xbajii Privacy Policy

1 Introduction

xbajii ("we", "us", "our") operates the online casino and sports betting platform available at xbajii.vip, directed at players in Bangladesh. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, storage, and protection of personal information obtained from users ("you", "the Player", "the User") who access or use the xbajii platform in any capacity.

This Policy applies to all data collected through the xbajii website, including account registration, deposits and withdrawals, game play, customer support interactions, and any other engagement with our platform. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of xbajii.

xbajii is committed to protecting the privacy of its Bangladesh player base. We collect only the data that is reasonably necessary for the safe and compliant operation of the platform, and we apply industry-standard security measures to protect that data at every stage of its lifecycle.

2 Data We Collect

xbajii may collect the following categories of personal data from players and site visitors:

2.1 Identity and Contact Information

• Full legal name
• Date of birth
• Residential address (including city, division, and postcode within Bangladesh)
• Email address
• Mobile phone number
• National ID number or passport number (collected as part of KYC verification)

2.2 Financial and Payment Information

• bKash, Nagad, Rocket, or Upay mobile wallet identifiers linked to your account
• Bank account details for bank transfer transactions via Dutch-Bangla Bank, City Bank, or BRAC Bank
• Deposit and withdrawal transaction history in BDT (৳)
• Account balance records

2.3 Technical and Usage Data

• IP address and approximate geol ocation data
• Browser type and version
• Operating system and device type
• Pages visited on xbajii.vip, time spent on each page, and navigation path
• Referring URL (the website you visited immediately before arriving at xbajii.vip)
• Session timestamps and login history

2.4 Gaming Activity Data

• Betting history across all sportsbook markets (cricket, football, kabaddi, and others)
• Casino game history including game titles, stakes, outcomes, and session durations
• Bonus and promotion participation records
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods)

2.5 Communications Data

• Customer support correspondence submitted via email to [email protected]
• Records of any complaints, disputes, or feedback submitted to xbajii
• Marketing preference settings and opt-in/opt-out records

3 How We Collect Your Data

3.1 Directly From You

The majority of personal data xbajii holds is provided directly by you during the course of your interactions with the platform. This includes data submitted during account registration, KYC document uploads, payment transactions, customer support requests, and any voluntary communications you initiate with our team.

3.2 Automatically via Technology

When you access xbajii.vip, certain technical data is collected automatically through server logs, browser-based cookies, and similar tracking technologies. This data is collected to ensure the technical stability of the platform, detect fraudulent or unauthorised access, and improve user experience. See Section 9 (Cookies & Tracking) for full details.

3.3 From Third-Party Service Providers

xbajii may receive supplementary identity verification data from third-party KYC and fraud-prevention service providers. Additionally, payment processors (including mobile financial service providers such as bKash and Nagad) may transmit transaction confirmation data to xbajii as part of the deposit and withdrawal workflow. xbajii does not receive your full payment credentials from these providers — only confirmation and reference data necessary to match a transaction to your account.

3.4 From Game Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may transmit game session data — including round identifiers, stakes, results, and RTP metrics — to xbajii for the purposes of account history display, dispute resolution, and responsible gaming monitoring.

4 How We Use Your Data

xbajii processes personal data for the following purposes:

xbajii does not use automated decision-making processes that produce legally significant effects on players without human review. Responsible gaming flags raised by automated monitoring are reviewed by our support team before any account-level action is taken.

5 Legal Basis for Processing

xbajii processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions, including account management, payment processing, and game service delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, KYC requirements, fraud prevention duties, and financial record-keeping standards.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, responsible gaming monitoring, and product analytics — where these interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected].

6 Data Sharing and Disclosure

6.1 Third-Party Service Providers

xbajii shares personal data with carefully selected third-party service providers who assist in platform operation. These include payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), KYC verification services, game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), IT infrastructure and hosting providers, and fraud detection services. All third-party providers are bound by contractual data processing obligations and are not permitted to use your data for purposes other than those specified by xbajii.

6.2 Legal and Regulatory Disclosure

xbajii may be required to disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required by applicable law, a court order, or a legitimate legal process. In such cases, xbajii will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected player where legally permissible to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xbajii's business, personal data held by xbajii may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

6.4 No Sale of Personal Data

xbajii does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Any sharing of data is strictly limited to the categories and purposes described in this Policy.

