xbajje Privacy Policy

This Privacy Policy ("Policy") is issued by xbajje ("xbajje", "we", "us", "our") and applies to all personal data collected, stored, processed, or shared in connection with your use of the xbajje website at xbajje.ws, its mobile browser interface, and any associated services, promotions, or communications (collectively, the "Platform").

By registering an account, logging in, making a deposit, or otherwise accessing any part of the xbajje Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not use the Platform.

This Policy forms an integral part of the xbajje Terms & Conditions. Capitalised terms used but not defined in this Policy carry the meanings given to them in the Terms & Conditions.

xbajje is committed to handling your personal information responsibly and in accordance with internationally recognised data protection principles. We implement appropriate technical and organisational measures to keep your data secure at all times.

xbajje collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third-party service providers where relevant. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Valid email address registered in your name.
• Mobile phone number — a Bangladesh-registered number is required for account verification and OTP delivery.
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other Bangladeshi city).
• Username and encrypted account password.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence).
• Proof of residential address (utility bill, bank statement, or equivalent document dated within three months).
• Proof of payment method ownership (screenshot or statement confirming bKash, Nagad, Rocket, or bank account details match your registered name).
• Selfie or live photograph where required by our KYC verification process.

2.3 Financial and Transaction Data

• Deposit amounts, dates, times, and payment method identifiers (e.g., masked bKash or Nagad wallet numbers).
• Withdrawal requests, amounts, and processing status.
• Bonus claims, wagering activity, and promotional transaction history.
• Running account balance and transaction logs maintained for audit purposes.

2.4 Gameplay and Betting Data

• Game sessions, bet amounts, game outcomes, and win/loss records across all products (cricket betting, live casino, slots, crash games, and others).
• Sports betting selections, odds accepted, and settlement results.
• Session duration, frequency of play, and responsible gaming tool usage.

2.5 Technical and Device Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type and version.
• Unique device identifiers used for fraud prevention and multi-account detection.
• Cookie data and session tokens (see Section 7 for full cookie details).
• Log data including access times, pages visited, and error reports.

2.6 Communications Data

• Records of your correspondence with xbajje support, including email threads, live chat transcripts, and any supporting documents you submit.
• Survey responses and feedback submissions where you voluntarily participate.
• Marketing communication preferences and opt-in/opt-out records.

xbajje processes your personal data only for clearly defined and lawful purposes. We do not use your data for purposes incompatible with those set out in this Policy. The primary purposes for which we process personal data are as follows:

1. Account management: Creating, maintaining, and administering your xbajje player account, including processing login sessions, resetting passwords, and managing account preferences.
2. Age and identity verification: Confirming that you meet the mandatory 21+ age requirement and verifying your identity in accordance with our Know Your Customer (KYC) obligations.
3. Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers, and processing withdrawal requests to your verified payment method.
4. Service delivery: Providing access to casino games, sports betting markets, live dealer tables, crash games, and all other products and features available on the xbajje Platform.
5. Bonus and promotion administration: Crediting eligible bonuses, tracking wagering progress, and managing promotional campaigns including Eid, Pohela Boishakh, and other seasonal offers.
6. Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorised access. This includes sharing data with payment processors and fraud-detection services under contractual safeguards.
7. Responsible gaming compliance: Monitoring gameplay patterns to identify potential problem gambling behaviours, enforcing self-exclusion and deposit limit requests, and making responsible gaming resources available to affected players.
8. Legal and regulatory compliance: Maintaining records required by applicable anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations, and responding to lawful requests from competent authorities.
9. Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
10. Marketing communications: Where you have provided explicit consent, sending you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, tournaments, and seasonal offers. You may withdraw this consent at any time by contacting [email protected].
11. Platform improvement: Analysing aggregated, anonymised usage data to improve the xbajje Platform, personalise your experience, and develop new features and products.

xbajje does not share personal data with third parties except in the circumstances described below. In every case, data sharing is governed by written agreements that require the recipient to maintain appropriate data security standards and to use your data only for the specified purpose.

