xsmaster Privacy Policy: How We Handle Your Account Data
This Privacy Policy explains what data xsmaster collects when you access the lobby, create an account, or use local payment methods such as DANA, OVO, GoPay, and ShopeePay. We handle your information with care, and we are clear about what we collect, why we collect it, and how you can review or request changes to it. Availability of our services depends on local law and applies only in eligible regions.
Account data protected
Local payment privacy: DANA, OVO, GoPay
You control your records
Contact us to request changes
POLICY DETAILS
What Data xsmaster Collects and Why
When you open an account with us, we collect the details you provide during registration — your name, email address, and any account verification information required at that stage. When you make a deposit or withdrawal using DANA, OVO, GoPay, ShopeePay, or QRIS, we record the transaction reference and wallet identifier linked to that action. We do not store full payment credentials on our platform; payment processing is handled through the respective e-wallet or payment service. We also collect device and session data — such as the type of device you use, your browser session identifiers, and the pages you visit within the lobby. This helps us keep the account session secure and display content relevant to your region. Cookies and similar tools are used to maintain your login state and remember your lobby preferences between sessions. We retain your account data for as long as your account remains active or as required under applicable rules in your jurisdiction. When you close your account, we follow a structured retention schedule before deletion. You may ask us what data we hold at any point by contacting our support channel. All requests are handled in the order they are received, and we confirm receipt by return message.
DANA deposit reference
OVO wallet identifier
GoPay transaction record
ShopeePay payment log
QRIS session data
Account verification detail
POLICY SCOPE
Where This Policy Applies and What It Covers
This policy covers data collected directly through xsmaster — your account, your lobby sessions, and transactions you initiate here. It does not extend to third-party services you may link to or visit from our platform. Understanding the boundaries helps you know who is responsible for which part of your data.
Account Access
Data collected when you log in, update your profile, or change your account details is covered fully by this policy. This includes your registration information, session tokens, and any identity documents submitted through our account verification flow.
Transactions
Payment references created when you deposit or withdraw via DANA, OVO, GoPay, ShopeePay, or QRIS are recorded in your account wallet history. The payment service itself — the e-wallet or bank — operates under its own privacy terms, separate from ours.
Lobby and Game Sessions
Session data generated while you browse the lobby or open a game — such as session duration and game category accessed — is logged for security and service continuity. This data is not sold or shared with studios for marketing purposes.
Third-Party Services
Links to external sites, payment rails, or studio environments operate outside this policy's scope. Once you leave the xsmaster domain, the privacy practices of that third party apply. We are not responsible for how external services handle your data.
YOUR RIGHTS
Practical Actions You Can Take Under This Policy
You have a clear path to act on your data at any point while your account is active. To review the personal details we hold, log in and go to your account dashboard — the profile section displays your registered name, email, and linked wallet identifiers. If any detail is incorrect, you can update it directly from that screen, or contact support if the field is locked for verification reasons. If you want to raise a question about how your data is used — for example, why a certain session log appears in your record — send a message through our support channel with your account reference and the specific question. We respond to data queries in writing so there is a clear record on both sides. If you decide you want us to delete your account data, you can request this through support. We will confirm what can be deleted immediately and what must be retained under applicable rules before we process the request. No deletion is carried out silently — we notify you of each step.
Review Your Records
Log in and open your account dashboard to see the personal details, wallet identifiers, and transaction references we hold. The current state of your profile is shown there after login, not on a separate schedule.
Correct Account Details
Update editable fields directly in your profile. For fields locked during verification — such as your registered name or linked DANA wallet — contact support with your account reference to request a correction.
Raise a Data Question
Send your query via the support channel with your account ID and a clear description of what you want to know. Written responses mean you have a record of what was asked and how we answered.
Request Account Deletion
Submit a deletion request through support. We will outline which data can be removed immediately and which must be kept under applicable retention rules, then confirm each step before we act.
CONTACT PATHS
How to Reach Us About This Policy
For any privacy-related question — whether you want to review your data, correct a detail, or ask how a specific piece of information is used — the channels below connect you directly to the team that handles account and data requests. Include your account reference in every message so we can locate your record without delay.
Live Chat Support
Open the chat icon from any page while logged in. State your account reference and the privacy topic you want to discuss. Chat is the quickest path for straightforward data questions.
Email Data Request
For formal data review, correction, or deletion requests, send an email to our support address with your account reference, the type of request, and any relevant transaction or session detail you want us to check.
Account Dashboard
Many data actions — reviewing your profile, seeing your linked wallet records, and checking your session history — can be completed without contacting support at all. Log in and open your account dashboard first.
DATA HANDLING PRACTICE
How We Manage Data, Cookies, and Account Security
Our approach to data handling is built around keeping your information accurate, accessible to you, and stored only for as long as it serves a clear purpose. Cookies on the xsmaster platform maintain your login session and remember lobby preferences — they do not track your activity outside our domain. You can manage cookie settings through your browser, though disabling session cookies will affect your ability to stay logged in. Account security measures are in place at the login and transaction stages; the specific steps shown to you depend on your account state and device.
Cookie Use
We use session cookies to keep you logged in and to remember your lobby state between visits. Preference cookies store your display settings. Neither type tracks you across external sites or shares data with studios for advertising.
Account Security
Security checks at login and during wallet transactions are shown to you in real time within the account flow. We do not describe these steps in fixed detail here because they may change — follow the instructions displayed on your screen at each stage.
Data Retention
We keep your account data while your account is active. After closure, a retention period applies as required under the rules of your jurisdiction. You can ask us for the specific retention period applicable to your account by contacting support.
Who to Contact
Data handling questions — including requests to review, correct, or delete your records — go to our support team. Include your account reference and the specific action you want us to take. We confirm all data requests in writing.
POLICY FAQ
Common Questions About Your Privacy at xsmaster
These questions come up most often when members want to understand how their data is handled, what rights they have, and how to act on those rights through their account.
What personal data does xsmaster collect when I open an account?
We collect your registration details — name, email, and any verification information required at account creation. When you transact via DANA, OVO, GoPay, or ShopeePay, we record the wallet reference linked to that transaction. We do not store full payment credentials directly on our platform.
Does xsmaster share my data with game studios like Habanero or Spadegaming?
Studios such as Habanero and Spadegaming supply game content to our lobby. Session data related to game play is not passed to studios for marketing use. Studios receive only what is technically necessary to run the game session within the lobby environment.
How can I see what data xsmaster holds about my account?
Log in and open your account dashboard. Your profile section shows the personal details, linked wallet identifiers, and transaction references we hold. If you need a more detailed data summary, contact support with your account reference and we will provide one in writing.
Can I ask xsmaster to delete my account data?
Yes. Submit a deletion request through the support channel with your account reference. We will confirm which data can be removed immediately and which must be retained under applicable rules in your jurisdiction, then notify you of each step before we act.
How do cookies work on xsmaster, and can I turn them off?
We use session cookies to keep you logged in and preference cookies to remember your lobby settings. You can manage cookies through your browser settings. Disabling session cookies will affect your ability to remain logged in, so we suggest keeping them active while using your account.
Does this Privacy Policy apply to payments I make through QRIS or ShopeePay?
Our policy covers the transaction reference we record on our side — the log of your deposit or withdrawal in your account wallet history. The QRIS network and ShopeePay each operate under their own privacy terms for the payment processing side. Both parts apply to the same transaction.