xshop Casino & Sportsbook Data Care
This page describes what we collect when you use xshop and how we keep that data protected. We at xshop process personal information to operate our platform — sportsbook markets on Liga 1, Piala AFF, Champions League, and other football tournaments; live-dealer tables including blackjack, roulette, baccarat, and Dragon Tiger; slot games; and esports markets. We handle your data carefully and transparently.
Our data practices centre on account security, payment processing, and regulatory compliance. When you create an xshop account, we collect your email, name, date of birth, phone number, and identity documents to verify your eligibility and prevent fraud. We store this information securely and use it only to operate your account, process deposits via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, and comply with applicable regulations.
This policy explains what data we collect, how we use it, who we share it with, and what rights you have over your information. We encourage you to read this carefully and contact us if you have questions about our practices.
What data we collect on xshop
We collect data in several categories. When you open an xshop account, we collect your email address, full name, date of birth, phone number, and your chosen username and password. We also collect identity documents — your Indonesian KTP, passport, or driver's license — to verify your identity and comply with Know Your Customer (KYC) regulations.
When you deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we collect transaction data including the amount, payment method, timestamp, and transaction reference number. We do not store your full payment credentials (card numbers or bank account details); instead, we tokenize them so that only a secure reference is retained on our servers.
When you use xshop, we collect behavioural data including your login history, game activity, wagers placed, game outcomes, account balance, and withdrawal requests. We use cookies and similar technologies to track your browsing activity on our platform. We collect your IP address and device information (browser type, operating system, device identifier) to detect fraud, prevent unauthorized access, and improve our service.
Key takeaways
- We collect account information (email, name, date of birth, documents) during signup
- We collect payment data when you deposit via mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or Indonesian banks
- We collect behavioural data including login history, game activity, and transactions
- We use cookies to track browsing and improve your xshop experience
- We collect IP address and device information for fraud prevention
How we use your data on xshop
We use your account information to operate your xshop account, verify your identity, and prevent fraud. Your email is used to send account confirmations, password resets, and support responses. Your phone number may be used to contact you about account security or transaction issues.
We use your payment data to process deposits and withdrawals. When you request a withdrawal, we send your verified payment method information to your chosen processor (online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet) to transfer funds back to you. We do not use your payment information for any purpose other than processing transactions on xshop.
We use your behavioural data to settle game outcomes, calculate your balance, detect fraud, prevent account abuse, and comply with applicable regulations. We analyze aggregate (anonymized) behavioural data to understand how our platform is used and to improve our service — for example, identifying which payment methods are most popular among users in Jakarta, Surabaya, Bandung, and Medan.
We use cookies to track your xshop session, remember your login preferences, and measure how you interact with our interface. These cookies are stored on your device and sent to our servers on each request. You can control cookies through your browser settings, but disabling them may impair your ability to use xshop.
Who we share your data with on xshop
We do not sell your personal data to third parties. We share data only where necessary to operate xshop or comply with law. Our payment processors (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment) receive your payment information to process your deposit and withdrawal requests. These processors maintain their own privacy policies, and we are not responsible for their data practices.
We may share your identity documents and account information with regulatory authorities or law enforcement if required by applicable law or court order. We may also share data with fraud prevention agencies to verify that your identity has not been flagged for suspicious activity.
We may engage third-party service providers — such as cloud hosting providers, email services, and analytics platforms — to support xshop operations. These providers process data on our behalf and are contractually required to keep your information confidential and use it only for the purposes we specify.
Your rights over your data on xshop
You have the right to access, correct, or delete your personal data on xshop. If you believe your account information is inaccurate, you can request that we correct it. If you wish to close your xshop account, you can request account deletion, and we will delete your personal data subject to legal retention requirements.
You have the right to withdraw your consent to certain uses of your data — for example, you can opt out of marketing communications by updating your notification preferences. However, we retain the right to process data necessary to operate your account and comply with regulations.
You have the right to data portability. Upon request, we can provide your personal data in a structured, machine-readable format so that you can transfer it to another service.
Cookies and tracking technologies on xshop
We use cookies to track your xshop session, remember your login, and analyze how you use our platform. Cookies are small text files stored on your device. When you visit xshop, our servers send cookies to your browser, and your browser sends them back on each request.
We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until you delete them or they expire). Session cookies are necessary to maintain your login and protect your account. Persistent cookies help us remember your preferences and track your behaviour across visits.
We may also use third-party cookies from analytics providers. These cookies help us understand how users navigate xshop and which features are most popular. You can control cookies through your browser settings — most browsers allow you to refuse cookies or alert you when a cookie is sent. Disabling cookies may impair your ability to use xshop.
Data retention and security on xshop
We retain your personal data only as long as necessary to operate your xshop account and comply with applicable regulations. Your account information is retained for the duration of your account. After you close your account, we retain certain data for fraud prevention and regulatory compliance purposes for a period determined by applicable law.
We protect your data through SSL encryption, firewalls, and access controls. All communication between your device and our servers is encrypted. Our servers are hosted on secure cloud infrastructure with redundancy and automatic backups. We conduct regular security audits and penetration testing to identify vulnerabilities.
We limit access to your data to employees and contractors who need it to operate xshop. All staff sign confidentiality agreements and receive training on data protection practices.
