xbaj Privacy
Policy

1 Introduction

At xbaj, we take your privacy seriously. We know that when you share personal information with us — whether that's your name, phone number, or payment details — you're trusting us to handle it responsibly. That trust is something we work hard to earn and keep.

This Privacy Policy applies to all personal data collected through the xbaj website at xbaj.one, the xbaj mobile app, and any communications between you and xbaj support. It covers data collected during registration, during gameplay, during payment transactions, and through your general use of the platform.

This policy should be read alongside the xbaj Terms and Conditions. If you have any questions about how we handle your data, you can reach us at any time at [email protected]. We aim to respond to all privacy-related enquiries within 48 hours.

2 Data We Collect

xbaj collects personal data in several ways — directly from you when you register or contact us, automatically when you use the platform, and from third-party providers where necessary for verification or fraud prevention. Here is a breakdown of the categories of data we collect:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or regulation. We do not collect data from social media profiles or third-party platforms unless you explicitly connect such accounts to xbaj.

3 How We Use Your Data

xbaj uses your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the reason it was collected. The main purposes for which we use your data are:

• Account management: To create and maintain your xbaj account, verify your identity, and keep your account secure.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate financial records.
• Platform operation: To deliver the games and services you use, personalise your experience, and remember your preferences.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, and other illegal behaviour on the platform.
• Responsible gaming: To monitor gameplay patterns and identify players who may need support, in line with our responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service.
• Marketing communications: To send you information about promotions, bonuses, and new games — but only if you have opted in to receive such communications.
• Legal compliance: To meet our obligations under applicable laws and regulations, including anti-money laundering requirements.

We do not use automated decision-making or profiling in ways that produce legal or similarly significant effects on you without human review. If we ever use automated tools to flag an account for review, a member of our team will always make the final decision.

4 Legal Basis for Processing

Every time xbaj processes your personal data, we do so on one of the following legal grounds:

• Contract performance: Processing is necessary to fulfil our agreement with you — for example, processing your deposit or paying out your winnings.
• Legal obligation: Processing is required to comply with applicable laws — for example, identity verification under anti-money laundering regulations.
• Legitimate interests: Processing is necessary for our legitimate business interests — for example, fraud detection and platform security — provided those interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, for marketing emails — you can withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing email.

5 Sharing Your Data

xbaj does not sell your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, and Rocket receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: When you complete KYC verification, your identity documents are processed by a third-party verification service. This provider is contractually bound to handle your data securely and to use it only for verification purposes.
• Fraud prevention services: We share certain technical and account data with fraud detection tools to identify and prevent fraudulent activity on the platform.
• Game providers: When you play a game on xbaj, the game provider may receive your player ID and gameplay data. Game providers do not receive your full personal profile or payment details.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulators, or courts when required to do so by law, or when we believe disclosure is necessary to protect the rights, property, or safety of xbaj, our players, or others.

All third-party providers who receive your personal data are required to maintain appropriate security standards and to use your data only for the purposes for which it was shared. We do not allow our service providers to use your data for their own marketing purposes.

6 Cookies

xbaj uses cookies and similar tracking technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain viruses and cannot access other files on your device.

We use the following types of cookies on xbaj:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without disabling the platform entirely.
• Functional cookies: Remember your preferences, such as your preferred language or display settings. These improve your experience but are not strictly necessary.
• Analytics cookies: Help us understand how players use the platform — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised where possible.

You can manage or delete cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the xbaj platform. We do not use third-party advertising cookies or cross-site tracking cookies.

7 Data Security

xbaj takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the xbaj platform.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Role-based access controls, ensuring that only authorised staff can access personal data, and only to the extent required for their role.
• Regular security audits and vulnerability assessments of the platform infrastructure.
• Incident response procedures to detect, contain, and report data breaches in a timely manner.

Despite these measures, no system is completely immune to security risks. If you believe your xbaj account has been compromised, please contact [email protected] immediately. We will investigate and take appropriate action as quickly as possible.

8 Data Retention

xbaj retains your personal data for as long as your account is active and for a period after account closure as required by our legal and regulatory obligations. The specific retention periods that apply to different categories of data are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure, in line with anti-money laundering regulations.
• Transaction and payment data: Retained for a minimum of five years from the date of the transaction, as required by financial record-keeping obligations.
• Support communications: Retained for two years from the date of the last interaction, unless the communication relates to a dispute or legal matter, in which case it is retained until the matter is resolved.
• Technical and usage data: Retained for up to 12 months, after which it is aggregated or deleted.
• Marketing consent records: Retained for as long as you remain opted in, and for one year after you opt out, as evidence of your consent history.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. We do not retain data beyond what is necessary or legally required.

9 Your Rights

You have a number of rights in relation to the personal data xbaj holds about you. These rights are set out below. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and will not charge a fee for handling your request in most cases.

Please note that some of these rights are not absolute and may be subject to exceptions — for example, we cannot delete data that we are legally required to retain. Where we are unable to fulfil a request, we will explain why.

10 Children

xbaj is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a person under 18 has registered an account or provided personal data to xbaj, we will close the account and delete all associated data as quickly as possible.

If you are a parent or guardian and believe that a minor has registered an account on xbaj, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

11 Changes to This Policy

xbaj may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify registered players via email or a prominent notice on the platform before the changes take effect.

The "Last updated" date at the top of this page reflects when the policy was most recently revised. We encourage you to review this page periodically to stay informed about how xbaj protects your personal data. Your continued use of the platform after a policy update constitutes acceptance of the revised policy.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xbaj handles your personal data, please get in touch with our support team. We are available 24 hours a day, 7 days a week, and we take all privacy enquiries seriously.

For questions about your account, payments, or gameplay, visit our FAQ page. For information about responsible gaming tools and self-exclusion, visit our Responsible Gaming page.