Information We Collect
During registration, xc40 collects your full name, email address, phone number, date of birth, and identification details required for identity verification. This information is used solely for account management and platform regulatory compliance.
We automatically record technical information including device type, operating system, browser version, IP address, time zone, and screen resolution. This data helps us optimise the platform experience for both mobile and desktop users across Malaysia.
Transactions on xc40 are conducted in Malaysian Ringgit (RM). We record deposit and withdrawal information, including the payment method used, transaction amount, and transaction time. Full bank account numbers or e-wallet details are not stored by xc40 — all processing is handled through secure payment gateways.
We collect usage data such as pages visited, session duration, games played, and bets placed. Cookies are used to identify login sessions, save preference settings, and analyse usage patterns for the purpose of platform improvements.
How We Use Your Information
Xc40 uses the information collected for the following purposes, which are lawful and necessary for the operation of the platform:
- Identity Verification & Account Security — ensuring that only verified account holders can access our services.
- Processing of deposits and withdrawals — facilitating financial transactions in Malaysian Ringgit (MYR) securely and accurately.
- Service delivery — enabling access to Sports Betting, cricket, jackpot, Live Casino, and relevant promotions.
- Platform Communications — sending transaction notifications, promotional updates, and important account security information.
- Platform improvements — analysing usage patterns to enhance the experience for both mobile and desktop users.
- Legal compliance — meeting applicable regulatory compliance requirements for the platform's operations in Malaysia.
Xc40 does not use your information for any purpose beyond the scope stated above without your prior consent.
Cookies & Usage Tracking
Xc40 uses session cookies and persistent cookies to keep the platform running smoothly. Session cookies are automatically deleted when you close your browser, while persistent cookies help us recognise returning users and remember your language preferences and display settings.
You can control or block cookies through your browser settings at any time. Please note, however, that some platform features — such as staying logged in and saved preferences — may not function correctly if cookies are fully disabled.
We do not use third-party cookies for external advertising. All tracking data is used internally solely to improve the user experience on the xc40 platform.
Data Storage & Security
All xc40 user personal information is stored on servers protected with industry-standard encryption. Access to user data is restricted solely to staff who require it to carry out their legitimate duties.
The technical security measures we implement include:
- Data encryption in transit using HTTPS/TLS protocols
- Password protection through irreversible hashing
- Two-factor authentication for sensitive account logins
- Continuous account activity monitoring to detect suspicious access
- Regular security audits by the internal technical team
While we take every reasonable step to protect your data, no system can be guaranteed 100% secure. Users are encouraged to use strong passwords and to never share their login credentials with anyone.
- Active account data: retained for as long as the account remains active
- Transaction data: minimum 7 years for regulatory compliance
- Session logs: 90 days
- Closed accounts: data deleted within 30 days after the minimum retention period
Sharing Information with Third Parties
Xc40 does not sell, rent, or share users' personal information with third parties for marketing purposes. Information is only shared in the following limited circumstances:
Transaction information is shared with approved payment service providers solely for the purpose of processing deposits and withdrawals in RM.
Information may be disclosed to the relevant authorities if required by law or a valid court order.
Technology providers that support platform operations are bound by strict confidentiality agreements and are not permitted to use the data for their own purposes.
User Rights Over Personal Data
As an xc40 user, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you at any time.
If your information is inaccurate or out of date, you may request a correction through your account settings or by contacting customer support.
You may request the deletion of your account and related data, subject to minimum retention periods required by law.
You may withdraw your consent to marketing communications at any time through your account notification settings.
To exercise any of the above rights, please contact the xc40 support team via email: [email protected]. Requests will be processed within 14 working days.
Policy Changes & How to Contact Us
Xc40 reserves the right to update this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or how the platform operates. Any material changes will be communicated to registered users via in-platform notifications or email at least 7 days before the changes take effect.
Continued use of the xc40 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage users to review this page periodically to stay informed of the latest updates.
If you have any questions, concerns, or complaints regarding the privacy of your data on the xc40 platform, please contact us:
- Email: [email protected]
- FAQ Page: xc40 FAQ
- Terms Page: Terms & Conditions
Your Data Is Safe with xc40
We are committed to protecting the privacy of every Malaysian user. Register an account today or visit our FAQ for answers to common questions about privacy and account security.