4.1 Payment Service Providers

To process deposits and withdrawals, xbajje shares transaction data with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. The data shared is limited to what is strictly necessary to complete the transaction and verify payment method ownership.

4.2 Game Content Providers

Games on the xbajje Platform are supplied by internationally recognised studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a pseudonymous player identifier and bet/game result data for the purpose of delivering and auditing game sessions. They do not receive your name, contact details, or financial information beyond what is technically necessary for game delivery.

4.3 Identity Verification and Fraud Prevention Services

xbajje may engage third-party KYC and fraud-detection service providers to assist with identity verification, document authentication, and detection of fraudulent or suspicious activity. These providers operate under strict confidentiality agreements and process your data solely for the verification purpose.

4.4 Legal and Regulatory Disclosure

xbajje will disclose personal data to competent governmental, regulatory, or law enforcement authorities where we are legally required to do so — for example, in response to a court order, a lawful request under AML or CTF regulations, or an investigation into suspected financial crime. We will, where legally permitted, notify you of such a disclosure.

xbajje retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The table below sets out the standard retention periods that apply to different categories of data.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

xbajje uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that allow the Platform to recognise your browser, maintain your session, and remember your preferences between visits.

The following types of cookies are used on the xbajje Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming tool selections. These improve your experience but are not essential for the Platform to operate.
• Analytics cookies: Allow xbajje to understand how players interact with the Platform — which pages are visited most frequently, where users drop off, and how features are used. This data is aggregated and anonymised and is used solely to improve the Platform.
• Fraud prevention cookies: Used to identify and flag suspicious access patterns, multi-account behaviour, and other anomalies that may indicate fraudulent activity. These are a legitimate interest of xbajje in maintaining Platform security.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your xbajje account. For full cookie management instructions, refer to your browser's help documentation.

As a player on the xbajje Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact [email protected] with a clear description of your request and your registered account username. We will acknowledge your request within 48 hours and aim to fulfil it within 30 calendar days.

1. Right of access: You may request a full copy of the personal data xbajje holds about you, along with information about how it is processed and with whom it is shared.
2. Right to rectification: If any personal data we hold about you is inaccurate, incomplete, or out of date, you may request that it be corrected or updated.
3. Right to erasure: You may request that we delete your personal data. We will honour this request where no overriding legal obligation requires continued retention (see Section 5 for retention requirements).
4. Right to restrict processing: In certain circumstances, you may request that we pause processing of your data — for example, while a dispute over data accuracy is being resolved.
5. Right to data portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
6. Right to object: You may object to xbajje processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though we may be entitled to continue processing if we can demonstrate compelling legitimate grounds.
7. Right to withdraw consent: Where processing is based on your consent — in particular, marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

xbajje will not charge a fee for handling standard data rights requests made in good faith. We reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive in nature.

xbajje takes data security seriously and implements a layered approach to protecting personal information stored on and transmitted through the Platform. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS 1.2 or higher) for all data in transit between your device and xbajje servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment method records.
• Password hashing using industry-standard bcrypt or equivalent algorithms. xbajje staff cannot view your plain-text password.
• Two-factor authentication (2FA) option available for all player accounts, delivered via SMS OTP to your registered Bangladesh mobile number.
• Intrusion detection and prevention systems monitoring for unauthorised access attempts.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Strict internal access controls ensuring that employee access to personal data is limited to what is necessary for their specific role.
• Staff training on data handling responsibilities and security awareness.

While xbajje employs robust security measures, no online system can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, xbajje will notify affected players without undue delay and take all appropriate steps to contain and remediate the breach.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how xbajje handles your personal data, please contact us using the details below:

If you are not satisfied with xbajje's response to a privacy complaint, you have the right to escalate your concern to the appropriate data protection authority in your jurisdiction. xbajje will cooperate fully with any such investigation.