Data processing and international transfer
We at xshop process your data in jurisdictions where we operate. Our servers may sit outside your jurisdiction. By using xshop, you consent to the transfer of your personal data outside your country of residence, if applicable. We maintain standard data protection practices regardless of where your data is stored.
Changes to our privacy policy
We may update this privacy policy from time to time. When we make material changes, we will notify you by email or by displaying a notice on xshop. Your continued use of xshop after changes constitute your acceptance of the updated policy.
Contact us about your data
If you have questions about our privacy practices, wish to access your data, or want to exercise your data rights, contact our support team. We will respond to your request within a reasonable timeframe. Our xshop support team can assist with account-related questions, payment issues, and data privacy inquiries.
Trust and fairness on xshop
Platform security layers
We at xshop protect your account and payment information through multiple security layers. All communication between your device and our servers uses SSL encryption — the same standard employed by banks and payment processors worldwide. Your login credentials, payment details, and account history are encrypted both in transit and at rest on our servers.
We implement account-level security features including email verification during signup, KYC document review before your account is activated, and optional two-factor authentication for users who wish to add an extra layer of protection. When you log in from a new device or unfamiliar location, we may request additional verification to confirm your identity. These steps add minor friction, but they prevent unauthorized access to your account and funds.
Our payment integrations with DANA, OVO, GoPay, ShopeePay, LinkAja, QRIS, BCA, Mandiri, BRI, and BNI follow their respective security standards. We do not store your payment credentials directly on our servers. Instead, we tokenize them — we retain only a secure reference to your payment method, not the sensitive data itself. This architecture means that even if our systems were compromised, attackers could not extract your payment details.
We conduct regular security audits and penetration testing to identify vulnerabilities before they become exploitable. Our infrastructure is hosted on secure cloud providers with redundancy and automatic backup systems. If a service outage occurs, we restore from backups without data loss. We maintain detailed logs of all account activity, transactions, and security events for audit and compliance purposes.
Game fairness and RTP
Our live-dealer games (blackjack, roulette, baccarat, Dragon Tiger) are conducted by real dealers in professional studios. Outcomes are determined by physical processes — a real deck of cards, a real roulette wheel, real chips — not by algorithms or software manipulation. You watch the action unfold in real time via multi-camera broadcast. The outcome is determined by the cards dealt or the wheel's spin, not by programmed logic.
This differs fundamentally from our slot games, which use Random Number Generators (RNG). RNG is a mathematical algorithm that produces unpredictable sequences. Each spin is independent and has no memory of previous results. We do not adjust RNG behaviour based on player history, account balance, time of day, or any other factor. Our RNG-driven games are audited by independent testing laboratories to verify their randomness and fairness.
RTP (Return to Player) is a statistical measure of how much a game returns to players over a large number of plays. For example, a slot with returns an average of 96 cents per dollar wagered over thousands of spins. This does not mean you will win non-specific info of your bets — RTP is a long-term average across many plays. Individual sessions and player experiences vary widely.
Live-dealer games do not have a fixed RTP in the same way slots do, because outcomes depend on physical randomness rather than algorithms. However, the house edge on each game is mathematically fixed based on the rules (for example, the 0 pocket on roulette gives the house a fixed edge). This edge applies equally to all players and does not change based on your account status, play frequency, or any other variable.
KYC verification process
KYC (Know Your Customer) verification exists to prevent fraud, money laundering, and underage access. When you open an xshop account, we ask for your full name, date of birth, and phone number. We then request a photo of your identity document — Indonesian KTP, passport, or driver's license.
Our verification team reviews your document to confirm it is genuine, matches your personal information, and shows that your date of birth meets our eligibility requirements. We cross-reference your details against fraud databases to ensure your identity has not been flagged for suspicious activity elsewhere.
Typical review windows depend on submission volume. During peak periods — around Idul Fitri, Idul Adha, or major football tournaments like Piala AFF or Champions League finals — verification queues may lengthen. We process submissions in order of receipt and notify you via email once your identity is confirmed. Once verified, your account remains active unless you request changes to your personal information or payment method.
If we detect suspicious activity on your account — multiple failed login attempts, unusual withdrawal patterns, or flagged payment sources — we may request additional verification or temporarily restrict your account pending review. This protective measure safeguards your account security and maintains the integrity of our platform for all users.
User feedback and review channels
We encourage users to share feedback about their xshop experience. You can contact our support team via email or through the in-app messaging system. We read all feedback and use it to identify service gaps, improve our platform, and address individual concerns.
When reading reviews of xshop or any online platform, consider the source and context. Reviews posted on independent review sites, social media, or forums reflect individual user experiences — they are not verified by us and may be outdated, biased, or incomplete. A single negative review does not represent the experience of thousands of users, just as a single positive review does not guarantee your experience will match.
We do not fabricate or manipulate reviews. We do not pay users to post positive reviews or suppress negative ones. Our reputation is built on consistent service delivery, transparent policies, responsive support, and fair game mechanics — not on marketing hype or fake testimonials.
If you have a complaint or dispute about your account or a game outcome, our support team is available to investigate. We maintain records of all transactions, game outcomes, and account activity. If we made an error, we correct it. If a game was settled incorrectly, we review the evidence and adjust your account accordingly. This commitment to fairness and accountability is how we maintain user trust over time.