Privacy Policy

Privacy Policy xin77 — Data Protection & Information Security

Xin77 takes our responsibility to protect your personal information seriously. This document explains in detail how we collect, use, store, and safeguard your data at all times.

Updated: January 2026

Our Commitment

Six Core Pillars of xin77 Privacy Protection

Every aspect of data handling at xin77 is designed with player security and trust as the top priority.

Military-Grade Encryption

All data transmitted between your device and xin77's servers is protected with 256-bit SSL/TLS encryption. This ensures your personal and financial information cannot be intercepted or read by unauthorised parties.

Secure Data Storage

Your personal data is stored on servers protected by multiple layers of security, including firewalls, intrusion detection systems, and encrypted backups. Physical access to our servers is subject to strict controls.

Strict Access Control

Only specifically authorised xin77 staff may access players' personal data, and only to the extent required to carry out their duties. All access is logged and regularly audited by the internal security team.

No Data Sales

Xin77 has never and will never sell your personal information to any third party for marketing or commercial purposes. Your data belongs to you, and we only use it for the purposes you have consented to.

Full Transparency

We are committed to being transparent about how we handle your data. You will be notified in advance of any changes to this privacy policy, and you can always find out what data we hold about you.

Malaysia PDPA Compliance

All data handling practices at xin77 comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We continuously update our procedures to ensure full compliance with current and applicable legislation.

This Privacy Policy describes the privacy practices of xin77 and applies to all players using the xin77.pw platform. By registering or using our platform, you agree to the terms of this policy.

Introduction

Xin77 ("we", "Platform") respects the privacy rights of every player using our services at xin77.pw. This Privacy Policy is designed to clearly and transparently explain how we collect, process, store, protect, and in certain circumstances, disclose your personal information.

As a platform operating under Malaysian law, we are subject to and comply with the Personal Data Protection Act 2010 (PDPA). We also take proactive steps to ensure our data protection standards meet or exceed the requirements set by applicable legislation.

We encourage you to read this policy carefully. If you have any questions or concerns, feel free to reach out to our support team — we are always ready to help.

Information Collected

Xin77 collects several categories of information to provide a secure, efficient, and personalized experience to every player. Below is a breakdown of the types of data we collect:

Data Category Examples of Information Primary Purpose
Identity Data Full name, date of birth, identity card number KYC verification, legal compliance
Contact Data Email address, phone number, residential address Account communications, customer support
Financial Data Bank account details, e-wallet info, transaction history Deposit and withdrawal processing
Technical Data IP address, device type, browser, operating system Security, fraud detection
Usage Data Game history, login patterns, session duration Service improvement, responsible gaming
Communication Data Support chat records, emails, feedback Complaint resolution, quality improvement

2.1 Data You Provide Directly

The majority of information we hold is information you provided directly during the registration process, KYC verification, or when interacting with our support team. This includes account profile details, identification documents, and financial details required for payment processing.

2.2 Data Collected Automatically

When you use the xin77 platform, our systems automatically record certain technical information such as your IP address, browser type and version, pages visited, access times, and device information. This data is essential for detecting suspicious activity and ensuring the security of your account.

How We Use Your Data

Xin77 uses the information we collect for legitimate and necessary purposes in operating the platform. We do not use your data for any purpose outside the scope stated below:

  • Identity verification and KYC — to verify that every player is a legitimate individual who meets the minimum age requirement of 18 years.
  • Financial transaction processing — including deposits, withdrawals, and bonus payments related to your gaming activity.
  • Customer service delivery — to help you resolve any issues, inquiries, or complaints submitted to our support team.
  • Security and fraud prevention — to identify and block any attempted fraud, money laundering, or unauthorized access to your account.
  • Legal compliance — to fulfill our obligations under the PDPA, anti-money laundering laws, and other applicable regulations.
  • Platform enhancement — analyzing aggregated usage patterns to enhance the gaming experience and user interface.
  • Responsible gaming — monitoring gameplay patterns to identify players who may need support or intervention related to responsible gaming.
  • Platform communications — sending important notifications related to your account, security updates, and promotions you have agreed to receive.
You can manage your marketing communication preferences at any time through your account settings. However, security and account transaction communications cannot be disabled as they are essential to protecting your account.

Information Sharing

Xin77 does not sell, rent, or disclose your personal information to third parties for marketing purposes. However, in the course of operating the platform, we may need to share certain information with the following parties in limited and controlled circumstances:

  • Trusted payment processors — to facilitate deposit and withdrawal transactions you initiate. These processors are bound by strict confidentiality agreements and PCI-DSS compliance standards.
  • Game software providers — a minimum of technical data is shared with third-party game providers as necessary to ensure games function correctly within our platform.
  • Legal authorities — we will disclose information when required by a valid court order, law enforcement agency request, or a regulatory body with jurisdiction over our operations.
  • Auditors and professional advisors — external auditors, legal counsel, and consultants involved in platform security and compliance audits may access certain data under strict confidentiality obligations.

In all of the above data-sharing situations, we ensure that only the minimum necessary information is disclosed, and all recipient parties are bound by legally enforceable data protection agreements.

Cookies & Tracking Technologies

Xin77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze platform usage patterns. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies Used

  • Essential cookies — required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Performance cookies — collecting information on how visitors use the platform to help us improve the overall user experience.
  • Functional cookies — storing your preferences such as language, currency denomination, and display settings to deliver a more personalized experience.
  • Analytics cookies — helping us understand platform traffic and usage patterns on an aggregated, anonymized basis for service improvement purposes.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect platform functionality and your gaming experience.

Data Security

Protecting your data is xin77's highest priority. We have implemented a comprehensive range of technical and organisational security measures to ensure your information is always safeguarded:

  • 256-bit SSL/TLS encryption for all data communication between your browser and our servers.
  • Passwords are stored using irreversible one-way hashing algorithms.
  • Two-factor authentication (2FA) is available on all player accounts for an added layer of protection.
  • Round-the-clock 24/7 security monitoring by our in-house cybersecurity team.
  • Regular penetration testing conducted by independent third-party security firms.
  • Automated encrypted data backups to ensure service continuity.
  • Mandatory data security training for all staff handling player information.
While we take all reasonable precautions, no digital system can guarantee 100% absolute security. In the event of a data breach affecting your information, we will notify you within 72 hours as required by law.

Your Rights

Under Malaysia's PDPA and the xin77 privacy policy, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or outdated personal information in our records.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another service provider.

Right to Restriction

You may request a restriction on the processing of your data while any dispute regarding its accuracy or the validity of the processing is being resolved.

To exercise any of the rights above, please contact our data protection team by email at privacy@xin77.pw. We will process your request within 30 business days from the date of receipt. For more complex requests, this period may be extended up to 60 days, with prior notification to you.

Data Retention Period

Xin77 retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by applicable law. Specific retention periods are as follows:

  • Active account data — retained for the duration your account remains active plus 5 years after account closure for legal compliance purposes.
  • Financial transaction records — retained for a minimum of 7 years as required by Malaysia's financial and taxation laws.
  • KYC Documents — retained for 5 years after the end of the business relationship to fulfill anti-money laundering requirements.
  • Support communication logs — retained for 2 years for quality control and dispute resolution purposes.
  • Technical log data — retained for 12 months for security and fraud analysis purposes.

Once the retention period expires, your data will be securely deleted or permanently anonymised using established, audited data disposal procedures.

Third-Party Links

The xin77 platform contains links to support pages and content operated by third-party game providers integrated with our platform. This Privacy Policy applies only to data collected directly by xin77 and does not cover the privacy practices of those third parties.

We recommend reading the privacy policy of each third-party provider whose services you use through our platform. xin77 is not responsible for the privacy practices or content of any third-party websites or services that are not under our direct control.

Policy Changes

Xin77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Any material changes will be communicated to you via in-platform notification or email at least 14 days before they take effect.

The "Updated" date shown at the top of this document will always reflect the date of the latest revision. Your continued use of the xin77 platform after the effective date of any changes constitutes your acceptance of the latest version of this Privacy Policy.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

xin77 Data Protection Officer
Email: privacy@xin77.pw
General support: support@xin77.pw
Response time: 1–3 business days for standard privacy inquiries.

You may also file a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe your privacy rights have been violated and we have failed to address your concerns satisfactorily. For more information on responsible gaming and managing your account, visit the Responsible Gaming us.

Safe & Trusted Platform

Join xin77 — Your Privacy is Fully Protected

Play with peace of mind at xin77 — we protect every piece of your personal information with top-tier encryption. Register now and enjoy a safe, fair, and exciting gaming experience.

256-bit SSL Encryption Malaysia PDPA Compliance No data sales Secure & Safe KYC
Bahasa Melayu