xoso66 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights you hold as a data subject under applicable data protection frameworks.
Six principles that define how xoso66 handles every piece of personal information entrusted to us.
We collect personal data only on the basis of your consent, contractual necessity (account operation), legal obligation (KYC/AML compliance), or legitimate interest — never arbitrarily.
Data collected for one purpose is not repurposed without your explicit consent. We use registration data to run your account, not to build marketing profiles for external parties.
We request only the minimum data necessary for each processing purpose. If we can achieve something with less information, we do — including anonymisation and aggregation where appropriate.
We maintain reasonable procedures to keep personal data accurate and up to date. You can update your account information at any time by contacting support.
All data is stored in secured infrastructure with access restricted to authorised personnel on a strict need-to-know basis. We employ encryption at rest and in transit.
xoso66 takes full responsibility for data processed on its behalf, including by third-party service providers. We maintain data processing agreements with all partners who access personal data.
xoso66 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at xoso66.lat and any associated interfaces. We understand that the personal data you share with us is sensitive and that your privacy is of paramount importance, particularly in the context of online gaming and financial transactions denominated in Malaysian Ringgit (MYR).
This Privacy Policy ("Policy") describes in detail how xoso66 collects, processes, stores, discloses, and protects the personal data of individuals who register for an account, use the platform, contact our support team, or otherwise interact with our services. This Policy applies to all users of the xoso66 platform, including players registered from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia.
This Policy should be read in conjunction with our Terms & Conditions, which govern your overall use of the xoso66 platform.
For the purposes of this Policy, the following terms carry the meanings assigned below:
xoso66 acts as the Data Controller for all personal data collected through the platform at xoso66.lat. As Data Controller, xoso66 is responsible for determining the purposes for which personal data is processed, and for ensuring that all such processing is conducted in accordance with applicable data protection standards.
For all privacy-related queries, data access requests, or complaints, the Data Controller may be contacted via:
xoso66 collects personal data across the following categories, depending on your level of interaction with the platform:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, MyKad / passport number, photograph | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, phone number, residential address | Account communication, support, security alerts |
| Financial Data | Bank account details, eWallet identifiers (Touch 'n Go, Boost, GrabPay), FPX transaction references, BTC/USDT wallet addresses | Deposit and withdrawal processing in MYR, AML compliance |
| Technical Data | IP address, browser type, device fingerprint, operating system, session tokens | Security, fraud prevention, platform optimisation |
| Usage Data | Login timestamps, games played, bets placed, session duration, feature interactions | Platform improvement, responsible gambling monitoring, personalisation |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer service, dispute resolution, quality assurance |
| Marketing Preferences | Opt-in / opt-out status for promotional communications, preferred game types | Consent-based marketing, loyalty programme management |
xoso66 collects personal data through the following means:
xoso66 processes personal data on the following legal bases:
xoso66 uses collected personal data for the following specific purposes:
xoso66 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following limited circumstances:
xoso66 operates a platform that may involve the transfer of personal data to service providers located outside of Malaysia. Where such transfers occur, xoso66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law and international best practices.
These safeguards may include contractual clauses requiring the recipient to treat personal data with a level of protection consistent with this Policy, and limiting the recipient's use of data to the specific service being provided.
For information about the specific safeguards applicable to a particular international transfer, please contact [email protected].
xoso66 retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. The following general retention guidelines apply:
Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in a manner that prevents re-identification.
xoso66 uses cookies and similar tracking technologies (including session tokens, local storage, and pixel tags) on its platform. These technologies serve the following purposes:
You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may limit the functionality of the xoso66 platform. We do not use third-party advertising cookies or share cookie data with advertising networks.
As a data subject whose personal data is processed by xoso66, you hold the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Rights Request". We will respond within 30 calendar days of a verified request.
Request a copy of the personal data xoso66 holds about you, along with information about how it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that we restrict processing of your data while a rectification request is pending or while you contest our legal basis for processing.
Request a machine-readable copy of the personal data you have provided to us, for the purpose of transferring it to another service provider.
Object to processing based on legitimate interest or for direct marketing purposes. Marketing opt-outs are processed within 10 business days.
The xoso66 platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
As part of our registration and KYC process, all account holders are required to verify their age by submitting a valid government-issued identity document. Any account found to belong to a person under the age of 21 will be immediately closed, all winnings forfeited, and any real-money deposits returned after completion of verification procedures.
xoso66 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:
While we take every reasonable precaution to protect your data, no online system is completely immune to security risks. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us promptly at [email protected] if you suspect any unauthorised access to your account.
xoso66 reserves the right to update, modify, or replace this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — we will provide reasonable notice to affected users via email or a prominent notice on the platform prior to the changes taking effect.
Where changes are administrative in nature (such as updates to contact details or editorial corrections), they may take effect immediately upon publication. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Your continued use of the xoso66 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting [email protected].
For all privacy-related enquiries, data subject rights requests, complaints, or questions regarding this Privacy Policy, please contact the xoso66 Privacy Team using the details below. We are committed to responding promptly and transparently.
For matters related to responsible gambling tools and self-exclusion, please visit our Responsible Gambling page. For general platform rules, please review our Terms & Conditions.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions. The version published on this page constitutes the current operative Privacy Policy for the xoso66 platform.
We take your data protection seriously — the same way we take responsible gambling seriously. Join thousands of Malaysian players who trust xoso66 for fair gaming and transparent policies.
For players aged 21 and above only. Please gamble responsibly.