xbaij Privacy Policy
At xbaij, the privacy of every player on our platform is a responsibility we take seriously. This Privacy Policy sets out exactly what personal data we collect, why we collect it, how it is stored and processed, who we share it with, and what rights you hold over your information. We encourage you to read this document in full before registering your account.
Data Controller: xbaij acts as the data controller for all personal information collected through the platform, including during account registration, gameplay, deposits, withdrawals, and customer support interactions. By using xbaij, you consent to the data practices described in this Privacy Policy. This policy applies to all users accessing xbaij from Bangladesh and any other jurisdiction. The governing language of this policy is English.
Identity Verification
We collect identity data to comply with KYC (Know Your Customer) requirements and ensure every registered xbaij account belongs to a real, eligible adult aged 18 or older.
SSL Encryption
All data transmitted between your device and the xbaij platform is protected by industry-standard TLS/SSL encryption. Sensitive fields such as passwords are hashed and never stored in plain text.
Payment Data Protection
xbaij does not store full payment credentials. Mobile banking references (bKash, Nagad, Rocket, Upay) and bank transaction IDs are retained for audit and fraud-prevention purposes only.
No Data Selling
xbaij does not sell, rent, or trade your personal data to third-party advertisers or marketing agencies. Your information is used exclusively to operate, secure, and improve the platform.
User Control
Registered players have the right to access, correct, or request deletion of their personal data at any time by contacting the xbaij support team. Requests are handled within 14 calendar days.
Bangladesh-Aware Practices
xbaij processes all player data with awareness of the Bangladesh market context, including local payment identifiers and BST time-zone logging for transaction records and session data.
Data We Collect
xbaij collects personal data through several interaction points on the platform — primarily at account registration, during ongoing gameplay and transactions, through customer support interactions, and via automated technical mechanisms such as cookies and server logs. The categories of data we collect are described in detail below.
Registration & Identity Data
When you create an xbaij account, you are required to provide personal information that allows us to verify your identity, confirm your age eligibility (18+), and set up your wallet. This includes:
- Full legal name as it appears on your national identity document.
- Date of birth, used to verify compliance with the 18+ age restriction.
- Residential address, including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
- Mobile number registered in Bangladesh, used for account verification, two-factor authentication, and transactional notifications.
- Email address (where provided), used for account-related communications and support correspondence.
- Username and hashed password credentials created at registration.
KYC Verification Documents
As part of our Know Your Customer (KYC) programme, xbaij may request and retain copies of identity and address verification documents, including national ID cards, passports, utility bills, or bank statements. These documents are stored securely and used solely for the purpose of verifying player eligibility and satisfying anti-money-laundering obligations.
Financial Transaction Data
- Deposit and withdrawal transaction records, including amounts in BDT, timestamps in Bangladesh Standard Time (BST, UTC+6), and transaction reference numbers.
- Mobile banking identifiers associated with bKash, Nagad, Rocket, and Upay transactions — specifically the sender mobile number and transaction ID. Full mobile banking PINs or passwords are never collected.
- Bank account references for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank transactions where applicable.
- Wallet balance history and bonus credit/debit records.
Gameplay & Betting Activity Data
- Game session logs, including game titles, session start and end times, stake amounts, and win/loss outcomes across casino games, slots, fishing games, and sports betting markets.
- Sports betting selections, including markets, odds accepted, stake amounts, and settlement results.
- Bonus redemption records and wagering progress toward promotional requirements.
- Responsible gaming tool settings, including any deposit limits, cooling-off periods, or self-exclusion events associated with your account.
Technical & Device Data
- IP address at the time of login and gameplay sessions.
- Device type, operating system, and browser version.
- Session duration and navigation patterns within the platform.
- Geolocation data derived from IP address (country and city level, not GPS-level precision).
| Data Category | Collection Point | Retention Period |
|---|---|---|
| Identity & Registration Data | Account registration form | Duration of account + 5 years post-closure |
| KYC Documents | KYC verification request | 5 years from submission date |
| Financial Transaction Data | Deposit/withdrawal processing | 7 years (audit compliance) |
| Gameplay & Betting Logs | Platform game sessions | 3 years from session date |
| Technical & Device Data | Automated server logging | 12 months on a rolling basis |
| Support Correspondence | Live chat, email support | 3 years from last contact |
How We Use Your Data
xbaij processes personal data only for defined, lawful purposes. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent or fulfilling a legal obligation that requires it. The primary purposes for which your data is used are:
Account Management & Platform Operation
- Creating and managing your xbaij player account, including wallet setup, balance management, and account security settings.
