xsmn Privacy Policy

This page describes what we collect when you use xsmn and how we keep that data protected. We at xsmn operate an online entertainment platform serving users in supported jurisdictions. Our privacy approach balances account security, payment processing, and user transparency—every data practice we undertake is documented here.

When you create an account, deposit via DANA or e-wallet, or place a bet on Liga 1 or a live-dealer table, we collect certain information. We do not sell your data to third parties. We do not use your personal details for marketing outside xsmn unless you opt in. Our servers may sit outside your jurisdiction, but we apply the same protection standards to all user records.

What we collect on xsmn

We collect your email address and phone number when you register. We request a national ID card or passport for account verification—this is mandatory before any deposit. We store your name, date of birth, and registered address as part of our Know Your Customer (KYC) process. We do not ask for unnecessary personal data; every field serves account security, payment settlement, or legal compliance.

When you deposit via DANA, e-wallet, mobile banking, or a local payment virtual account, we receive transaction records from the payment processor. We log the amount, timestamp, and payment method. We do not store your card number or e-wallet PIN. Our payment partners (online payment, e-wallet, mobile banking, etc.) handle encryption of sensitive payment credentials—we receive only the confirmation that the transfer succeeded.

We track your login history, IP address, and device type to prevent unauthorized access. We record which football markets, live-dealer tables, or esports sessions you browse or join. We use this data to personalize your xsmn experience and flag suspicious account activity. We do not track your activity outside xsmn.

How we use your data

We use your email to send account notifications (login alerts, deposit confirmations, withdrawal status). We use your phone number for account recovery if you lose access. We do not send marketing SMS or email unless you explicitly subscribe to notifications. You can disable these at any time in your xsmn account settings.

We analyze aggregate, anonymized data (never linked to your name) to improve our platform. For example, we may report that "a large portion of our users access xsmn on weekends during Liga 1 matches"—but we never disclose that "user XYZ logged in on this date." We share anonymized traffic statistics with our hosting provider and payment partners so they can optimize service capacity.

We use your data to comply with financial crimes investigation. If a government agency or law enforcement requests your account records, we may provide them if the request meets legal standards in our jurisdiction. We do not volunteer such information; we respond only to court orders or regulatory subpoenas.

Third parties and data processors

Our servers are hosted by a cloud provider outside Indonesia. That provider has access to your data in encrypted form—they cannot decrypt it without our keys. We have a data-processing agreement with them that forbids any use of your data beyond hosting and backup.

Our payment processors (local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) receive only the information needed to settle your transaction. They do not see your full account history or your betting activity. They apply their own privacy policies—we recommend you review them if you have questions about how they handle payment data.

We do not sell your data to advertising networks, data brokers, or marketing agencies. We do not share your betting history or account balance with third parties. The only exceptions are financial regulators and law enforcement acting under legal authority.

Your rights and our commitment

You have the right to request a copy of all data we hold about you. You can ask us to correct inaccurate information (e.g., if your registered address is out of date). You can request deletion of your account and associated personal data, subject to financial record-retention requirements. To exercise these rights, contact our support team with your account email and a description of your request.

We encrypt all data in transit (using HTTPS) and at rest on our servers. We do not store passwords in plain text—we hash them using industry-standard algorithms. We conduct regular security audits and apply patches to our systems as vulnerabilities are discovered. We cannot guarantee zero breach risk, but we invest in protections that meet standard industry practice.

If we discover a data breach affecting your account, we will notify you by email within a reasonable timeframe. We will explain what data was exposed, what steps we took to secure it, and what you should do. We recommend you change your xsmn password immediately and monitor your linked payment accounts (DANA, e-wallet, etc.) for unauthorized activity.

Data outside your country

Our servers are located outside Indonesia. Your data is subject to the privacy laws of the jurisdiction where our servers sit. Those laws may differ from Indonesian law—for example, they may allow data access by foreign intelligence agencies under certain circumstances. By using xsmn, you consent to this storage arrangement. If you do not accept this, you should not create an account.

Contact xsmn

If you have questions about this policy or wish to exercise your data rights, contact our support team via email or the contact form in your xsmn account. We aim to respond within 5 business days. You can also write to our legal office at the address listed in our Terms and Conditions. This privacy policy may be updated from time to time—we will announce material changes on our platform and via email to active users.