Privacy Policy — xbajee app

This Privacy Policy is issued by xbajee app ("xbajee app", "we", "us", "our"), the operator of the online casino and sports betting platform available at https://xbajee-app.club. xbajee app acts as the data controller in respect of the personal data of its registered players and website visitors based in Bangladesh.

As data controller, xbajee app determines the purposes for which and the manner in which personal data is processed. We are committed to handling your personal information with care, transparency, and in accordance with widely recognised data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

If you have any questions, concerns, or requests relating to your personal data, or if you wish to exercise any of the privacy rights described in this policy, please contact the xbajee app Data Protection team at [email protected]. Please include "Privacy Request" in the subject line so your message is directed to the appropriate team promptly.

xbajee app collects personal data from you in several ways: directly when you register an account, make a deposit, contact support, or interact with the platform; automatically when you browse or use the site; and occasionally from third-party partners such as payment processors and identity verification services. We collect only the data that is genuinely necessary for the purposes described in this policy.

The categories of personal data we collect include the following:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for identification, health data, or data concerning sexual orientation, except where strictly necessary for responsible gaming purposes (for example, health-related self-exclusion requests) and only with your explicit consent.

xbajee app does not collect personal data from individuals who are under the age of 18. If we become aware that personal data has been collected from an underage individual, we will delete that data promptly and close the associated account in accordance with our age restriction policy.

xbajee app processes your personal data for the following specific purposes. We will never use your data for any purpose that is incompatible with the reason it was originally collected, and we will not use it in ways that are unfair, deceptive, or harmful to you.

• Account creation and management: To register your xbajee app account, verify your identity, maintain your account settings, and enable you to log in securely.
• Service delivery: To process your bets, casino game sessions, deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking channels, and to credit winnings to your account.
• Identity and age verification (KYC): To confirm that you are aged 18 or above and that the identity information you provided is accurate, as required for responsible operation of a gambling platform.
• Fraud prevention and security: To detect and investigate suspicious activity, prevent multiple account creation, identify potential money laundering, and protect the integrity of the xbajee app platform.
• Responsible gaming obligations: To monitor play patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and comply with our commitment to player welfare.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality and training purposes.
• Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) requirements, record-keeping obligations, and any lawful requests from competent authorities.
• Platform improvement: To analyse usage patterns (in anonymised or aggregated form where possible) and improve the performance, content, and features of xbajee app.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant news about xbajee app — but only where you have consented to receive such communications. You may withdraw this consent at any time.

xbajee app processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing your data is necessary to perform the contract between you and xbajee app — that is, to provide you with access to the platform, process your bets, handle deposits and withdrawals, and manage your account. Without this data we cannot deliver our services to you.
• Legal obligation: Certain processing activities are required in order for xbajee app to comply with applicable legal and compliance obligations, including age verification, KYC identity checks, and anti-money laundering record-keeping.
• Legitimate interests: In some cases we process your data to pursue legitimate business interests such as fraud detection, platform security, abuse prevention, and service analytics — provided those interests are not overridden by your privacy rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing (for example, to send you marketing communications or to place non-essential cookies on your device), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where processing is based on consent, we will keep a record of when and how consent was obtained. You may request information about the consent records we hold for you by contacting [email protected].

xbajee app uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform effectively, remember your preferences, maintain your logged-in session, and understand how players use the site. A cookie is a small text file placed on your device by a website you visit. Cookies do not harm your device and do not store any financial information directly.

We use the following categories of cookies on xbajee app:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as secure login, session management, and fraud prevention. You cannot opt out of strictly necessary cookies while using xbajee app, as they are required for the site to operate.
• Functional Cookies: These cookies remember your preferences — such as your preferred language (English), display settings, and notification preferences — so you do not have to re-enter them on each visit.
• Analytical Cookies: We use anonymised analytics to understand how players navigate the platform, which features are used most frequently, and where technical issues occur. This data is processed in aggregate and does not identify individual players.
• Performance Cookies: These cookies monitor platform response times and help us identify and resolve performance issues, particularly during high-traffic periods such as major cricket events like BPL or T20 World Cup.

xbajee app does not currently use third-party advertising or retargeting cookies. If this changes in the future, this policy will be updated accordingly, and where required by applicable law, we will seek your consent before placing such cookies on your device.

