment details protectedYour rights explained
xl88 How we protect your account and privacy
REACH OUR PRIVACY TEAM

Contact us about your privacy

Team online

Live Chat

Open the chat window in the bottom-right corner of your account. Our team answers privacy questions in real time, Monday to Sunday, 08:00 to 23:00 local time.

Email Support

Write to [email protected] with your question or data request. Include your account username so we can verify your identity. Replies arrive within 24 hours.

Account Settings

Log in to xl88, go to Settings > Privacy & Data. You can view what we hold, request a data copy or ask us to update incorrect details without leaving your account.

HOW WE KEEP YOUR DATA SAFE

Our data handling practices

Encryption

All data sent between your device and xl88 travels through SSL encryption. Your payment details never sit in plain text on our servers. When you enter DANA, OVO, GoPay or QRIS details, they are encrypted immediately.

Access Control

Only authorised staff see your full name and payment details, and only when needed to verify a withdrawal or investigate an account issue. Our team works under strict confidentiality rules.

Cookies and Tracking

We use cookies to keep you logged in and to remember your gameplay preferences. These cookies expire after inactivity. You can clear them anytime in your browser. We do not track you across other websites.

Data Retention

Your account data is kept for the life of your account. After you close your account, we retain records for five years if local law requires it, then delete them. Withdrawal and payment records stay longer for tax and fraud purposes.

Third-Party Sharing

We share only what is necessary with payment processors (DANA, OVO, GoPay, QRIS), anti-fraud services and legal authorities where local law permits. We never sell or share your gaming history.

Changes to This Policy

If we update this privacy policy, we'll notify you by email and in-account message 30 days before the change takes effect. You can request a summary of what changed or ask questions in live chat.

Frequently asked questions about your privacy

Yes. Log into your account, go to Settings > Privacy & Data, and select 'Download My Data'. We'll send a complete file of everything we store in 7 business days. You can also ask our support team via live chat for a summary anytime.

Only xl88's payment verification team sees the last four digits of your payment method to confirm deposits and withdrawals. Full payment details stay encrypted on our server. The payment processor (DANA, OVO, GoPay or QRIS) handles only the transaction itself; they do not see your account balance or game history.

Withdrawal records stay in our system for seven years to meet tax and regulatory requirements where local law permits. Your account profile and gaming history are retained for five years after closure, then deleted. You can request deletion sooner by contacting [email protected].

Your account becomes inactive immediately. We stop using your data for marketing or gameplay. Personal details are anonymised after 30 days unless a dispute or withdrawal is pending. Payment records stay longer for compliance. You can request full deletion by writing [email protected] with your username and reason.

No. Our cookies work only on xl88.bet to keep you logged in and to remember your settings. We do not set tracking pixels on other websites or share cookie data with third parties. Clear your browser cookies anytime without affecting your account.

Yes. Go to Settings > Account Details in your dashboard to update your phone number, email or address. Name and ID details require verification — contact live chat and we'll guide you through the process. Changes take effect immediately after confirmation.

Start with our support team via live chat (Monday–Sunday, 08:00–23:00) or email [email protected]. If you believe we've mishandled your data or violated this policy, describe the issue and we'll investigate within five business days. Where local law permits, you may escalate to your local data authority.