xcash Platform Privacy Notice

This page describes what we collect when you use xcash and how we keep that data protected. When you open an account on our platform, we collect your email address, password, and identity documents for KYC verification. We also record your account activity — deposits, withdrawals, game play, and betting history — so we can maintain your balance, process your transactions, and comply with our obligations.

We treat your data with care. Your password is hashed and never stored in plain text. Your identity documents are encrypted. Your account balance and transaction history are logged securely. We do not sell your information to third parties, and we do not share it beyond what is necessary to run our platform and process your payments.

This privacy notice explains what we collect, how we use it, who may access it, and what rights you have. It applies to all users of xcash across our mobile app, browser interface, and all supported payment methods including DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers via mobile banking, local payment, online payment, and e-wallet.

What Data We Collect on xcash

Account Information

We collect your email address, password, and username when you register. Your password is hashed using industry-standard encryption; we never see it in plain text after you create it. Your username appears in your account profile and in our support tickets if you contact us.

We also collect your identity information during KYC verification: your full name, date of birth, identity card number or passport number, and a photo of your document. We store this information encrypted on our servers. Our compliance team accesses it to verify your identity; once verified, we archive it securely and restrict access to authorized personnel only.

Transaction and Activity Data

We log every deposit, withdrawal, game play, and bet you make on xcash. This includes the amount, currency, payment method, timestamp, and outcome. For deposits, we record whether you used QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank account, and we keep a reference number from your payment provider. For withdrawals, we record your destination payment method and the status of your request.

We maintain this log so we can update your balance in real time, provide you with account statements, detect fraud, and comply with our legal obligations. You can access your full transaction history anytime in your xcash account settings.

Account data

Email, password (hashed), username, and KYC identity documents (encrypted).

Transaction data

Deposits, withdrawals, amounts, payment methods, timestamps, and outcomes.

Activity log

Game play, bets, results, and account login history on mobile and browser.

Support tickets

If you contact our team, we keep records of your inquiry and our response.

Device and Usage Data

Our xcash app and browser collect data about your device — your operating system (Android or iOS), browser type, IP address, and general location (city level, not precise GPS). We use this to detect suspicious login attempts, prevent fraud, and optimize our platform performance. We do not track your precise location, and we do not use your device data for marketing.

We also log when you log in, which games you play, how long you spend on each section, and which features you use most. This helps us understand how our platform is being used and where we should improve stability or interface design.

How We Use Your Data and Who Can Access It

Our Use of Your Information

We use your data to operate xcash. Your email and password let us authenticate you when you log in on mobile or browser. Your KYC documents verify your identity so we can comply with regulatory requirements. Your transaction data lets us process deposits and withdrawals, maintain your balance, and provide you with account statements.

We also use your data to detect fraud. If we see unusual activity — multiple failed login attempts from different cities, a withdrawal request to a new payment method minutes after an account compromise — we flag it and may ask you to re-verify your identity via email. This protects your account.

Third Parties and Payment Processors

Our payment processors receive your transaction data. When you deposit via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or a bank account (mobile banking, local payment, online payment, e-wallet), we send your payment details to the respective provider. They process the transaction and report the status back to us. We do not store your payment credentials — mobile banking or bank account details are held by the payment provider, not by xcash.

Our compliance and anti-fraud partners may also access your KYC documents and transaction history to verify that our platform operates within legal requirements. These partners sign confidentiality agreements and access your data only for the stated purpose.

Data Storage and Jurisdiction

We store your data on encrypted servers. Our primary data center is located outside Indonesia, which means your data may be processed in a different jurisdiction than where you live. By using xcash, you consent to this cross-border data transfer. Our servers maintain the same encryption and security standards regardless of their physical location.

If you request access to your data, deletion of your account, or a copy of your transaction history, we handle these requests within our standard review window. You can contact us via email or in-app chat to initiate a data access request.

We keep your account data encrypted and compartmentalized. No single team member has access to all your information without authorization.

Your Rights on xcash

You have the right to access your data anytime. Log into your xcash account and navigate to Account Settings to view your profile information, transaction history, and device login log. You can also request a full data export by contacting our support team.

You have the right to correct your information. If your email or identity details are wrong, you can update them in your settings or contact our team for assistance with KYC re-verification.

You have the right to object to processing of your data. If we use your transaction data for fraud detection and you disagree, you can contact us to discuss alternatives. However, we may continue certain processing if required by law.

Cookies and Tracking

Our xcash platform uses cookies to remember your login session and language preference. These are essential for the platform to function. We do not use cookies for advertising or behavioral tracking. You can disable non-essential cookies in your browser settings without affecting your ability to use xcash.

Security Breaches and Incidents

If we discover a security breach that compromises your data, we notify you via email within our standard notification window. We also inform relevant authorities if required by law. We do not wait for permission to secure your account — if we suspect a breach, we reset your password and ask you to re-authenticate.

Contact and Rights Clarification

Our xcash support team is available during business hours via email or in-app chat. If you have questions about your privacy, how we use your data, or how to exercise your rights, you can reach us anytime. We respond within our standard window and provide clear explanations of our data practices.

Our xcash service is available only where local law permits. We do not offer our services in jurisdictions where online gaming is prohibited. Users are responsible for verifying that access and use comply with their own jurisdiction's law. This privacy notice reflects our practices in supported jurisdictions; local laws may impose additional requirements that we follow within each region where we operate.

We update this privacy notice when our practices change. If you use xcash across multiple cities — Jakarta, Surabaya, Bandung, Medan — this policy applies consistently. Whether you deposit via DANA, e-wallet, mobile banking, or a bank account, your data is handled with the same encryption and care. Whether you access xcash during Idul Fitri, Idul Adha, Imlek, or any other time, our data protection standards remain constant.