Summary: xbaji collects only the data needed to operate your account, process payments, and keep the platform secure. We do not sell your personal data to third parties. You have the right to access, correct, or delete your data at any time by contacting [email protected].
1 Overview
This Privacy Policy applies to all users of the xbaji platform, including the website at xbaji.xyz and the xbaji mobile app. It explains how xbaji collects, stores, uses, and protects the personal data of players based in Bangladesh and elsewhere.
xbaji takes data privacy seriously. When you register on xbaji, deposit funds, place bets, or simply browse the platform, certain information is collected. This policy is designed to be transparent about what that information is and how it is handled — no vague language, no hidden practices.
By using xbaji, you agree to the collection and use of your data as described in this Privacy Policy. This policy should be read alongside the xbaji Terms and Conditions, which govern your overall use of the platform. If you have any questions about how xbaji handles your data, contact the support team at [email protected].
2 Data We Collect
xbaji collects personal data in two categories: information you provide directly, and information collected automatically when you use the platform.
| Data Type | Examples | Why Collected |
|---|---|---|
| Identity Data | Full name, date of birth, national ID | Account registration and KYC verification |
| Contact Data | Mobile number, email address | Account communication and support |
| Financial Data | bKash/Nagad/Rocket wallet number, transaction history | Processing deposits and withdrawals in BDT |
| Usage Data | Pages visited, games played, bet history, session duration | Platform improvement and responsible gaming monitoring |
| Device Data | IP address, device type, browser, operating system | Security, fraud prevention, and technical support |
| Location Data | Country and region (derived from IP) | Eligibility checks and regulatory compliance |
xbaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law.
3 How We Collect Your Data
xbaji collects your personal data through the following channels:
- Direct registration: When you create your xbaji account, you provide your name, contact details, and date of birth.
- Payment processing: When you deposit or withdraw funds via bKash, Nagad, or Rocket, your wallet number and transaction reference are recorded.
- KYC verification: When xbaji requests identity verification, you may submit a copy of your national ID or other government-issued document.
- Platform activity: As you use xbaji — browsing games, placing bets, using the app — usage and device data is collected automatically.
- Customer support: When you contact xbaji support via email or live chat, the content of those communications is stored.
- Cookies and tracking: xbaji uses cookies and similar technologies to collect data about how you interact with the platform. See Section 8 for full details.
xbaji never purchases personal data from third-party data brokers. All data collected comes directly from your interactions with the xbaji platform.
4 How We Use Your Data
xbaji uses your personal data only for legitimate purposes directly related to operating the platform and serving you as a player. Here is a breakdown of how your data is used:
- Account management: To create, maintain, and secure your xbaji account, including password resets and login verification.
- Payment processing: To process BDT deposits and withdrawals via your registered mobile wallet, and to maintain accurate transaction records.
- Identity verification: To confirm your age and identity as required before processing withdrawals or activating certain account features.
- Fraud prevention: To detect and prevent fraudulent activity, money laundering, and abuse of the xbaji platform, including the use of multiple accounts.
- Responsible gaming: To monitor betting patterns and identify players who may need support, and to enforce deposit limits or self-exclusion settings.
- Customer support: To respond to your queries, resolve disputes, and improve the quality of xbaji's support service.
- Platform improvement: To analyse how players use xbaji and make improvements to the website, app, and game offerings.
- Promotions and communications: To send you relevant offers and updates — only if you have opted in to marketing communications. You can opt out at any time.
- Legal compliance: To meet obligations under applicable laws and regulations, including responding to lawful requests from authorities.
xbaji does not use your personal data for automated decision-making that produces significant legal effects without human review. If you have concerns about how your data is being used, contact [email protected].
5 Data Sharing
xbaji does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data may be shared in the following limited circumstances:
- Payment providers: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are not permitted to use your data for any other purpose.
- Identity verification services: Third-party KYC providers may receive a copy of your identity documents to complete verification. These providers are bound by strict data handling agreements.
- Fraud and security providers: xbaji works with specialist security partners to detect and prevent fraud. These partners process data only as instructed by xbaji.
- Legal and regulatory authorities: xbaji may disclose your data to law enforcement, regulators, or courts where required by law or where xbaji has a legitimate legal obligation to do so.
- Business transfers: In the event of a merger, acquisition, or sale of xbaji's business, your data may be transferred to the new entity. You will be notified of any such change.
