xbajee apk Privacy
Policy

1 Information We Collect

xbajee apk collects personal data from players in Bangladesh in order to operate its sports betting and casino services safely, securely, and in compliance with applicable regulations. We collect only the data that is necessary for the specific purpose for which it is gathered. The categories of personal data we collect are set out below.

1.1 Registration & Identity Data

When you create an account on xbajee apk, we collect your legal full name (as it appears on your Bangladesh NID or passport), date of birth, gender, nationality, residential address (including district, division, and postcode within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), registered email address, and Bangladesh mobile number (+880). This data is required to create and manage your player account and to verify your identity under our Know Your Customer (KYC) obligations.

1.2 Identity Verification (KYC) Documents

To comply with responsible gaming and anti-money-laundering obligations, xbajee apk requires players to submit identity documents before processing their first withdrawal. The documents we may request include:

• Bangladesh National Identity Card (NID) — front and back image
• Valid Bangladesh passport — photo page scan or photograph
• Bangladesh driving licence
• Proof of residential address (utility bill or bank statement dated within 90 days)
• Proof of payment method ownership (screenshot of bKash, Nagad, or Rocket wallet registered to your name)

KYC documents are stored securely, encrypted at rest, and accessed only by authorised xbajee apk compliance personnel. They are never shared with third parties for marketing purposes.

1.3 Financial & Transaction Data

We collect records of all deposit and withdrawal transactions on your xbajee apk account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard), transaction amount in BDT, date and time (in BST, UTC+6), and transaction reference numbers assigned by the payment provider. We do not store full card numbers or mobile wallet PINs — only the last four digits of card numbers and the masked wallet number are retained for transaction record purposes.

1.4 Gameplay & Betting Activity Data

xbajee apk records all betting and gaming activity on your account, including sports bets placed (market, selection, odds, stake, settlement), casino game sessions (game title, game provider, session duration, bet amount, result), crash game rounds (Aviator, Dinosaur Tycoon), and live casino table activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and improvement of our game offering.

1.5 Technical & Device Data

When you access xbajee apk, our servers automatically collect the following technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, time zone (Bangladesh Standard Time), referring URL, and pages visited within the xbajee apk platform. This data is used for security monitoring, fraud detection, and platform optimisation.

1.6 Communications Data

When you contact xbajee apk customer support via live chat, email ([email protected]), or WhatsApp, we retain a record of the communication, including the content of your message, the date and time of contact, and the resolution outcome. This enables our support team to provide consistent, high-quality assistance and to track recurring issues.

2 How We Use Your Data

xbajee apk uses your personal data only for the specific, lawful purposes described in this section. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. Every use of your data is tied to a legitimate operational, legal, or safety need.

2.1 Marketing Communications

If you have opted in to receive marketing communications during registration or via Account Settings, xbajee apk may send you promotional emails or SMS notifications about bonuses, seasonal offers (e.g., Eid promotions, Pohela Boishakh bonus, BPL season reload offers), and new game launches. You may withdraw your marketing consent at any time by clicking the unsubscribe link in any email or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the xbajee apk platform.

2.2 Automated Decision-Making

xbajee apk uses automated systems for certain risk and fraud assessments, including flagging unusual login locations, detecting duplicate accounts, and identifying betting patterns that may indicate abuse of promotional terms. Where an automated decision significantly affects your account (such as a temporary suspension), you have the right to request a manual review by a human member of our compliance team. Contact [email protected] to exercise this right.

3 Legal Basis for Processing

xbajee apk processes your personal data on one or more of the following lawful bases, depending on the category of data and the purpose of processing:

• Contractual necessity: Processing that is required to fulfil the contract between you and xbajee apk — for example, creating your account, processing your bKash or Nagad deposit, settling your cricket bet, or paying out your winnings.
• Legal obligation: Processing that xbajee apk is required to perform in order to comply with applicable laws and regulations — for example, conducting KYC identity checks, retaining transaction records, and applying responsible gaming tools.
• Legitimate interests: Processing carried out to pursue xbajee apk's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud detection, platform security monitoring, and anonymised analytics to improve the service.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — for example, sending you promotional SMS or email communications about xbajee apk bonuses, new game titles from Pragmatic Play or Spribe, or BPL season betting offers. You may withdraw consent at any time.

4 Data Sharing & Third Parties

xbajee apk shares your personal data only with trusted third-party service providers who are necessary for the operation of our platform, and only to the extent required for the specific service they provide. We do not sell your data. All third-party processors are contractually obligated to protect your data and process it only on xbajee apk's documented instructions.

4.1 Payment Processors

To process your deposit and withdrawal transactions, xbajee apk shares relevant transaction data with the payment service providers you choose — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and international card networks (Visa, Mastercard). These providers receive only the data necessary to authenticate and complete the transaction. Each payment provider is governed by its own privacy policy.

4.2 Game Content Providers

Game software on xbajee apk is provided by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from these providers, technical session data (player ID, session token, game round ID, stake and result) is transmitted to the provider's servers for game operation and audit purposes. These providers do not receive your personal identity data (NID, full name, address) unless required by their own regulatory obligations.

4.3 KYC & Identity Verification Services

xbajee apk may use third-party identity verification services to authenticate the documents you submit during KYC. These services process your NID image, passport data, and address proof solely for identity verification purposes and are contractually prohibited from retaining or repurposing your documents.

4.4 Analytics & Security Providers

We use third-party analytics and security platforms to monitor platform performance, detect fraud, and identify suspicious activity patterns. These providers receive anonymised or pseudonymised technical data (IP address, device fingerprint, session timestamps) and do not have access to your personal identity or financial records.

