xbajae Privacy Policy

1 Data We Collect

When you interact with the xbajae platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing — we may collect certain categories of personal data. The specific data we collect depends on how you use the platform and what you choose to provide.

Registration & Account Data

When you create an xbajae account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh, a valid Bangladeshi mobile phone number, and a username of your choosing. This data is required to create and maintain your account and to verify that you meet the 18+ age requirement.

Identity Verification Data

To comply with our know-your-customer obligations and to protect against fraud, xbajae may request identity verification documents at any stage of your account lifecycle. This may include a copy of your National Identity Card (NID), passport, or other government-issued identification. We may also request proof of ownership of the payment method you use for deposits and withdrawals.

Financial & Transaction Data

When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, or a card provider, we collect transactional metadata including the payment method type, mobile wallet number (masked), transaction reference numbers, timestamps, and amounts in Bangladeshi Taka (৳). We do not store full card numbers or wallet PINs — these are handled directly by the respective payment processors.

Betting & Gaming Activity Data

xbajae records all bets placed, games played, outcomes, session durations, and account balance movements. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement. Betting history records are retained in accordance with the data retention periods described in Section 5.

Technical & Device Data

When you access xbajae through a browser or mobile device, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and pages visited on xbajae. This data is used for security monitoring, fraud prevention, and to optimise the platform experience across the range of devices used by our players in Dhaka, Chittagong, Sylhet, and elsewhere in Bangladesh.

Communications Data

If you contact the xbajae support team via email or live chat, we retain records of those communications including the content of your messages and any attachments you provide. This allows us to handle follow-up queries and maintain a consistent service history for your account.

2 How We Use Your Data

xbajae processes your personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: performance of a contract (providing the betting and casino service you have registered for), compliance with a legal obligation (age verification, anti-money laundering checks), legitimate interests (fraud prevention, security monitoring), and — where applicable — your consent (non-essential cookies, marketing communications).

Purpose	Data Used	Lawful Basis
Account creation & management	Registration data, contact details	Contract performance
Age & identity verification	NID / passport, date of birth	Legal obligation
Payment processing	Transaction metadata, wallet reference	Contract performance
Fraud prevention & security	IP address, device data, betting patterns	Legitimate interests
Responsible gaming monitoring	Session duration, betting history, deposit frequency	Legal obligation / legitimate interests
Customer support	Communications data, account data	Contract performance
Platform analytics & improvement	Technical & device data, navigation data	Legitimate interests
Promotional communications (opted-in)	Contact details, betting preferences	Consent

xbajae does not use your personal data for automated decision-making that produces significant legal effects without human oversight. If any automated screening flags your account for a restriction or review, a member of our compliance team will assess the case before any permanent action is taken.

3 Data Sharing & Third Parties

xbajae does not sell, rent, or trade your personal information to third parties for commercial purposes. We share data only in the limited circumstances described below, and only with parties who are contractually bound to handle it in accordance with applicable data protection standards.

Payment Processors

To facilitate deposits and withdrawals, xbajae shares necessary transaction details with our Bangladeshi payment partners including bKash, Nagad, Rocket, and Upay, as well as with Visa and Mastercard processing networks where card payments are used. These providers receive only the minimum data required to execute and verify the transaction.

Game Software Providers

The casino games and sports betting products available on xbajae are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and gameplay data necessary to render games correctly, resolve disputes, and maintain game integrity. They do not receive your full identity data.

Identity Verification Services

When performing know-your-customer checks, xbajae may use third-party identity verification service providers. These providers process your submitted identity documents in order to confirm your identity and age. All such providers are subject to strict data processing agreements.

Legal & Regulatory Disclosures

xbajae may disclose personal data to law enforcement agencies, courts, or regulatory authorities where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent fraud, protect the safety of users, or comply with a court order or other binding legal instrument.

4 Cookies & Tracking Technologies

xbajae uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform, maintain your login session, and understand how players use the site. This section explains the types of cookies we use and how you can manage them.