All third parties who receive data from xbaji are required to handle it securely, use it only for the specified purpose, and comply with applicable data protection standards. xbaji does not permit third parties to use your data for their own marketing or commercial purposes.
6 Data Retention
xbaji retains your personal data for as long as your account is active and for a period after account closure as required by law or legitimate business need. The general retention periods applied by xbaji are as follows:
| Data Category | Retention Period |
|---|---|
| Account and identity data | 5 years after account closure |
| Transaction and financial records | 7 years (regulatory requirement) |
| Betting and gaming history | 5 years after account closure |
| Customer support communications | 3 years after last interaction |
| Device and usage logs | 12 months on a rolling basis |
| Marketing preferences | Until opt-out or account closure |
After the applicable retention period, xbaji securely deletes or anonymises your personal data so that it can no longer be linked back to you. If you request deletion of your data before the retention period has expired, xbaji will assess the request and delete what is legally permissible to remove.
7 Data Security
xbaji uses industry-standard technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the xbaji platform.
- Encrypted storage of sensitive data including payment details and identity documents.
- Access controls that restrict internal access to personal data on a need-to-know basis.
- Regular security audits and vulnerability assessments of the xbaji platform.
- Two-factor authentication options available for your xbaji account login.
- Automated fraud detection systems that flag unusual account activity in real time.
While xbaji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. If you suspect that your xbaji account has been compromised, contact [email protected] immediately and change your password.
xbaji will never ask for your account password via email, chat, or phone. If you receive a message claiming to be from xbaji and asking for your password, do not respond — report it to support immediately.
8 Cookies
xbaji uses cookies and similar tracking technologies to improve your experience on the platform, keep you logged in, and understand how players use the site. Cookies are small text files stored on your device when you visit xbaji.xyz or use the xbaji app.
The types of cookies used by xbaji include:
- Essential cookies: Required for the platform to function. These enable login sessions, security features, and core platform functionality. They cannot be disabled.
- Analytics cookies: Used to understand how players navigate xbaji — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised.
- Preference cookies: Store your settings and preferences, such as language and display options, so you do not need to re-enter them each visit.
- Security cookies: Help detect and prevent fraudulent activity, including bot traffic and account takeover attempts.
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using xbaji, but some features may not work as intended. xbaji does not use cookies to serve third-party advertising.
9 Your Rights
As an xbaji player, you have the following rights regarding your personal data. To exercise any of these rights, contact xbaji at [email protected] with your account details and the specific request.
Right of Access
You can request a copy of all personal data xbaji holds about you. xbaji will respond within 30 days of receiving a valid request.
Right to Rectification
If any of your personal data held by xbaji is inaccurate or incomplete, you have the right to request that it be corrected.
Right to Erasure
You can request deletion of your personal data where xbaji no longer has a legal basis to retain it. Some data must be kept for regulatory reasons and cannot be deleted on request.
Right to Restrict Processing
You can ask xbaji to limit how your data is used while a dispute or correction request is being resolved.
Right to Data Portability
You can request a copy of your data in a structured, machine-readable format so you can transfer it to another service if you choose.
Right to Object
You can object to xbaji processing your data for marketing purposes at any time. You can also opt out of marketing emails directly from any xbaji communication you receive.
10 Minors
xbaji does not knowingly collect personal data from anyone under the age of 18. The xbaji platform is strictly for adults. If xbaji discovers that a minor has registered an account or provided personal data, that account will be closed immediately and all associated data deleted.
If you are a parent or guardian and believe that a minor has registered on xbaji using your details or their own, please contact [email protected] immediately so the account can be investigated and closed.
xbaji uses age verification checks during registration and KYC processes to prevent minors from accessing the platform. Players who cannot verify their age will not be permitted to deposit or withdraw funds.
11 Policy Changes
xbaji may update this Privacy Policy from time to time to reflect changes in the platform, applicable laws, or data handling practices. When material changes are made, xbaji will notify registered players via email or an in-platform notification.
The updated Privacy Policy will be published at xbaji.xyz/privacy-policy with a revised "last updated" date. Your continued use of xbaji after the updated policy has been published constitutes your acceptance of the changes. If you do not agree with the updated policy, you should stop using xbaji and may request account closure by contacting support.
12 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how xbaji handles your personal data, please get in touch with the xbaji data team: