xbaji Privacy Policy – How We Handle Your Personal Data

1 Who We Are

xbaji is an online gaming and sports betting platform operating at xbaji.co. When this Privacy Policy refers to "xbaji", "we", "us", or "our", it means the xbaji platform and the team responsible for operating it. xbaji acts as the data controller for all personal data collected through the platform.

If you have any questions about how xbaji handles your personal data, or if you wish to exercise any of your data rights, you can contact the xbaji privacy team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

2 Data We Collect

xbaji collects personal data in the following categories. We only collect what is genuinely necessary to provide the service and meet our legal obligations.

xbaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required by law and with your explicit consent.

3 How We Use Your Data

xbaji uses your personal data for the following purposes:

• Account Management: To create and manage your xbaji account, verify your identity, and maintain accurate records.
• Service Delivery: To process your bets, deposits, and withdrawals, and to provide access to all xbaji games and features.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the platform.
• Legal Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Customer Support: To respond to your queries, resolve disputes, and improve the quality of our support service.
• Responsible Gaming: To monitor gaming patterns and identify players who may need responsible gaming support or intervention.
• Platform Improvement: To analyse usage patterns and improve the performance, design, and features of the xbaji platform.
• Marketing Communications: To send you relevant promotions and offers — but only where you have opted in to receive marketing communications. You can opt out at any time.

xbaji will never use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

4 Legal Basis for Processing

xbaji processes your personal data on the following legal bases:

• Contract Performance: Processing that is necessary to provide the xbaji service to you under the Terms and Conditions you agreed to at registration.
• Legal Obligation: Processing that is required to comply with applicable laws, including AML regulations, KYC requirements, and tax reporting obligations.
• Legitimate Interests: Processing that is necessary for xbaji's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights.
• Consent: Processing that is based on your explicit consent, such as sending marketing communications. You may withdraw your consent at any time by contacting [email protected].

5 Data Sharing

xbaji does not sell your personal data. We share your data only in the following limited circumstances:

• Game Providers: xbaji works with licensed third-party game providers to deliver certain games on the platform. These providers may receive limited technical data necessary to operate the games. They are contractually prohibited from using this data for any other purpose.
• Payment Processors: When you make a deposit or withdrawal, your transaction data is shared with the relevant mobile wallet provider (bKash, Nagad, or Rocket) to process the payment. xbaji does not store your full wallet credentials.
• Identity Verification Services: xbaji may use third-party KYC verification services to confirm your identity. These services receive only the data necessary to complete the verification process.
• Legal Authorities: xbaji may disclose your personal data to law enforcement, regulatory authorities, or courts where required to do so by law or in response to a valid legal request.
• Business Transfers: In the event of a merger, acquisition, or sale of xbaji's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance.

All third parties with whom xbaji shares personal data are required to maintain appropriate security standards and to use the data only for the specified purpose.

6 Payment Data

xbaji takes the security of your financial data extremely seriously. When you make a deposit or withdrawal using bKash, Nagad, or Rocket, the transaction is processed directly through the mobile wallet provider's secure payment infrastructure.

xbaji does not store your full mobile wallet PIN or password at any point. Transaction records — including amounts, dates, and wallet numbers — are retained for the period required by applicable financial regulations and for the purpose of resolving any payment disputes.

7 Cookies and Tracking

xbaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. The following types of cookies are used:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as your preferred language or display settings. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to collect anonymised data about how players use the platform, which pages are most visited, and where technical issues occur. This data helps xbaji improve the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the xbaji platform. xbaji does not use third-party advertising cookies or share cookie data with advertisers.

8 Data Retention

xbaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of 5 years after account closure, as required by AML regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• Support Communications: Retained for 2 years from the date of the last communication, unless a longer period is required for dispute resolution.
• Technical and Usage Data: Retained for up to 12 months, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for as long as you remain opted in, plus 1 year after you opt out, as evidence of your consent history.

When personal data is no longer required, xbaji securely deletes or anonymises it in accordance with our data disposal procedures.

9 Your Rights

As an xbaji player, you have the following rights over your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 5 business days.

10 Children's Privacy

The xbaji platform is strictly for adults aged 18 and over. xbaji does not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered an account on xbaji, please contact us immediately at [email protected]. We will investigate and close the account promptly, deleting any associated personal data.

xbaji uses age verification checks during the registration process to prevent minors from accessing the platform. If a player is found to be under 18 at any point, their account will be closed immediately and any funds will be returned to the payment source after verification.

11 Data Security

xbaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS encryption for all data transmitted between your device and xbaji's servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data.
• Regular security audits and penetration testing of the xbaji platform.
• Automated monitoring systems that detect and alert on suspicious access patterns.
• Staff training on data protection and security best practices.

While xbaji takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, xbaji will notify you as required by applicable law and will take immediate steps to contain and remediate the breach.

12 Changes to This Policy

xbaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When changes are made, the updated policy will be published on this page with a revised "last updated" date.

For significant changes that materially affect how we use your personal data, xbaji will notify registered players via email or an in-platform notification before the changes take effect. Your continued use of the xbaji platform after any update constitutes your acknowledgement of the revised policy.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please get in touch with the xbaji privacy team:

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe xbaji has not handled your personal data in accordance with applicable law. xbaji encourages you to contact us first so we can try to resolve your concern directly.