xsmt Platform Privacy Notice

This page describes what we collect when you use xsmt and how we keep that data protected. We at xsmt take your privacy seriously — we collect only the information necessary to operate our platform, verify your identity, process your deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, and comply with applicable law.

Our xsmt privacy policy covers what personal data we collect, how we use it, who we share it with, how long we retain it, and what rights you have. We do not sell your data to third parties for marketing purposes. We do not use your information beyond what is necessary to run our service, investigate fraud, or meet legal obligations.

Our services are available only where local law permits. Users are responsible for verifying that their access to and use of xsmt comply with applicable jurisdiction rules. We do not offer our services in jurisdictions where online wagering is prohibited.

What Data We Collect on xsmt

When you register on xsmt, we collect your email address, password, legal name, date of birth, phone number, and residential address. During identity verification, we request a copy of a government-issued ID (passport, national identity card, or driver's licence). We store this information securely to confirm your identity and prevent fraud.

Our xsmt platform also collects transaction data — every deposit, withdrawal, and bet you place. We record the amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), timestamp, and outcome. This data helps us detect suspicious activity, settle disputes, and comply with financial regulations. We also collect technical data: your IP address, browser type, device information, and session activity. This helps us maintain platform security and troubleshoot technical issues.

We do not collect sensitive data such as your full payment card details. Payment processing is handled by certified third-party processors who comply with PCI-DSS standards. We do not store your card numbers or banking credentials on our servers.

How We Use Your Data

We use your personal data to operate xsmt — to verify your account, process your deposits and withdrawals, settle your bets, and provide customer support. We use transaction data to detect fraud, money laundering, and other illegal activity. We use technical data to maintain platform security, prevent unauthorised access, and improve our service performance.

Our xsmt policy does not permit us to use your data for marketing purposes without your explicit consent. We do not send unsolicited promotional emails or SMS messages. If you opt in to receive updates about new games or tournaments (Liga 1, Piala Indonesia, Piala AFF, Champions League), you can unsubscribe at any time through your account settings.

Third-Party Processors and Data Sharing

We share your data with third-party service providers only when necessary. Our payment processors (handling mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment transfers) receive your transaction details to complete deposits and withdrawals. Our identity verification partner receives your ID copy to confirm your identity. Our game studios (Pragmatic Play, PG Soft, Habanero) receive only your account ID and bet history — not your personal details.

Our xsmt policy requires all third-party processors to sign data-protection agreements. They may not use your data for their own purposes or share it further without our permission. We do not sell your data to advertisers, data brokers, or other commercial entities.

We may disclose your data if required by law — for example, if a court orders us to provide information to law enforcement, or if we detect illegal activity. We will notify you of such disclosures unless legally prohibited from doing so.

Cookies and Tracking

Our xsmt platform uses cookies to maintain your login session and remember your preferences. These are essential cookies — without them, you would need to log in every time you refresh the page. We do not use tracking cookies for advertising or analytics beyond what is necessary to operate the platform.

You can disable cookies in your browser settings, but this may affect your xsmt experience. We do not use third-party analytics services that track your behaviour across other websites.

Personal data

Information that identifies you — name, email, phone, address, ID copy.

Transaction data

Records of your deposits, withdrawals, and bets on xsmt.

Technical data

IP address, browser type, device info, session activity on xsmt.

Third-party processor

External service provider (payment, verification, game studio) that receives limited xsmt data.

Your Rights and Data Retention

You have the right to access your personal data on xsmt. You can request a copy of all information we hold about you by contacting our support team. You also have the right to correct inaccurate data — if your address or phone number changes, you can update it through your account settings.

Our xsmt policy retains your personal data for as long as your account is active, plus a retention period for legal and compliance purposes (typically 5–7 years for transaction records). Once this period expires, we delete or anonymise your data. If you close your account, we retain only the minimum data required by law.

You may request deletion of your account and associated data, subject to legal obligations. We will process such requests within a reasonable timeframe. However, we may retain transaction records if required by financial regulations or if there is an unresolved dispute.

Our xsmt Security and Contact

We at xsmt employ industry-standard encryption (SSL/TLS) to protect your data in transit. Our servers use firewalls, intrusion detection, and regular security audits. We do not guarantee absolute security — no online system is completely immune to attack — but we maintain rigorous standards to minimise risk.

If you have questions about our privacy practices, wish to access your data, or want to report a data breach, contact our xsmt support team. We will respond to privacy requests within a reasonable timeframe. Our privacy policy may be updated periodically; we will notify you of material changes via email or through a notice on our platform.

Our xsmt service is available only where local law permits. Users in Jakarta, Surabaya, Bandung, Medan, Semarang, and other supported regions must verify compliance with applicable data-protection and gambling regulations before accessing our platform. By using xsmt, you acknowledge that you have read and understood this privacy notice and consent to our data practices.