Privacy Policy — xbajee

1. Who We Are

xbajee is an online casino and sports betting platform accessible at https://xbajee.vu. References to "xbajee", "we", "us", or "our" in this Privacy Policy refer to the xbajee platform and its operating entity, which acts as the data controller in respect of the personal information collected from registered players and site visitors.

This Privacy Policy applies to all personal data collected through your use of the xbajee website, including the casino game lobby, sports betting markets, account registration, deposit and withdrawal processes, customer support interactions, and any communications we send to you. It does not apply to third-party websites that may be referenced or accessible from the xbajee platform; those sites operate under their own privacy policies.

If you have questions about how xbajee processes your personal data, or if you wish to exercise any of your data rights, please contact our dedicated support team at [email protected]. All privacy-related enquiries are handled in English within five business days.

2. Data We Collect

xbajee collects personal data across three broad categories: information you provide directly, information collected automatically as you use the platform, and information received from third-party payment providers during transaction processing.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly necessary for age and identity verification in compliance with anti-money-laundering obligations.

3. How We Use Your Data

xbajee uses the personal data we collect for the following specific purposes:

• Account Creation and Management: To register your xbajee account, verify your identity, and maintain your account profile throughout your relationship with us.
• Transaction Processing: To process deposits made via bKash, Nagad, Rocket, and Upay, and to execute withdrawal requests to your verified payment method in Bangladeshi Taka.
• Gaming Services: To provide access to casino games, sports betting markets, and associated features, and to record your gaming activity for account statement purposes.
• Regulatory Compliance: To meet our obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) requirements, including age verification and source-of-funds checks.
• Responsible Gaming: To monitor gaming activity and identify patterns that may indicate problem gambling, enabling us to intervene proactively and offer support tools such as deposit limits and self-exclusion.
• Customer Support: To respond to enquiries, resolve complaints, and maintain records of support interactions for quality assurance and training purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorized account access.
• Marketing Communications: To send promotional offers, bonus notifications, and seasonal promotions to players who have opted in to marketing communications. You may opt out at any time.
• Platform Improvement: To analyse anonymized usage data in aggregate in order to improve the xbajee platform, optimize page performance, and enhance the player experience.

4. Legal Basis for Processing

xbajee processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the services you have requested under the xbajee Terms & Conditions, including account management, payment processing, and access to games.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including AML/CTF requirements, KYC verification, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out in the pursuit of xbajee's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of optional marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Disclosure

xbajee does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) solely to process deposits and withdrawals on your behalf. These parties act as independent data controllers under their own privacy frameworks.
• Game Technology Providers: Technical session data is shared with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate game delivery and ensure fair play certification. These providers receive only the minimum data necessary to operate their games.
• Identity Verification Services: Where KYC checks are required, identity documents may be shared with regulated third-party identity verification providers. These providers are contractually bound to process your data solely for the purpose of identity verification and to maintain equivalent data security standards to xbajee.
• Regulatory Authorities: xbajee may be required by law to disclose personal data to government bodies, law enforcement agencies, or regulatory authorities. In such cases, xbajee will disclose only the minimum information required and will notify you where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of xbajee's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any change in the applicable privacy policy in advance.

All third parties with whom xbajee shares personal data are contractually required to maintain appropriate technical and organisational security measures and to use your data only for the purposes for which it was disclosed.

6. Payment Data & Mobile Wallet Privacy

xbajee supports deposits and withdrawals via bKash, Nagad, Rocket, and Upay — the most widely used mobile financial services among Bangladesh players. When you initiate a payment transaction on xbajee, the following data practices apply:

• Your mobile wallet number (e.g., bKash or Nagad registered number) is collected and stored in encrypted form solely for the purpose of processing your transaction and for future withdrawal routing.
• xbajee does not store your bKash PIN, Nagad PIN, or any other payment authentication credential. These are processed directly and exclusively by the respective payment provider's secure gateway.
• All transaction amounts are denominated in Bangladeshi Taka (৳) and are recorded in your xbajee account statement, which is accessible from within your account dashboard.
• Transaction reference numbers generated by bKash, Nagad, or other providers are retained by xbajee for a period of five years to satisfy anti-money-laundering record-keeping requirements.
• xbajee will only process withdrawals to the same payment method used for deposits. This one-to-one mapping is a fraud prevention control and cannot be overridden.