- Authenticating your identity at login, including two-factor authentication via your registered Bangladesh mobile number.
- Processing deposits and withdrawals through your selected payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and maintaining accurate transaction records.
- Delivering game content, sports betting markets, and promotional offers relevant to your account status and activity history.
Legal & Regulatory Compliance
- Conducting KYC identity verification and age confirmation in accordance with our 18+ policy.
- Meeting anti-money-laundering (AML) obligations, including transaction monitoring and suspicious activity reporting where legally required.
- Responding to lawful requests from competent authorities, including court orders and official investigations.
- Maintaining financial records for the statutory audit periods specified in our Data Retention schedule.
Safety, Fraud Prevention & Fair Play
- Detecting and investigating suspected instances of fraud, money laundering, bonus abuse, multi-accounting, or use of prohibited automated tools.
- Enforcing self-exclusion orders and cooling-off periods, including suppressing marketing communications to accounts under active exclusion.
- Monitoring for irregular betting patterns or gameplay behaviour that may indicate collusion or match-fixing activity.
Customer Support & Communications
- Responding to support enquiries submitted via live chat or email at support [at] xbaij.com.
- Sending transactional notifications (deposit confirmations, withdrawal updates, KYC request alerts) to your registered mobile number or email address.
- Delivering promotional communications regarding bonuses, seasonal offers (such as Eid, BPL, or T20 World Cup promotions), and platform updates — where you have not opted out of marketing messages.
Marketing Opt-Out: You may withdraw consent to receive promotional communications from xbaij at any time by contacting support [at] xbaij.com with the subject line "Marketing Opt-Out". Transactional and account-security messages cannot be disabled as they are necessary for platform operation.
Data Sharing & Disclosure
xbaij does not sell, rent, or commercially transfer your personal data to any third party. However, certain categories of data are shared with trusted operational partners and authorities under strictly controlled conditions, as described below. In all cases, third-party recipients are contractually required to handle your data securely and to use it only for the specific purpose for which it was shared.
Game Studio & Platform Technology Partners
xbaij sources its casino and sports betting content from licensed third-party game studios and platform technology providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive limited session-level data — such as player session tokens, game IDs, and stake amounts — solely for the purpose of delivering the game experience and settling outcomes. Game studios do not receive your full identity or payment data.
Payment Processing Partners
To process your deposits and withdrawals, xbaij shares the minimum necessary transaction data with the relevant payment processor for each method you use — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. This typically includes your registered mobile number or bank account reference and the transaction amount in BDT. Payment processors operate under their own privacy policies and security frameworks.
Regulatory & Legal Authorities
- xbaij will disclose personal data to competent legal authorities when required to do so by a valid court order, regulatory instruction, or applicable law, without prior notice to the account holder where disclosure of the request is itself legally restricted.
- In cases of suspected money laundering or serious financial crime, xbaij may be required to file reports with relevant financial intelligence authorities. Such filings may include transaction data and identity information.
Fraud Prevention & Security Services
xbaij uses specialist third-party fraud detection and identity verification services to assist with KYC processes and real-time transaction monitoring. These service providers are bound by data processing agreements that restrict use of your data to the specific fraud-prevention or verification function for which it was shared.
No Cross-Border Selling: xbaij does not transfer your personal data to data brokers, advertising networks, or any entity whose business model involves reselling consumer data. We have no commercial data-sharing arrangements of this nature.
Data Retention
xbaij retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The retention periods set out in the Data We Collect section above serve as our standard data lifecycle schedule. The following principles govern how we manage data at the end of its retention period:
- Financial transaction records are retained for a minimum of seven years following the transaction date to satisfy standard financial audit requirements. This applies regardless of whether the associated account has been closed.
- KYC identity documents are retained for five years from the date of submission. After this period, document files are securely destroyed and only a confirmation record of the verification outcome is retained.