4.5 Legal & Regulatory Disclosure

xbajee apk may be required to disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies in response to a lawful request, court order, or legal process. In such cases, we disclose only the minimum data required by the specific request and will notify you where we are legally permitted to do so.

5 Cookies & Tracking

xbajee apk uses cookies and similar tracking technologies to deliver a functional, personalised, and secure platform experience. Cookies are small text files stored on your device when you visit the xbajee apk website. Below is a summary of the cookie categories we use.

5.1 Managing Cookies

You can control non-essential cookies through your browser settings (Chrome, Firefox, Samsung Internet, or the browser embedded in your Grameenphone, Robi, Banglalink, or Teletalk device). Disabling functional or analytics cookies may affect your experience on the xbajee apk platform but will not prevent you from placing bets or accessing your account. Disabling essential or security cookies will prevent platform login and is not recommended.

5.2 Third-Party Tracking

Game content iframes from providers such as Evolution Gaming, Pragmatic Play, and Spribe may set their own cookies to maintain game session state. These cookies are governed by the respective provider's cookie policy. xbajee apk does not control the cookie practices of third-party game studios.

6 Data Retention

xbajee apk retains your personal data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. The retention periods below reflect our standard practice; longer retention may apply where required by a specific legal obligation or an ongoing investigation.

Upon the expiry of the applicable retention period, xbajee apk will securely delete or anonymise your personal data so that it can no longer be attributed to you. Anonymised aggregate data (e.g., statistical reports on platform usage trends) may be retained indefinitely as it does not constitute personal data.

7 Your Privacy Rights

As a player on xbajee apk, you have the following rights in relation to your personal data. To exercise any of these rights, contact our data protection team at [email protected] with the subject line "Privacy Rights Request" and include your registered account email and mobile number for identity verification. We will respond within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of all personal data xbajee apk holds about you. We will provide a structured, machine-readable summary of your registration data, transaction history, KYC status, and betting activity upon verified request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For account name, date of birth, or address corrections, a supporting document (updated NID or utility bill) may be required.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and our retention period has expired, or where you withdraw consent and there is no other lawful basis for processing. Please note that we cannot delete data we are legally required to retain (e.g., financial transaction records mandated by applicable law). Erasure requests that conflict with legal retention obligations will be partially fulfilled: data beyond the legally required scope will be deleted, and the remainder will be retained only for the duration required by law.

7.4 Right to Data Portability

Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV) so that you can transfer it to another service provider of your choosing.

7.5 Right to Object

You have the right to object to processing based on xbajee apk's legitimate interests (e.g., platform analytics) at any time. You also have the absolute right to object to the use of your data for direct marketing purposes; this objection will be honoured immediately without requiring justification.

7.6 Right to Restrict Processing

In certain circumstances (e.g., while you contest the accuracy of data we hold, or where you have objected to processing and we are assessing that objection), you may request that we restrict our processing of your data to storage only.

8 Data Security

xbajee apk implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security framework is designed to safeguard the personal data of every player across Bangladesh, from Dhaka and Chittagong to Cox's Bazar and Mymensingh.

8.1 Technical Security Measures

• TLS/SSL Encryption: All data in transit between your device and xbajee apk servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms an active SSL connection.
• Encryption at Rest: Sensitive data including KYC documents, financial records, and account credentials are encrypted at rest using AES-256 encryption on our servers.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a modern one-way cryptographic algorithm (bcrypt) with per-account salts.
• Two-Factor Authentication (2FA): xbajee apk offers SMS OTP-based 2FA for all accounts. Players are strongly encouraged to enable 2FA via Account Settings.
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems that alert the security team to anomalous access patterns in real time.
• Regular Security Audits: xbajee apk commissions periodic third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.

8.2 Organisational Security Measures

• Access to personal data is restricted on a strict need-to-know basis; only authorised personnel with a documented business need may access player records.
• All xbajee apk staff who handle personal data receive mandatory data protection training as part of their onboarding and annually thereafter.
• Third-party processors who handle data on xbajee apk's behalf are subject to contractual data processing agreements requiring equivalent security standards.

8.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, xbajee apk will notify affected players by email to their registered address as soon as reasonably practicable, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps xbajee apk is taking to contain and remediate the incident.

9 Policy Updates & Contact

xbajee apk reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When we make material changes to this policy, we will notify registered players by email to their account's registered address and by placing a prominent notice on the xbajee apk homepage for a minimum of 14 days before the changes take effect.

The "Last Updated" date at the top of this page and in the sidebar indicates when the current version of the policy entered into effect. We encourage you to review this Privacy Policy periodically — especially before each BPL season, Eid, or major T20 tournament, when promotional data processing may be at its most active — to remain informed of how xbajee apk handles your personal information.

Continued use of the xbajee apk platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change, you may close your account and request erasure of non-legally-required data by contacting our support team.

9.1 How to Contact Us About Privacy

For all privacy-related enquiries, data subject access requests, consent withdrawal, or complaints about our data practices, please contact the xbajee apk Data Protection team using the details below. All communications must be in English and sent from your registered account email address for identity verification purposes.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 30 calendar days of receipt (BST business hours, UTC+6)
• Operating hours: 09:00 – 22:00 BST, seven days a week including Bangladesh public holidays
• WhatsApp support: +880 1800 000 000 (09:00 – 22:00 BST, for general account queries)
• Live Chat: Available 24/7 via the xbajee apk account dashboard

9.2 Complaints

If you believe xbajee apk has not handled your personal data in accordance with this Privacy Policy, we encourage you to contact us directly in the first instance so we can investigate and resolve the matter promptly. We take all data protection complaints seriously and will acknowledge receipt of your complaint within 5 business days.