Privacy Policy

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "xn888", "we", "us", "our" refers to the operator of the xn888 Platform at https://xn888.cam and any of its affiliated entities involved in the delivery of the Platform's services.
• "Platform" means the xn888 website, mobile-optimized interface, and any related digital services made available at https://xn888.cam.
• "User", "you", "your" means any individual who visits, registers on, or otherwise interacts with the xn888 Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial information, and behavioral or technical data associated with your Account.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, xn888.
• "Processor" means any third-party entity that Processes Personal Data on behalf of xn888 under a written data-processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process mandated under xn888's licensing obligations.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics, and personalization features.
• "IDR" / "Rp" means Indonesian Rupiah, the transactional currency of the xn888 Platform.

xn888 is an internationally licensed online gaming and sports-betting platform operating at https://xn888.cam. Our primary user base is located in Indonesia, with strong representation across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Palembang, and Makassar. We accept deposits and process withdrawals exclusively in Indonesian Rupiah (IDR) via local bank channels — including BCA, BRI, BNI, Mandiri, CIMB Niaga, and BSI (Bank Syariah Indonesia) — and e-wallets including DANA, OVO, GoPay, ShopeePay, and LinkAja.

xn888 acts as the Data Controller in respect of Personal Data collected and processed through the Platform. If you have any questions about our data practices or wish to exercise any of your rights under applicable data protection law, please contact us using the details set out in Clause 16 of this Policy.

xn888 collects only the Personal Data that is necessary to deliver a secure, compliant, and high-quality betting and gaming experience. The categories of Personal Data we collect are as follows:

xn888 collects your Personal Data through the following channels:

• Directly from you: When you register an account, complete the KYC process, make a deposit or withdrawal, contact our support team, or update your account settings, you provide Personal Data directly to us.
• Automatically: When you visit or interact with the xn888 Platform, technical and usage data is collected automatically via server logs, Cookies, and similar tracking technologies. This includes data about the device and network you use to access the Platform.
• From third-party payment providers: When you initiate a deposit or withdrawal via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, DANA, OVO, GoPay, ShopeePay, or LinkAja, we receive transaction confirmation data from those providers necessary to credit or debit your account balance.
• From identity verification services: Where we use licensed third-party KYC providers to verify the authenticity of identity documents, those providers may return verification results and risk scores to xn888. We do not receive the raw document data directly from the provider's systems beyond what you have submitted to us.
• From fraud prevention and security services: xn888 uses specialist fraud-detection tools that may cross-reference your Technical Data against known fraud databases. We receive risk indicators and flags, not raw third-party personal data.

xn888 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and xn888 — including account registration, processing deposits and withdrawals in IDR, settling bets, applying bonuses, and delivering customer support.
• Legal obligation: Processing necessary for xn888 to comply with applicable legal and regulatory requirements, including KYC verification, anti-money-laundering (AML) controls, and record-keeping obligations under our gaming licence.
• Legitimate interests: Processing that serves xn888's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, product improvement, and internal analytics.
• Consent: Where xn888 relies on your consent as the legal basis for processing — for example, sending you optional promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Contact our support team to manage your consent preferences.

xn888 uses the Personal Data we collect for the following purposes:

• Account management: Creating and maintaining your xn888 account, authenticating your identity at login, and managing account settings and preferences.
• KYC and age verification: Verifying that you are at least 21 years of age and that the identity information you have provided is accurate and genuine, in compliance with our licensing obligations.
• Payment processing: Processing deposits and withdrawals in IDR via your chosen local bank or e-wallet, reconciling transactions, and maintaining accurate financial records.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and unauthorized access to the Platform.
• Responsible gaming: Monitoring betting behavior for indicators of problem gambling, enforcing self-exclusion requests, applying deposit and wagering limits, and providing responsible-gaming alerts and interventions.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and improving the quality of our support services.
• Platform improvement: Analyzing usage data to understand how Users interact with the Platform, identify technical issues, and develop new features and products that better serve Indonesian players.
• Personalization: Tailoring the Platform experience based on your preferences and betting history, including surfacing relevant sports markets (such as BRI Liga 1, EPL, or La Liga) and game categories relevant to your usage patterns.
• Marketing communications: Where you have opted in, sending you promotional offers, bonus notifications, and tournament announcements. You may opt out of marketing communications at any time.
• Legal and regulatory compliance: Meeting our obligations under applicable gaming, AML, data protection, and financial-services regulations, including maintaining records as required by our licensing authority.

xn888 does not sell, rent, or otherwise trade your Personal Data. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors and banking partners: To facilitate deposits and withdrawals, we share necessary transaction data with your chosen payment provider (e.g., BCA, BRI, BNI, Mandiri, DANA, OVO, GoPay, ShopeePay). These providers act as independent data controllers for their own services and are subject to their own privacy policies.
• KYC and identity verification providers: Licensed third-party identity verification services receive copies of your submitted identity documents to perform automated and manual verification checks. These providers are bound by strict data-processing agreements with xn888.
• Game and platform technology providers: To deliver the gaming experience, certain technical data (such as your session token, game session ID, and account balance) is shared with our licensed game studio and platform technology partners, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers are licensed operators in their own right and process only the minimum data required for game delivery.
• Fraud prevention and security services: We share Technical Data and risk indicators with specialist fraud-detection and cybersecurity providers to protect the integrity of the Platform and all its Users.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, xn888 may disclose Personal Data to competent authorities. We will notify you of any such disclosure to the extent permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of xn888's business, Personal Data held by xn888 may be transferred to the relevant acquirer, subject to equivalent data-protection protections being put in place. We will notify registered Users of any such change in data controller.