- Gameplay and betting session logs are retained for three years on a rolling basis and then permanently deleted from production and backup systems.
- Accounts that have been voluntarily closed by the player, or closed by xbaij following a policy breach, retain only the minimum data necessary for legal compliance purposes. Active account credentials are deactivated immediately upon closure.
- Data collected via cookies that falls within the analytics category is anonymised rather than deleted — meaning it is stripped of any fields that could identify an individual player, after which it may be retained indefinitely for aggregate trend analysis.
Where a player submits a formal data deletion request (see Your Privacy Rights below), xbaij will assess the request against any outstanding legal retention obligations before processing the deletion. Data subject to a mandatory audit or legal hold period cannot be deleted until that period expires, even if a deletion request has been received.
Data Security Measures
xbaij implements a layered security framework designed to protect personal and financial data from unauthorised access, alteration, disclosure, or destruction. Our security posture is reviewed regularly and updated in response to emerging threats in the online gaming and financial services sectors.
- TLS/SSL Encryption in Transit: All data exchanged between your browser or device and the xbaij platform is encrypted using TLS 1.2 or higher. This prevents interception of your session data, login credentials, and payment references during transmission.
- Password Hashing: Account passwords are never stored in readable form. xbaij uses industry-standard one-way cryptographic hashing (bcrypt with salting) so that even internal staff cannot retrieve your plain-text password.
- Two-Factor Authentication (2FA): xbaij supports and encourages two-factor authentication via one-time passcodes sent to your registered Bangladesh mobile number. This adds a second verification layer on top of your password at login.
- Access Controls: Access to player personal data within xbaij's internal systems is restricted on a strict need-to-know basis. Customer support agents, compliance staff, and finance personnel each have role-based access limited to the data categories relevant to their function.
- Intrusion Detection & Monitoring: xbaij's infrastructure is monitored continuously for anomalous access patterns, brute-force login attempts, and unusual transaction behaviour. Automated alerts trigger rapid-response procedures when threshold events are detected.
- Secure Data Centres: Player data is stored on servers housed in facilities with physical access controls, redundant power systems, and environmental monitoring. Regular data backups are encrypted and stored separately from primary production systems.
Your Role in Security: While xbaij takes extensive measures to protect your data on the platform side, the security of your account also depends on the strength of your password and the confidentiality of your login credentials. Never share your xbaij username, password, or 2FA codes with any other person. xbaij support staff will never ask for your password.
Your Privacy Rights
As a player on the xbaij platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to support [at] xbaij.com with your full registered name and account username. xbaij will acknowledge your request within 48 hours and provide a substantive response within 14 calendar days.
Please note that exercising certain rights — in particular the right to erasure or the right to restrict processing — may affect your ability to continue using the xbaij platform. For example, if data required for KYC compliance is deleted, xbaij will be unable to process future withdrawals until re-verification is completed. xbaij will clearly explain any such implications when responding to your rights request.
Policy Updates & Contact
xbaij reserves the right to update or revise this Privacy Policy at any time to reflect changes in platform operations, applicable data protection standards, or legal requirements. When material changes are made, the updated policy will be published on this page with a revised effective date. We encourage all players to review this page periodically to stay informed about how their data is being handled.
Continued use of the xbaij platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any change to the policy, you should discontinue use of the platform and may request account closure by contacting our support team.
Contact Our Privacy Team
For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data on xbaij, please contact us using the details below. All privacy-related enquiries are handled in English and acknowledged within 48 hours.
Privacy Contact: support [at] xbaij.com — please include "Privacy Request" in your subject line along with your registered account username and full name so we can locate your records promptly. Our privacy team operates during Bangladesh Standard Time (BST, UTC+6) business hours, Monday through Sunday.
xbaij is committed to resolving all privacy-related concerns promptly and fairly. If you feel your request has not been handled adequately, you may escalate by sending a formal written complaint addressed to the xbaij Data Protection Officer via the same support email address. Formal complaints are reviewed by senior staff and receive a written response within 14 calendar days.
Your Privacy Is Protected at xbaij
Now that you understand how xbaij handles your data, explore our platform with confidence. Visit the casino, check out our cricket and slots offerings, or review our FAQ for more details. 18+ only. Play responsibly.