You can manage or delete cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain parts of the xbajee app platform, including your ability to remain logged in across sessions.

xbajee app does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only where it is genuinely necessary to deliver our services, meet our legal obligations, or protect the security of the platform. The third parties with whom we may share your data fall into the following categories:

• Payment processors: To process your deposits and withdrawals, we share necessary transaction data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners process data under their own privacy policies and are bound by their own regulatory obligations in Bangladesh.
• KYC and identity verification partners: To fulfil our age verification and anti-money laundering obligations, we may share identity documents and related data with specialist third-party KYC service providers. All such providers are contractually bound to process your data solely for verification purposes.
• Game technology providers: Information about your gaming sessions may be shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to the extent necessary to deliver, record, and support game functionality and fairness.
• Fraud prevention and security services: We may share technical data (including IP address, device fingerprint, and behavioural signals) with fraud detection platforms to identify and prevent abusive activity on the platform.
• Analytics providers: Anonymised and aggregated usage data may be shared with analytics service providers to help us improve the platform. These providers do not receive data that directly identifies individual players.
• Legal authorities: Where we receive a lawful request from a competent authority — such as a court order, regulatory investigation, or law enforcement request — we may be required to disclose personal data. We will not disclose data beyond what is strictly required by the applicable legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the xbajee app business, player data may be transferred to the acquiring entity as part of the transaction. Affected players will be notified in advance where this is practicable.

All third-party processors and partners who receive personal data from xbajee app are required to maintain appropriate data security standards and to process data solely for the purposes for which it was shared. We do not permit our third-party partners to use your personal data for their own unrelated marketing or commercial purposes.

xbajee app retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, compliance, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymised.

The following general retention periods apply to the main categories of personal data held by xbajee app:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations.
• Financial transaction data: Retained for a minimum of five (5) years following the date of each transaction, in line with financial record-keeping standards.
• Betting and gaming activity records: Retained for five (5) years following account closure to enable dispute resolution, regulatory compliance, and responsible gaming monitoring obligations.
• Customer support communications: Retained for three (3) years following the closure of each support case, to enable quality assurance and to handle any subsequent related disputes.
• Marketing consent records: Retained for three (3) years following the last opt-in event or until consent is withdrawn, whichever is earlier.
• Cookies and technical data: Session cookies are deleted when you close your browser. Persistent analytical cookies are retained for a maximum of twenty-four (24) months.

Where you request the deletion of your personal data (see Section 9 — Your Privacy Rights), xbajee app will action that request to the fullest extent possible. In certain cases, we may be required by law to retain some data even after a deletion request — in such cases we will explain which data must be retained and why.

xbajee app takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online system can guarantee absolute security, the following safeguards are in place across the xbajee app platform:

• SSL/TLS encryption: All data transmitted between your browser or device and xbajee app is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when using the platform.
• Encrypted data storage: Sensitive personal data, including identity documents and financial account references, is stored in encrypted form on secured servers. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to systems containing personal data is strictly controlled on a need-to-know basis. xbajee app staff members are granted access only to the data required to perform their specific job functions, and all access is logged and audited.
• Password security: Account passwords are stored as salted cryptographic hashes — never in plain text. We strongly encourage players to use a unique, strong password for their xbajee app account and to enable two-factor authentication where available.
• Fraud and intrusion monitoring: Automated monitoring systems continuously scan for suspicious activity, unauthorised login attempts, and anomalous transaction patterns. Alerts are reviewed by the xbajee app security team on an ongoing basis.
• Security reviews: xbajee app conducts periodic internal and third-party security assessments to identify and remediate potential vulnerabilities in the platform.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xbajee app will notify affected players without undue delay after becoming aware of the breach. Notification will be provided via email to the address registered on your account. If you suspect that your xbajee app account has been compromised, please contact [email protected] immediately.

As a player on xbajee app, you have a number of rights in relation to your personal data. xbajee app is committed to facilitating the exercise of these rights in a straightforward and timely manner. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Request" and clearly describe the right you wish to exercise and the data it relates to.

• Right of access: You have the right to request a copy of the personal data that xbajee app holds about you, along with information about how it is used and with whom it is shared. We will provide this information within 30 days of receiving a valid request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can also update basic account information such as your email address and phone number directly through your account settings.
• Right to erasure ("right to be forgotten"): You have the right to request that we delete your personal data. We will comply with this request to the fullest extent possible, subject to our legal and compliance obligations which may require us to retain certain data for a defined period even after account closure.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict the processing of your data to storage only.
• Right to data portability: Where processing is carried out by automated means and based on your consent or a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on our legitimate interests, and to object at any time to processing of your data for direct marketing purposes (including profiling related to direct marketing). Upon receipt of such an objection, we will cease the relevant processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

xbajee app will not charge a fee for exercising any of the above rights, unless a request is manifestly unfounded or excessive. In such cases we may charge a reasonable administrative fee or decline to action the request, and will explain our reasoning. We will verify your identity before actioning any data rights request to protect your account security.

xbajee app reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. The date at the top of this document indicates when the policy was most recently revised. We will notify registered players of any material changes to this policy by sending an email to the address registered on your account and by displaying a prominent notice on the xbajee app platform.

We encourage you to review this Privacy Policy periodically to stay informed about how xbajee app collects, uses, and protects your personal data. Your continued use of the xbajee app platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you have any questions about any changes to this policy, please contact us at [email protected] before continuing to use the platform.