xbajji Privacy
Policy

1 Introduction

xbajji operates the online casino and sports betting platform accessible at xbajji.biz (the "Platform"). In the course of providing services to players based primarily in Bangladesh, xbajji collects and processes certain categories of personal information. This Privacy Policy sets out a transparent account of those practices.

This Policy applies to all individuals who access or use the xbajji Platform, including registered account holders, prospective players who browse the Platform without completing registration, and former players whose accounts have been closed or suspended. It applies regardless of the device or network used to access the Platform.

By registering an account with xbajji or otherwise using the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

For the purposes of this Policy, "personal data" means any information that identifies or could reasonably be used to identify a living individual, including name, mobile number, payment account details, device identifiers, and account activity records.

2 Data We Collect

xbajji collects personal data across several categories, depending on how a player interacts with the Platform. The following table summarises the primary data categories and examples of specific data points within each:

xbajji does not collect sensitive personal data such as biometric data, health information, racial or ethnic origin, political opinions, or religious beliefs. In the event that a player voluntarily discloses such information (for example, in a support message), xbajji will not record or process it beyond what is necessary to respond to the communication.

3 How We Collect Data

xbajji collects personal data through the following means:

• Direct submission by the player: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection during platform use: Technical data such as IP address, device identifiers, and session activity is collected automatically as you navigate and use the Platform. This data is collected via server logs, session management systems, and similar technical mechanisms.
• Payment service providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a linked bank account, the payment provider transmits transaction confirmation data to xbajji to allow settlement of your account balance. xbajji does not receive or store your full mobile banking PIN or password.
• Third-party identity verification services: Where xbajji uses a third-party KYC (Know Your Customer) service to verify your identity, that service may return a verification outcome and a confidence score to xbajji. The underlying document images are handled in accordance with the third-party provider's own data practices.
• Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe operate the game software within the xbajji Platform. These providers may collect limited technical data necessary to operate their games. xbajji's agreements with Game Providers require them to handle any such data in a manner consistent with this Policy.

4 Purposes of Processing

xbajji processes player personal data for the following specific purposes:

1. Account creation and management: To register your account, verify your identity and age (18+ requirement), maintain your account profile, and provide access to Platform features.
2. Payment processing: To process deposits and withdrawals via your registered payment method, record transaction history, and reconcile account balances denominated in Bangladeshi Taka (BDT).
3. Service delivery: To provide access to casino games, sports betting markets, live casino products, and any other features available on the xbajji Platform.
4. Fraud and security monitoring: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, prohibited multi-accounting, and other security threats to the Platform and its players.
5. Regulatory compliance: To comply with applicable legal obligations including record-keeping requirements, responses to lawful requests from authorities, and anti-money laundering (AML) obligations.
6. Responsible gaming: To monitor player behaviour for indicators of problem gambling, enforce self-exclusion restrictions, and administer deposit limits and cooling-off periods in accordance with xbajji's Responsible Gaming Policy.
7. Customer support: To respond to queries, complaints, and requests submitted through the xbajji support channel, and to maintain records of communications for quality assurance.
8. Marketing communications: Where you have opted in to receive promotional communications, to send you information about xbajji offers, new games, seasonal promotions (e.g., Eid, Pohela Boishakh specials), and platform updates. You may opt out of marketing communications at any time.
9. Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the Platform and to improve the quality, reliability, and functionality of xbajji services.

5 Legal Basis for Processing

xbajji processes player personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between xbajji and the player — including account registration, game access, and payment processing — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement is carried out on the basis of xbajji's legitimate interest in operating a secure and reliable platform, balanced against players' privacy interests.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML record-keeping and responses to lawful authority requests, is carried out on the basis of legal compliance.
• Consent: Processing for marketing communications and certain optional data collection activities is carried out on the basis of your explicit consent, which may be withdrawn at any time by contacting xbajji support.

6 Sharing Your Data

xbajji does not sell, rent, or trade player personal data to any third party for that party's own commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, and linked banking partners (including Dutch-Bangla Bank, City Bank, BRAC Bank, and others) to the extent necessary to process deposits and withdrawals on your account.
• Identity verification providers: Where a third-party KYC service is engaged to verify your identity documents, the relevant data is transmitted to that provider under a data processing agreement that restricts further use.
• Game Providers: Your account identifier and session token are shared with Game Providers (e.g., Pragmatic Play, Evolution Gaming, Spribe, Ezugi) to initialise game sessions. These providers are contractually bound to process this data solely for game delivery purposes.
• Legal and regulatory authorities: xbajji may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or lawful authority request. xbajji will notify the affected player of such a disclosure where it is legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of xbajji's assets, player personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Players will be notified of any such transfer.
• Professional advisors: Legal counsel, auditors, and other professional advisors retained by xbajji may access player data to the minimum extent necessary to provide their services, subject to professional confidentiality obligations.

7 Cookies & Tracking Technologies

xbajji uses cookies and similar tracking technologies to enable core Platform functionality, maintain your logged-in session, and collect technical analytics data. The following categories of cookies are in use on the xbajji Platform:

• Strictly necessary cookies: These cookies are essential to the operation of the Platform. They maintain your authenticated session, remember your language and display preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: These cookies remember preferences and settings you have chosen — such as responsible gaming limits you have set — so that you do not need to re-enter them on each visit.
• Analytics cookies: xbajji uses anonymised analytics data to understand how players navigate the Platform, which games are most visited, and where technical errors occur. This data is aggregated and does not identify individual players.
• Session management cookies: Short-lived cookies that expire when you close your browser, used to manage the continuity of your game sessions and prevent data loss during active play.

xbajji does not use third-party advertising cookies or cross-site tracking technologies. You may configure your browser to block or delete cookies; however, doing so may affect your ability to log in to and use the xbajji Platform. Instructions for managing cookies are available in your browser's help documentation.

8 Data Retention

xbajji retains player personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

At the end of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

9 Your Rights

As a player whose personal data is processed by xbajji, you hold the following rights with respect to your information. To exercise any of these rights, please contact xbajji support through the platform messaging channel or via the support email listed in Section 13.

• Right of access: You may request a copy of the personal data xbajji holds about you, including the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right of rectification: If any personal data xbajji holds about you is inaccurate or incomplete, you may request that it be corrected. Where the data in question affects your account status, corrections may require supporting documentation.
• Right to erasure: You may request that xbajji delete your personal data. This right is subject to exceptions — for example, xbajji is required to retain certain financial and identity records for regulatory purposes and cannot delete these at the player's request alone. Where erasure is not possible in full, xbajji will explain the reason and delete as much data as it lawfully can.
• Right to restriction: In certain circumstances (for example, where you contest the accuracy of data held, or where you have objected to processing and a determination is pending), you may request that xbajji restrict active processing of your data while the matter is resolved.
• Right to object: Where processing is based on legitimate interests (including direct marketing), you may object to that processing. xbajji will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

xbajji will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous in scope, this period may be extended by a further 60 days, in which case xbajji will notify you of the extension and the reason for it within the initial 30-day window.

10 Children's Privacy

The xbajji Platform is intended exclusively for adults aged 18 years and above. xbajji does not knowingly collect personal data from individuals under the age of 18. During the registration process, players are required to confirm their date of birth, and xbajji reserves the right to request documentary proof of age at any stage of the account lifecycle.

If xbajji discovers or receives credible notification that a registered account belongs to a person under the age of 18, the following steps will be taken immediately:

1. The account will be suspended and access to the Platform will be revoked.
2. All personal data associated with the account will be reviewed and, to the extent permitted by applicable law, deleted without undue delay.
3. Any balance remaining in the account will be handled in accordance with applicable legal requirements and will not be released to the minor.

Parents, guardians, and responsible adults who become aware of a minor having accessed or registered on the xbajji Platform are encouraged to contact xbajji support immediately using the contact details in Section 13, so that the account can be suspended without delay.

11 Security Measures

xbajji implements a layered set of technical and organisational security measures to protect player personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players' devices and xbajji servers, ensuring that credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted storage of sensitive data fields — including payment account identifiers and identity document references — in the xbajji database, using industry-standard encryption algorithms.
• Access control policies that restrict access to player personal data to xbajji staff members who have a specific operational need for that access. Access is logged and subject to periodic review.
• OTP-based two-factor verification for account login from new devices and for withdrawal requests, reducing the risk of unauthorised account access.
• Fraud monitoring systems that analyse login patterns, device fingerprints, and transaction behaviours in real time to detect and flag anomalous activity for investigation.
• Regular security reviews of xbajji's platform infrastructure, including vulnerability assessments and penetration testing conducted by qualified security professionals.

Notwithstanding these measures, no data transmission over the internet or method of electronic storage can be guaranteed to be 100% secure. xbajji therefore cannot provide an absolute guarantee of security, and players are encouraged to take their own precautions — including using a strong, unique password for their xbajji account and ensuring the security of the device used to access the Platform.

12 Policy Updates

xbajji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made to this Policy, xbajji will notify registered players by sending a notification to the mobile number associated with their account. The updated Policy will also be published on this page with a revised effective date.

Minor changes — such as corrections of typographical errors or clarifications that do not alter the substantive meaning of any provision — may be made without individual notification. xbajji therefore recommends that players review this page periodically to stay informed of current data practices.

Continued use of the xbajji Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you should cease using the Platform and contact xbajji support to close your account.

13 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data xbajji holds about you, please contact the xbajji support team using the following details:

• Support Email: [email protected] (plain text — not a clickable link)
• Platform Messaging: Available through your xbajji account dashboard after login
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

xbajji aims to acknowledge all privacy-related queries within 24 hours of receipt and to provide a substantive response within 30 days. Where a request relates to the exercise of a data subject right, xbajji will handle the request in accordance with the timelines described in Section 9.

All privacy communications should clearly identify your xbajji account username and the nature of your request to allow xbajji to locate your records and route your query to the appropriate team without delay.