xn888 uses Cookies and similar tracking technologies to operate and improve the Platform. The following categories of Cookies are in use:

• Strictly necessary Cookies: These are essential for the Platform to function. They enable core features such as user authentication, session management, and security controls. These Cookies cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: These remember your preferences — such as language settings, preferred sports market display order, and responsible-gaming tool configurations — to provide a more personalized experience across sessions.
• Analytics Cookies: These collect aggregated, anonymized data about how visitors use the Platform, including pages visited, time on page, and navigation paths. This information helps us identify usability issues and prioritize product improvements.
• Security Cookies: These assist in fraud detection and prevention by helping us identify unusual session behavior, bot activity, and multi-accounting attempts.

You can manage Cookie preferences through your browser settings. Disabling analytics or functional Cookies will not prevent you from using the Platform, but may affect certain personalization features. Disabling strictly necessary Cookies may prevent you from logging in or using certain Platform features.

xn888 retains your Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, Personal Data is securely and irreversibly deleted or anonymized in accordance with xn888's internal data destruction procedures.

As a data subject, you have the following rights in respect of your Personal Data held by xn888. These rights are subject to certain legal limitations and exemptions, particularly where processing is required to fulfil our licensing or AML obligations.

To exercise any of these rights, please contact xn888 at [email protected]. We will respond to all valid requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days with notice. We do not charge a fee for exercising your rights, except where requests are manifestly unfounded or excessive.

xn888 operates globally and may store or process your Personal Data on servers located outside of Indonesia. Where Personal Data is transferred to a jurisdiction that does not provide an equivalent level of data protection, xn888 ensures that appropriate safeguards are in place, which may include:

• Standard Contractual Clauses (SCCs) or equivalent data-transfer mechanisms approved under the relevant licensing jurisdiction's data protection framework.
• Binding corporate rules where data is transferred between entities within the xn888 group.
• Transfer to jurisdictions that have been assessed as providing adequate data protection under applicable law.

All third-party Processors who receive your data in connection with payment processing (including transfers to the systems of BCA, BRI, BNI, Mandiri, DANA, OVO, GoPay, and ShopeePay) operate under their own regulatory frameworks. Data shared with these providers is subject to their respective privacy policies and Indonesian banking regulations.

The xn888 Platform is strictly for adults aged 21 years and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process and is enforced for all users seeking to deposit funds or place bets on the Platform.

xn888 also recommends that adults who share devices with minors make use of parental-control software and ensure that xn888 account credentials are not accessible to underage household members. Our Responsible Gaming page provides further guidance on protecting minors from accessing gambling platforms.

xn888 implements a comprehensive suite of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or alteration. Our security framework includes:

• Encryption in transit: All data transmitted between your device and xn888 servers is encrypted using 256-bit SSL/TLS protocols. HTTPS is enforced across all Platform endpoints.
• Encryption at rest: Sensitive Personal Data, including financial records and KYC documents, is encrypted at rest using AES-256 encryption on our data storage infrastructure.
• Access controls: Access to Personal Data within xn888's internal systems is restricted to authorized personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all systems containing Personal Data.
• Penetration testing: xn888 conducts regular third-party penetration testing and vulnerability assessments of the Platform to identify and remediate security weaknesses before they can be exploited.
• Fraud detection systems: Automated fraud-detection tools monitor all account activity in real time, flagging unusual behavioral patterns, multi-accounting attempts, and suspicious transaction flows for human review.
• Incident response: xn888 maintains a documented data breach response plan. In the event of a confirmed breach affecting your Personal Data, we will notify affected users and relevant supervisory authorities within the timeframes required by applicable law.

While we take all reasonable technical and organizational precautions, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your xn888 account credentials. Do not share your password with any third party, and contact us immediately at [email protected] if you suspect unauthorized access to your account.

The xn888 Platform may contain references to or integrations with third-party services, including payment providers (BCA, BRI, BNI, Mandiri, DANA, OVO, GoPay, ShopeePay, LinkAja) and game studio platforms (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft). When you interact with these third-party services, you are subject to their own privacy policies, which operate independently of this Privacy Policy.

xn888 is not responsible for the privacy practices or content of any third-party service. We recommend reviewing the privacy policy of any third-party service you use in connection with your xn888 account before providing them with your personal information.

xn888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

Where changes are material — for example, if we introduce a new category of data processing or a new third-party sharing arrangement — we will provide reasonable advance notice to registered Users via the email address associated with their account, and by publishing a prominent notice on the Platform.

Your continued use of the xn888 Platform following the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure by contacting our support team.

We recommend bookmarking this page and reviewing it periodically, particularly if you are an active xn888 user. Archived versions of prior Privacy Policies are available upon request by emailing [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xn888 handles your Personal Data, please contact our Data Protection team using the details below:

When contacting us about a data subject rights request, please include your registered email address and a clear description of your request so we can locate your account and respond efficiently. We may ask for additional verification to confirm your identity before processing the request — this is to protect your data from unauthorized disclosure.

If you are not satisfied with how xn888 has handled your data or responded to your request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.