7. Cookies & Tracking Technologies

The xbajee platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience. Cookies are small text files stored on your browser or device when you visit the xbajee website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without impacting core functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how players navigate the xbajee platform — for example, which pages are visited most frequently and how long sessions typically last. This data is used in aggregate form to improve platform performance.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and display preferences, so that you do not need to re-enter them on each visit.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. These cookies are strictly necessary and cannot be disabled.

You may configure your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary or security cookies may prevent you from logging in to your xbajee account or accessing certain platform features.

8. Data Retention

xbajee retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the duration of your registered account relationship with xbajee, plus a minimum of five years following account closure to satisfy regulatory record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of the transaction in accordance with anti-money-laundering legislation.
• Identity Verification Documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Customer Support Records: Retained for three years from the date of the most recent support interaction, after which they are securely deleted.
• Gaming Activity Logs: Retained for five years to support responsible gaming monitoring, dispute resolution, and regulatory compliance.
• Marketing Consent Records: Retained until consent is withdrawn, plus one year after withdrawal to demonstrate compliance.

When personal data is no longer required and no legal obligation exists to retain it, xbajee will securely delete or anonymize it in a manner that prevents reconstruction of the original data.

9. Data Security

xbajee implements a layered approach to data security designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security framework includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the xbajee platform is encrypted using industry-standard TLS 1.3 protocols. The padlock icon in your browser address bar confirms an active secure connection.
• Password Hashing: Account passwords are never stored in plain text. xbajee uses a strong, salted cryptographic hashing algorithm to store password credentials, meaning that even in the event of a data breach, your raw password cannot be reconstructed from stored data.
• Access Controls: Access to personal data within xbajee's internal systems is restricted on a strict need-to-know basis. Staff access to player data is logged, audited regularly, and subject to confidentiality obligations.
• Intrusion Detection: xbajee operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Data Minimisation: xbajee collects and processes only the minimum personal data necessary for each specific purpose. Data that is no longer required for its original purpose is securely deleted or anonymized.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, xbajee will notify affected players and relevant authorities within the timeframes required by applicable law.

While xbajee takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication where available.

10. Your Data Rights

As a registered xbajee player, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and your registered account username. xbajee will respond within 30 days.

• Right of Access: You have the right to request a copy of all personal data xbajee holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. For minor corrections such as contact details, you may update these directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the data has been unlawfully processed. This right is subject to xbajee's legal obligations to retain certain records (see Section 8).
• Right to Restriction: You have the right to request that xbajee restricts processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to xbajee in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on xbajee's legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Children's Privacy

The xbajee platform is strictly intended for adults aged 18 years and above. xbajee does not knowingly collect personal data from individuals under the age of 18. The registration process includes age declaration steps, and xbajee reserves the right to request documentary proof of age at any time during the account lifecycle.

If xbajee becomes aware that personal data has been collected from an individual under the age of 18, the account will be immediately suspended, all associated personal data will be deleted without undue delay, and any deposits will be returned to the source payment method after deduction of any winnings generated during the period of underage use.

Parents or guardians who believe a minor has registered on the xbajee platform should contact [email protected] immediately. xbajee will prioritise the investigation and resolution of all underage access reports.

12. Third-Party Links

The xbajee platform may contain references to game providers and payment partners. These third parties operate their own websites and their own privacy policies, which are independent of this Privacy Policy. xbajee is not responsible for the privacy practices of third-party providers and does not accept liability in connection with third-party data handling.

Players are encouraged to review the privacy policies of any third-party service they interact with in connection with their use of xbajee — in particular, the privacy policies of bKash, Nagad, and Rocket when making payment transactions, as those providers independently handle certain transaction data in accordance with their own regulatory obligations.

13. Updates to This Privacy Policy

xbajee may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we provide. Material changes will be communicated to registered players via the email address on file at least 7 days before the updated policy takes effect.

The date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the xbajee platform following the effective date of any update constitutes your acknowledgement of the revised policy. If you do not agree with the updated terms, you should discontinue use of the platform and request account closure before the effective date.

All previous versions of the Privacy Policy are available on request by contacting [email protected] with the subject line "Privacy Policy — Archived Version".

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or xbajee's data processing practices, please reach out to our support team using the details below. All privacy enquiries are handled by trained staff in English, seven days a week.

• Email: [email protected]
• Subject Line for Data Requests: Data Rights Request
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Support Language: English
• Platform: https://xbajee.vu