xbaeej Privacy Policy

📌 Introduction

This Privacy Policy ("Policy") describes how xbaeej ("xbaeej", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "Player", "User") who access or use the xbaeej online gaming and sports betting platform at xbaeej.app. By registering an account or using any feature of the xbaeej platform, you acknowledge that you have read and understood this Policy.

xbaeej is committed to handling your personal data responsibly and in accordance with applicable data protection principles. We collect only the information that is genuinely necessary to operate our platform, process your transactions, comply with our legal obligations, and keep your account safe. We do not sell your personal data to third parties.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming page, which together form the complete agreement between you and xbaeej. If you have any questions about how your data is handled, contact us at [email protected].

xbaeej collects personal information through several means: directly from you when you register or use the platform, automatically through your device and browser when you visit xbaeej.app, and in limited cases from third-party service providers involved in processing your transactions. The categories of personal data we collect are set out below.

xbaeej uses the personal data it collects for clearly defined purposes. We do not process your data in ways that are incompatible with the purposes described in this Policy. Our primary purposes for processing personal data are as follows:

• Account Management: To create and maintain your xbaeej account, authenticate your identity when you log in, and apply account settings such as deposit limits or self-exclusion preferences.
• Payment Processing: To facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records associated with your account.
• Identity and Age Verification: To confirm that you are aged 21 or older and that the identity details you have provided are accurate, as required by our responsible gaming and anti-fraud policies.
• Security and Fraud Prevention: To detect and investigate suspicious activity, prevent unauthorised account access, identify potential money laundering, and protect the integrity of our platform and all players on it.
• Platform Improvement: To analyse aggregated, anonymised usage patterns in order to improve the performance, reliability, and user experience of xbaeej.app.
• Customer Support: To respond to your enquiries, resolve disputes, and track the history of your interactions with the xbaeej support team.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable laws and to respond to lawful requests from regulatory or law-enforcement authorities where required.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and, where appropriate, to reach out proactively with responsible gaming information or to apply account protections in line with your stated preferences.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you information about bonuses, seasonal promotions (such as BPL, Eid, and Pohela Boishakh offers), and new games or features available on xbaeej. You may opt out of marketing communications at any time by contacting [email protected].

xbaeej processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing:

• Contractual Necessity: Processing that is necessary to perform the contract between you and xbaeej — including account creation, payment processing, and the provision of gaming services — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring is carried out on the basis of xbaeej's legitimate interests in operating a safe and sustainable platform, provided that those interests are not overridden by your privacy rights.
• Legal Obligation: Processing that is necessary for xbaeej to comply with applicable laws — including identity verification, financial record-keeping, and cooperation with lawful regulatory or law-enforcement requests — is carried out on the basis of legal obligation.
• Consent: Processing for direct marketing communications is carried out only where you have given your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

xbaeej does not sell, rent, or trade your personal data to third parties for their own commercial use. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose.

• Payment Service Providers: We share transaction-related data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and is independently responsible for the data it holds.
• Game Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session and gameplay data necessary to deliver their games through the xbaeej platform and to investigate disputes about game outcomes.
• Identity Verification Services: We may use third-party KYC providers to assist with the verification of identity documents. These providers process your data under strict contractual data-processing agreements with xbaeej and may not use your data for any other purpose.
• IT Infrastructure and Hosting Providers: Our platform is hosted on secure cloud infrastructure. Hosting and infrastructure providers may process your data as part of their service delivery, but they do so solely under instruction from xbaeej and may not use your data independently.
• Legal and Regulatory Authorities: xbaeej may disclose personal data to government bodies, law enforcement agencies, or other regulatory authorities when required to do so by applicable law, a court order, or a lawful regulatory request. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of xbaeej's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to the privacy practices that may result from it.

xbaeej uses cookies and similar tracking technologies to deliver a functional and personalised experience on xbaeej.app. A cookie is a small text file placed on your device by our web server when you visit our platform. Cookies do not contain executable code and cannot be used to access other files on your device.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of xbaeej.app and may prevent you from accessing some features of the platform. xbaeej does not use cookies to serve third-party advertising.

xbaeej retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Registration Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to meet our legal and audit obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Identity Verification Documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
• Customer Support Correspondence: Retained for three (3) years from the date of the last communication in a support thread.
• Device and Technical Logs: Retained for up to twelve (12) months for security and fraud-investigation purposes, after which they are anonymised or deleted.
• Self-Exclusion Records: Where a player has elected permanent self-exclusion, a minimal record is retained indefinitely to prevent re-registration, in line with responsible gaming best practices.

Once the applicable retention period has expired, personal data is securely deleted or permanently anonymised so that it can no longer be linked to an individual. xbaeej conducts periodic data audits to ensure compliance with these retention schedules.

You have a number of rights in relation to the personal data xbaeej holds about you. To exercise any of these rights, please contact us in writing at [email protected]. We aim to respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of the personal data xbaeej holds about you, along with information about how it is processed, the purposes of processing, and the categories of data involved.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where retention is required by law or is necessary for the establishment, exercise, or defence of legal claims.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request that we provide your personal data to you in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on xbaeej's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

xbaeej takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

• SSL/TLS Encryption: All data transmitted between your device and xbaeej.app is encrypted in transit using SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection is secured.
• Encrypted Data Storage: Sensitive personal data, including identity verification documents and financial records, is stored in encrypted form on secured servers with access restricted to authorised personnel only.
• Access Controls: Access to personal data within xbaeej is limited on a strict need-to-know basis. All staff who have access to personal data are subject to confidentiality obligations and receive regular data-protection training.
• Intrusion Detection: xbaeej employs automated intrusion-detection systems that monitor platform activity for anomalous patterns and trigger alerts for human review when suspicious behaviour is detected.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, xbaeej will notify affected individuals as promptly as practicable and will take immediate steps to contain and remediate the breach.

While xbaeej implements industry-standard security measures, no system connected to the internet can be guaranteed to be completely secure. You are also responsible for keeping your own login credentials confidential and for using a strong, unique password for your xbaeej account.

xbaeej is strictly an adults-only platform. Access is permitted only to individuals aged 21 years or older. We do not knowingly collect personal data from or about any person under the age of 21. If xbaeej discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, we will immediately suspend the associated account and securely delete all personal data relating to that individual without undue delay.

If you are a parent or guardian and believe that your child has registered an account on xbaeej.app, please contact us immediately at [email protected] and we will take prompt action to close the account and remove the data.

xbaeej reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where reasonably practicable, notify registered players via the mobile number or email address associated with their account. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the xbaeej platform following the publication of any amended Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the platform and request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way xbaeej handles your personal data, please contact our Data Protection team. We aim to respond to all written enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6). Our contact address is: [email protected]