Essential Cookies

These cookies are strictly necessary for the xbajae platform to function. They enable core features such as keeping you logged in during your session, maintaining your betting slip, and processing deposits securely. Essential cookies cannot be disabled without impairing the functionality of the platform.

Analytics Cookies

xbajae uses analytics cookies to understand aggregate patterns in how players navigate the site — which pages are visited most often, where users drop off, and how features are used. This information helps us improve the platform experience. Analytics data is processed in aggregated, anonymised form wherever possible.

Preference Cookies

Preference cookies allow xbajae to remember settings you have chosen, such as your preferred deposit method or display preferences. These cookies improve the convenience of your experience on repeat visits.

Managing Your Cookie Preferences

You may manage non-essential cookie preferences from within your xbajae account settings. You can also adjust cookie permissions through your browser settings; however, disabling essential cookies will prevent the platform from functioning correctly. Please note that deleting cookies does not delete your xbajae account or any personal data held in our systems — those must be managed via a formal data request to our support team.

5 Data Retention & Storage

xbajae retains your personal data for as long as your account remains active and for a defined period after account closure, as required to comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guideline:

• Account & registration data: Retained for the duration of your account plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction & financial data: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements.
• Betting & gaming history: Retained for a minimum of three years from the date of each wager, for dispute resolution and responsible gaming review purposes.
• Identity verification documents: Retained for the duration of your account plus five years from account closure.
• Support communications: Retained for three years from the date of the most recent communication in each support thread.
• Technical & device data (logs): Retained for up to 12 months for security monitoring purposes, then deleted or anonymised.

After the applicable retention period expires, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be linked to an individual. Data that forms part of an ongoing legal dispute or regulatory investigation is retained until the matter is fully resolved, regardless of the standard retention period.

All personal data held by xbajae is stored on servers that are protected by industry-standard physical and logical security controls. Access to personal data is restricted on a need-to-know basis and is subject to access control policies and audit logging.

6 Your Rights Over Your Data

As a player on the xbajae platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] from the email address associated with your xbajae account. We will respond to all valid requests within a reasonable period, typically within 30 days.

• Right of Access: You have the right to request a copy of the personal data xbajae holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details such as your registered address or contact number, you may also update these directly from within your account profile settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been processed unlawfully. This right is subject to our legal obligations — we cannot erase data that we are required by law to retain.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional communications), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You have the right to object to processing carried out on the basis of xbajae's legitimate interests, including profiling for fraud prevention purposes, where you believe your individual circumstances override those interests.

7 Data Security Measures

xbajae takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical Safeguards

• All data transmitted between your device and the xbajae platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Account passwords are stored as salted cryptographic hashes — we cannot retrieve your plaintext password and will never ask you for it.
• Our servers are protected by enterprise-grade firewalls, intrusion detection systems, and regular security patching schedules.
• Access to production systems and databases is restricted to authorised personnel only, and all access is logged and audited.
• We perform regular vulnerability assessments and penetration tests to identify and address security weaknesses before they can be exploited.

Organisational Safeguards

• All xbajae team members who handle personal data are trained in data protection obligations and are bound by confidentiality agreements.
• Third-party service providers are subject to due diligence assessments and data processing agreements that require them to maintain equivalent security standards.
• xbajae maintains an incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players as promptly as practicable.

Despite these measures, no platform transmitted over the internet can be guaranteed to be entirely secure. You also play a role in keeping your account safe: use a strong, unique password for your xbajae account, enable two-factor authentication, and never share your login credentials with anyone. If you suspect that your account has been compromised, contact the xbajae support team immediately.

8 Changes to This Policy

xbajae reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, to comply with updated legal requirements, or to incorporate feedback from our players. When we make material changes to this policy, we will update the "Last Updated" date displayed at the top of this page and, where appropriate, notify active players via their registered mobile number or through a notification on the xbajae platform.

We encourage you to review this Privacy Policy periodically so that you remain informed about how xbajae handles your personal data. Your continued use of the platform after any update constitutes your acceptance of the revised policy. If you disagree with any change to this policy, you should stop using xbajae and may request account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data, please contact the xbajae data support team at [email protected]. We are available seven days a week to assist players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.