Xc40 Privacy Policy — User Personal Data Protection
Your privacy is our priority. This document clearly explains how xc40 collects, uses, stores, and protects the personal information of Malaysian users who register or use our platform.
What information does xc40 collect?
During registration, xc40 collects your full name, email address, phone number, and identification details required for identity verification and account security.
To process deposits and withdrawals in Malaysian Ringgit (RM/MYR), we collect payment method information such as FPX or TNG eWallet details. Full card numbers are not stored on our servers.
Xc40 automatically records technical information such as IP address, browser type, operating system, screen resolution, and access time to help detect suspicious activity and improve platform performance.
How is your information used?
Personal information collected by xc40 is used solely for legitimate and transparent purposes, including:
- Identity verification — To ensure every account is held by an eligible and verified individual in accordance with platform requirements.
- Transaction processing — To facilitate fast and secure MYR deposits and withdrawals.
- Account security — To detect and prevent unauthorised access, fraud, or account misuse.
- Customer support — To enable the xc40 support team to assist users with technical or account-related enquiries.
- Platform improvement — Anonymised usage data is analysed to improve platform design and functionality.
- Legal compliance — To meet reporting and compliance requirements set out under applicable Malaysian law.
Xc40 will not use your information for third-party marketing purposes without your explicit consent.
Cookies & Tracking
Xc40 uses cookies to enhance your experience on the platform. Cookies are small data files stored in your browser when you visit our site. They help the platform remember your language preference, login session, and other settings.
Types of cookies we use:
- Session Cookies — Automatically deleted when you close your browser.
- Persistent Cookies — Stored for a limited time to facilitate automatic login.
- Analytics Cookies — Used to understand platform usage patterns without identifying individual users.
You can manage or disable cookies through your browser settings. However, doing so may affect certain platform features.
Data Storage & Security
All xc40 user data is stored on servers protected with SSL encryption and strict access controls. Only authorised personnel may access user data, and all access is logged for audit purposes.
Data retention periods depend on operational needs and applicable legal requirements. Account information that has been inactive for a specified period may be archived or deleted in accordance with xc40's internal policy.
While we take reasonable security measures, no online system can guarantee complete protection. Users are encouraged to use strong passwords and never share their login credentials with anyone.
When is your information shared with third parties?
Xc40 does not sell, rent, or disclose users’ personal information to third parties for commercial purposes. However, there are limited situations where information sharing may occur:
- Payment Processors — Transaction information is shared only with authorized payment processors (such as FPX) to complete financial transactions.
- Legal Requirements — xc40 may disclose information if required by courts, regulatory bodies, or Malaysian authorities.
- Platform protection — Information may be shared with security authorities to investigate suspected fraudulent activity or violations.
In all cases above, xc40 ensures only the minimum necessary information is shared and is subject to appropriate confidentiality agreements.
Your rights as an xc40 user
You have the right to request a copy of the personal data we hold about you. Requests can be submitted via xc40's support email and will be processed within a reasonable timeframe.
If any information we hold about you is inaccurate or out of date, you may request a correction at any time. Certain updates can be made directly through your account profile settings.
You may request deletion of your account and associated personal data. Such requests are subject to any outstanding account balance and data retention requirements mandated by law.
Xc40 reserves the right to update this Privacy Policy at any time. Any significant changes will be notified to users via the platform. Continued use after updates are published is taken as acceptance of the revised policy.
For any enquiries regarding your personal data, or to submit a request for access, correction, or deletion, please contact the xc40 team at [email protected]. We also provide answers to common questions on the FAQ us.
Effective date: January 2026
Have questions about privacy or how to use the platform?
Check the FAQ page for quick answers, or reach out to us directly. You can also register an account and start your xc40 experience today.