xbajee Privacy Policy
— Your Data, Protected

01 Who We Are

xbajee is an online gaming platform operated for players in Bangladesh. The xbajee platform provides access to casino games, sports betting, live dealer tables, and the xbajee Loyalty Program. For the purposes of this Privacy Policy, xbajee is the data controller responsible for the personal information collected through the platform.

This Privacy Policy applies to all users of the xbajee website, mobile site, and xbajee app. By registering an account or using any part of the xbajee platform, you acknowledge that you have read and understood this policy. If you have questions about how xbajee handles your data, you can contact us at any time via the details in Section 12.

02 Data We Collect

xbajee collects personal data in two ways: information you provide directly when using the platform, and information collected automatically through your use of xbajee. Here is a clear breakdown of what we collect and why:

xbajee does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming purposes and with your explicit consent.

03 How We Use Your Data

xbajee uses the personal data it collects for the following specific purposes:

• To create and manage your xbajee account, including verifying your identity and age.
• To process deposits and withdrawals via bKash, Nagad, and Rocket securely and accurately.
• To provide customer support and respond to queries or complaints raised through the xbajee platform.
• To detect and prevent fraud, money laundering, and other prohibited activities on xbajee.
• To monitor gameplay patterns for responsible gaming purposes and intervene where necessary.
• To send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
• To personalise your experience on xbajee, including recommending games and promotions relevant to your activity.
• To comply with legal and regulatory obligations applicable to the xbajee platform.
• To improve the xbajee platform through analysis of aggregated, anonymised usage data.

04 Legal Basis for Processing

xbajee processes your personal data on one or more of the following legal grounds, depending on the specific purpose:

• Contract performance: Processing is necessary to fulfil the agreement between you and xbajee — for example, processing your deposits and withdrawals or managing your account.
• Legal obligation: xbajee is required to process certain data to comply with anti-money laundering regulations, age verification requirements, and other applicable laws.
• Legitimate interests: xbajee processes some data to protect the platform from fraud, improve services, and ensure the security of all players — provided these interests do not override your rights.
• Consent: Where xbajee relies on your consent — such as for marketing communications — you can withdraw that consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing

xbajee does not sell your personal data. We share data only in the following limited and necessary circumstances:

• Payment processors: bKash, Nagad, and Rocket receive transaction reference data necessary to process your deposits and withdrawals. They operate under their own privacy policies and are bound by financial data protection standards.
• Identity verification providers: xbajee may use third-party KYC services to verify your identity documents. These providers are contractually bound to handle your data securely and only for verification purposes.
• Game software providers: Game providers whose titles appear on xbajee may receive anonymised gameplay data for technical and licensing purposes. They do not receive your personal identity or payment information.
• Legal authorities: xbajee will disclose personal data to law enforcement or regulatory bodies where required by law or where there is a credible threat to public safety.
• Business transfers: In the event of a merger, acquisition, or sale of xbajee assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

06 Cookies and Tracking

xbajee uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. Cookies are small text files stored on your device when you visit xbajee. Here is how xbajee uses them:

• Essential cookies: Required for the xbajee platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
• Analytics cookies: Help xbajee understand how players use the platform — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised.
• Preference cookies: Remember your settings and preferences on xbajee, such as your preferred language or display settings, so you do not have to reconfigure them on every visit.
• Marketing cookies: Used only if you have consented to receive personalised promotions. These help xbajee show you offers that are relevant to your activity on the platform.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the xbajee platform. A full cookie preference centre is available in your xbajee account settings.

07 Data Retention

xbajee retains your personal data for as long as your account is active and for a period after account closure as required by law and legitimate business needs. Specific retention periods are as follows:

• Account and identity data is retained for a minimum of five years after account closure to comply with anti-money laundering regulations.
• Transaction records are retained for seven years for financial compliance and audit purposes.
• Support communications are retained for three years to assist with dispute resolution.
• Technical and usage data is retained for up to 24 months in identifiable form, after which it is anonymised or deleted.

When data is no longer required for any lawful purpose, xbajee securely deletes or anonymises it. You may request early deletion of your data where xbajee is not legally required to retain it — see Section 8 for details on how to exercise this right.

08 Your Rights

As an xbajee player, you have the following rights in relation to your personal data. xbajee will respond to all valid requests within 30 days:

To exercise any of these rights, contact the xbajee support team via live chat or email at [email protected]. We may need to verify your identity before processing your request to protect your account security.

09 Data Security

xbajee takes the security of your personal data seriously. The platform employs a range of technical and organisational measures to protect your information against unauthorised access, loss, or misuse:

• All data in transit between your device and xbajee servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Sensitive data at rest — including payment references and identity documents — is stored in encrypted form with access restricted to authorised personnel only.
• xbajee uses multi-factor authentication for internal system access and conducts regular penetration testing of its infrastructure.
• All staff with access to personal data receive regular data protection training and are bound by confidentiality obligations.
• xbajee maintains an incident response plan. In the event of a data breach that poses a risk to your rights, xbajee will notify affected players without undue delay.

10 Children's Privacy

xbajee is strictly an adult platform. The xbajee platform is not directed at, and does not knowingly collect personal data from, anyone under the age of 18. Age verification is conducted during the registration process and may be repeated at any point during a player's time on xbajee.

If xbajee becomes aware that personal data has been collected from a person under 18, that account will be closed immediately, all data will be deleted, and any deposited funds will be returned to the original payment source. If you believe a minor has registered on xbajee, please contact us immediately at [email protected].

11 Changes to This Policy

xbajee may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify you via a notice on the xbajee platform or by email to your registered address before the changes take effect.

The "Last Updated" date at the top of this page will always reflect when the policy was most recently revised. We encourage you to review this Privacy Policy periodically so you stay informed about how xbajee protects your data. Continued use of xbajee after a policy update constitutes your acceptance of the revised terms.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how xbajee handles your personal data, please get in touch. The xbajee support team is available 24 hours a day, seven days a week.

• Live Chat: Available directly on the xbajee platform — average response time under 5 minutes.
• Email: [email protected] — responses within 24 hours for data-related requests.

For data access, correction, or deletion requests, please include your registered mobile number and a brief description of your request so we can verify your identity and process it as quickly as possible.