1. Geographic Sovereignty
As a game studio based in Kuala Lumpur, Malaysia, we operate under the PDPA (Personal Data Protection Act 2010). For our international players, we align our systems to respect relevant global frameworks, ensuring that the protection follows the data, regardless of where you log in from.
2. The Defense Strategy
We use AES-256 encryption for data at rest and TLS 1.3 for data in transit. Our internal security protocol is built on "Least Privilege Access"—meaning only the developer who needs to see a specific dataset to solve your issue ever gets the key.
3. Protection of Minors
Our projects are not aimed at those under the age of 13. If we discover we have inadvertently collected data from a child, we execute an immediate purge of that data from all active and backup servers.
4. Policy Evolution
We update this privacy-policy to reflect changes in legal landscape or our development stack. If a change is significant, we will notify you via the email in your account record. Continuing to use XATARIXV services after February 18, 2026, constitutes acknowledgement of these terms.