Privacy Policy — xbajiapp

xbajiapp ("the Platform", "we", "us", "our") is committed to protecting the privacy of every player who uses our online casino and sports betting services. This Privacy Policy describes our practices regarding the collection, storage, use, disclosure, and protection of personal data in connection with the xbajiapp platform, accessed primarily by players located in Bangladesh.

By registering an account on xbajiapp, making a deposit via bKash, Nagad, Rocket, or any supported payment channel, or using any feature of the platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, you must discontinue use of xbajiapp and contact our support team to close your account.

Section 1

Data We Collect

xbajiapp collects personal data through several channels: directly from you when you register an account or contact support, automatically when you use the platform, and from third-party service providers such as payment processors and identity verification partners. The categories of data we collect are outlined below.

xbajiapp does not knowingly collect sensitive personal data beyond what is required for identity verification and anti-money laundering compliance. We do not collect biometric data, religious affiliation, political views, or medical records. If you voluntarily provide information in this category through a support interaction, it will be handled with the highest level of confidentiality and will not be used for any marketing or profiling purpose.

Section 2

How We Use Your Data

xbajiapp uses personal data collected from Bangladesh players for clearly defined, lawful purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. Below are the primary purposes for which your data is processed on xbajiapp.

• Account management: Creating, maintaining, and securing your xbajiapp player account, including verifying your identity through the KYC process before withdrawals are enabled.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported BDT payment channels.
• Fraud prevention and AML compliance: Monitoring account activity to detect and prevent fraudulent transactions, money laundering, and other financial crimes in accordance with anti-money laundering obligations.
• Responsible gaming: Tracking betting patterns and account behaviour to identify signs of problem gambling and apply appropriate safeguards including deposit limits and self-exclusion tools.
• Customer support: Responding to queries, resolving disputes, and processing complaints submitted through the xbajiapp support system.
• Personalisation: Tailoring game recommendations, promotional offers (such as BPL or Eid season bonuses), and platform content to your demonstrated preferences and activity history.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, payment flow, and the overall xbajiapp user experience.
• Legal compliance: Fulfilling obligations under applicable laws and responding to lawful requests from competent authorities.

xbajiapp will not use your personal data for automated decision-making that produces significant legal effects without human oversight. Any profiling conducted on xbajiapp — such as identifying players who may benefit from responsible gaming interventions — is subject to regular review by trained compliance personnel.

Section 3

Data Sharing & Third Parties

xbajiapp does not sell personal data to third parties under any circumstances. We may, however, share specific categories of personal data with trusted service providers and partners where it is necessary to operate the platform, fulfil legal obligations, or protect the safety and integrity of the xbajiapp service. All third-party recipients of personal data are contractually bound to handle it securely and in accordance with applicable data protection standards.

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive transaction-specific financial data solely for the purpose of processing deposits and withdrawals.
• Identity verification providers: KYC partners receive copies of identity documents (NID, passport) to conduct age and identity verification checks on behalf of xbajiapp.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive anonymised session identifiers to enable game functionality. They do not receive your full name, NID, or financial data.
• Fraud and AML screening services: Transaction monitoring platforms may receive flagged transaction data for automated risk scoring as part of our compliance programme.
• Law enforcement and regulatory bodies: xbajiapp will disclose personal data to competent authorities when required to do so by a valid legal order, court order, or regulatory obligation.

xbajiapp will never share your personal data with advertisers, data brokers, or unaffiliated third-party marketers. You will not receive unsolicited marketing from third parties as a result of using xbajiapp.

Section 4

Cookies & Tracking

xbajiapp uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session preferences, and to gather anonymous analytics that help us improve the service. A cookie is a small text file placed on your device by the xbajiapp web server when you visit the platform.

You may configure your browser to refuse all cookies or to alert you when cookies are being set. However, disabling strictly necessary cookies will prevent xbajiapp from functioning correctly — you will not be able to log in, place bets, or process transactions if session cookies are blocked. Analytics and functional cookies may be disabled without affecting core platform access.

Section 5

Data Security

xbajiapp employs a layered security architecture to protect personal data from unauthorised access, loss, alteration, or disclosure. Our security measures are reviewed and updated on a regular basis to address emerging threats and to reflect best practices in the online gaming industry.

• All data in transit between your device and xbajiapp is encrypted using 256-bit SSL/TLS protocols.
• Passwords are stored as salted cryptographic hashes — xbajiapp support agents cannot read your password in plaintext.
• Access to production databases containing player data is restricted to a minimal set of authorised personnel and is subject to audit logging.
• Two-factor authentication (2FA) is available on all xbajiapp accounts and is strongly encouraged for all players.
• Regular penetration testing and vulnerability assessments are conducted on the xbajiapp infrastructure by qualified security professionals.
• Player financial data (bKash / Nagad mobile wallet numbers, bank account references) is tokenised after the initial transaction and is not stored in full in xbajiapp's primary application database.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a material risk to your rights, xbajiapp will notify affected players via their registered email address as promptly as practicable and will take immediate steps to contain and remediate the incident.

Section 6

Data Retention

xbajiapp retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The retention periods below reflect our standard practice for active and closed accounts on xbajiapp.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data (such as statistical analysis of game performance or payment channel usage) may be retained indefinitely for platform analytics purposes.

Section 7

Your Privacy Rights

As a player on xbajiapp, you hold a number of rights in relation to the personal data we hold about you. xbajiapp respects these rights and will respond to valid requests within a reasonable timeframe, typically within 30 calendar days of receipt. To exercise any of the rights listed below, contact our support team at support@xbajiapp.

• Right of Access: You may request a copy of all personal data xbajiapp holds on your account, including identity records, transaction history, and communication logs.
• Right to Rectification: If any personal data held by xbajiapp is inaccurate or incomplete, you may request that it be corrected. Identity corrections require supporting documentation consistent with our KYC process.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to legal retention obligations — xbajiapp cannot delete transaction records required under AML or financial compliance rules.
• Right to Restrict Processing: You may ask xbajiapp to suspend use of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Object to Marketing: You may opt out of receiving promotional communications from xbajiapp at any time by contacting support or using the unsubscribe mechanism in any marketing email.
• Right to Data Portability: Where processing is based on your consent and carried out by automated means, you may request that xbajiapp provide your data in a structured, machine-readable format.

Section 8

Policy Updates & Contact

xbajiapp reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will update the Effective Date at the top of this document and, where practicable, notify active players via their registered email address. Continued use of xbajiapp following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage all xbajiapp players to review this Privacy Policy periodically to stay informed about how their data is being handled. The most current version of this policy is always accessible at xbajiapp/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way xbajiapp handles your personal data, please contact our dedicated support team. We are committed to resolving all privacy-related queries promptly and transparently.

xbajiapp treats every privacy complaint seriously. If you submit a formal complaint and are not satisfied with our response, you retain the right to escalate the matter to an appropriate supervisory authority in your jurisdiction.