7 Data Retention

xbajii retains personal data for as long as is reasonably necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with standard AML and financial record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Identity verification documents are retained for a minimum of 5 years following the end of the account relationship.
• Customer support records: Support correspondence is retained for a minimum of 3 years from the date of the interaction.
• Marketing data: Marketing preference records and opt-in consents are retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.
• Technical and usage logs: Server logs and technical data are retained for a maximum of 12 months in identifiable form, after which they are anonymised or deleted.

Where retention beyond these periods is required by a specific legal obligation or ongoing dispute, data will be retained until that obligation or dispute is fully resolved.

8 Data Security

xbajii implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the xbajii platform
• Encrypted storage of sensitive personal and financial data at rest
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging
• Two-factor authentication (2FA) available to all registered players and enforced for internal administrative access
• Regular security assessments and vulnerability monitoring to identify and remediate potential threats to platform infrastructure
• Segregated data environments to prevent cross-contamination between production, testing, and analytics systems

While xbajii takes reasonable and proportionate steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for notifying xbajii promptly if you suspect any unauthorised access to your account.

9 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember user preferences, and to provide analytical data to site operators. xbajii uses cookies and similar tracking technologies (including local storage and session storage) on the xbajii.vip platform.

9.2 Types of Cookies We Use

• Strictly necessary cookies: Essential to the operation of the xbajii platform. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without preventing core platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations. Disabling these cookies may affect your experience but will not prevent access to the platform.
• Analytical cookies: Used to collect anonymised or pseudonymised data about how players interact with xbajii.vip, including page visit frequency, navigation paths, and feature usage. This data helps us improve the platform. No personal identifying information is transmitted in analytical cookie data.
• Security cookies: Used to detect and prevent fraudulent activity, account takeovers, and bot-driven interactions. These are strictly necessary for platform safety and cannot be disabled.

9.3 Managing Cookies

You may manage, restrict, or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or security cookies may prevent you from logging in or using core features of the xbajii platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

10 Your Privacy Rights

As a player on the xbajii platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request":

• Right of access: You may request a copy of the personal data xbajii holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Account details may also be updated directly through your account settings panel.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose it was collected, or where you withdraw consent for consent-based processing. Note that erasure requests cannot override xbajii's legal retention obligations (e.g., AML record-keeping requirements).
• Right to restriction of processing: You may request that xbajii restrict the processing of your data in specific circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where xbajii processes data based on your consent (e.g., direct marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of xbajii's legitimate interests. xbajii will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

11 Third-Party Links

The xbajii platform does not include links to external third-party websites. All navigation within xbajii.vip remains within the xbajii domain. However, game content delivered by providers such as Pragmatic Play, Evolution Gaming, and others may be hosted in iframes or sub-domains operated by those providers. xbajii is not responsible for the privacy practices of third-party game providers in respect of any data those providers independently collect through their game interfaces.

We recommend reviewing the privacy policies of any game provider whose interface you interact with directly, particularly for any live casino or in-game chat features that may involve direct data input into the provider's own system.

12 Children's Privacy

The xbajii platform is strictly intended for individuals aged 18 years and above. xbajii does not knowingly collect, process, or store personal data from individuals under the age of 18. If you are under 18, you must not use the xbajii platform or submit any personal information to us.

If xbajii becomes aware that personal data has been collected from a person under the age of 18 — whether through account registration, a support request, or any other means — that data will be deleted promptly and the associated account will be closed. If you believe a minor has submitted personal information to xbajii, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

13 Changes to This Privacy Policy

xbajii reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Any material changes to this Policy will be indicated by an updated "Last Updated" date at the top of this page.

Where changes are significant — for example, a new category of data collection or a new sharing arrangement with third parties — xbajii may notify registered players via email to the address associated with their account. Your continued use of the xbajii platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms.

We encourage you to review this Privacy Policy periodically to remain informed of how xbajii manages your personal data. If you have any concerns about a change to this Policy, please contact our support team before continuing to use the platform.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to xbajii's handling of your personal data, please contact our support team using the details below:

For responsible gaming concerns, self-exclusion requests, or deposit limit queries, please reference "Responsible Gaming" in your email subject line to ensure your message is routed to the appropriate team promptly.