xcashop Casino & Sportsbook Data Care

This page describes what we collect when you use xcashop and how we keep that data protected. Online gaming platforms process payment information, identity verification documents, and account activity records. These categories of data are sensitive — we take steps to secure them, limit who can access them, and use them only for the purposes you expect.

When you open an xcashop account, you provide personal information (name, date of birth, national ID number, email, phone). When you deposit or withdraw funds through DANA, e-wallet, mobile banking, local payment, or bank virtual accounts (online payment, e-wallet, mobile banking, local payment), we receive payment data from those providers. When you place bets on Liga 1 or esports markets, or play our live-dealer tables, we log that activity to your account. We use all this information to verify your identity, process your deposits and withdrawals, settle your bets, respond to support requests, and comply with legal obligations.

We do not sell your data. We do not share it with third parties for marketing. We share only what is necessary with payment processors, identity-verification partners, and support platforms to operate our service. Our servers may sit outside your jurisdiction, but we apply the same data protection standards regardless of location. This policy outlines what we collect, why, who can access it, and what rights you have over your own information.

What we collect on xcashop

We collect several types of information from xcashop users:

Identity data: Your full name, date of birth, national ID number, phone number, email address, and a government-issued ID photo plus a selfie holding that ID. We use this to verify your identity (KYC) and comply with anti-money-laundering regulations.
Payment data: When you deposit through QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank virtual accounts, we record the transaction details — amount, timestamp, payment method, and confirmation from the payment provider. We do not store your full card numbers or bank account numbers; those stay with your bank or e-wallet provider.
Account activity: We log every bet you place, every game session you join, every withdrawal request, and every balance change. This data helps us settle disputes, detect fraud, and provide account history in your xcashop dashboard.
Device and session data: We record your IP address, device type, browser version, and session duration when you log in. This helps us secure your account against unauthorized access and identify suspicious login patterns.
Support data: When you contact our support team, we record your inquiry, any screenshots or documents you attach, and our response. This data helps us improve our support and resolve future issues faster.

How we use your xcashop data

Our use of your data falls into five categories: account management, verification and compliance, payment processing, fraud prevention, and service improvement.

For account managementwe use your email, phone, and name to maintain your account, send you login links or password-reset codes, and notify you of deposits, withdrawals, and important changes to our service. For verification and compliancewe compare your ID documents against government databases and keep encrypted copies on file to comply with anti-money-laundering and Know-Your-Customer regulations. We are legally required to do this; we cannot process deposits or withdrawals without completing KYC.

For payment processingwe share relevant details with our payment partners (Fintech providers who handle mobile banking, local payment, online payment; banks that provide virtual accounts) so they can credit or debit your account. For fraud preventionwe monitor your account for unusual patterns — a withdrawal to a different payment method than your deposit, rapid large deposits followed by large withdrawals, or logins from multiple countries in one day. If we detect suspicious activity, we may hold your withdrawal pending investigation or ask for additional verification.

Data retention: We keep identity documents and KYC verification records for five years after your account closes. We retain payment transaction history for seven years to comply with financial regulations. We delete account activity logs after two years unless required to retain them for a legal investigation.

Third parties and xcashop data sharing

We share your data only with service providers who help us operate xcashop. These include payment processors (Fintech companies and banks), identity-verification platforms (third-party KYC services that match your documents against official databases), and support-ticket systems where our team logs your inquiries. Each third party is contractually bound to protect your data and use it only for the service we request.

We do not sell your data to marketing companies, advertisers, or data brokers. We do not share your betting history with sports leagues (Liga 1, Piala AFF, Champions League organizers) or game providers. We do not use your data for purposes other than running xcashop and complying with law. If we receive a legal request (subpoena, court order, or mandatory government disclosure) to share your data, we will do so only if we are legally required.

Your rights on xcashop

You have the right to request access to your personal data, correct inaccurate information, and request deletion of your data (subject to legal retention requirements). You can log into your xcashop account and download your transaction history, account details, and KYC documents at any time. If you want to request a copy of all data we hold about you, or correct or delete information, contact our support team through the help section in your account.

We will respond to data-access requests within 14 days. Correction requests are processed immediately. Deletion requests may be denied if we are legally required to retain the data (for example, KYC records must be kept for five years for anti-money-laundering compliance). You also have the right to object to certain uses of your data — for example, if you do not want us to use your email for promotional announcements, you can opt out in your account settings.

Account closure and data

If you close your xcashop account, we keep your data for the periods outlined above (KYC for five years, transactions for seven years) but stop using it for active account management. We delete promotional contact information immediately upon account closure.

Cookies and tracking on xcashop

We use cookies (small text files stored on your device) to keep you logged into your xcashop account, remember your language preference, and analyze how users navigate our platform. Session cookies expire when you log out; persistent cookies may remain for up to one year and let you log back in without re-entering your credentials.

We use a web analytics tool to count visits, track which pages are most popular, and understand how users move through our platform. This helps us improve the xcashop interface. We do not use cookies to track you across other websites or for targeted advertising. You can disable cookies in your browser settings, but doing so may make it harder to use our platform.

Data security on xcashop

We protect your xcashop data using encryption (HTTPS for data in transit, encryption at rest for stored data), access controls (only authorized staff can view sensitive information), and regular security audits. We do not store your password in plain text; we hash it using modern cryptographic algorithms. When you log in, your credentials are encrypted before being sent to our servers and verified against the hash — never displayed.

Payment data is handled by our payment partners; we do not store full card or bank account numbers. Identity documents (your ID photo and selfie) are encrypted and stored separately from your account credentials. We undertake to notify you within 24 hours if we discover a data breach that puts your personal information at risk.

Contact us about xcashop data privacy

If you have questions about this privacy policy, want to exercise your rights (access, correction, deletion), or believe we have mishandled your data, contact our support team through the help section in your xcashop account. You can also email our privacy team directly; we respond to privacy inquiries within 14 days. We keep records of all privacy requests and our responses.

Our services are available only where local law permits. If you are located in Jakarta, Surabaya, Bandung, Medan, or another supported region, and you use xcashop for sports betting (Liga 1, Piala AFF, Champions League markets), live-dealer games, slots, or esports markets, this privacy policy applies to your data. We protect your information with the same standards across all game categories and payment methods.

We may update this privacy policy from time to time. Changes take effect when we post the updated version on our website. Continuing to use xcashop after a privacy policy update means you accept the new policy. If a change materially affects how we use your data, we will notify you by email.