Privacy Policy — How xbaijee Protects Your Data

1. Information We Collect

xbaijee collects personal data from you through several channels: directly through account registration and profile management, automatically through your use of the platform, and in some cases from trusted third-party verification providers. The categories of personal data we collect are described below. We collect only the data that is genuinely necessary for the purposes set out in this Policy, and we do not engage in speculative or excessive data collection.

Information you provide directly to xbaijee:

Information collected automatically when you use the xbaijee platform:

2. How We Use Your Data

xbaijee processes your personal data for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which xbaijee processes personal data are as follows:

Marketing Communications: With your explicit consent, xbaijee may send you promotional communications by email regarding new games, special offers, seasonal promotions (such as BPL cricket season boosts or Eid reload bonuses), and platform updates. You may withdraw consent for marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before you withdrew consent, nor does it affect any other communication that xbaijee is required to send you for account management or legal compliance purposes.

Automated Decision-Making: xbaijee may use automated systems for fraud detection and responsible gaming monitoring. These systems analyse account activity patterns to flag unusual behaviour for human review. No fully automated decision that significantly affects your account — such as permanent account closure — is made without human oversight by an authorised xbaijee team member. You have the right to request human review of any decision that materially impacts your account.

3. Cookies & Tracking Technologies

xbaijee uses cookies and similar technologies — including local storage, session storage, and web beacons — to operate the platform effectively, maintain your logged-in session, and understand how players interact with our services. This section explains the types of cookies we use and your options for managing them.

Types of cookies used on the xbaijee platform:

• Strictly Necessary Cookies: These cookies are essential for the xbaijee platform to function correctly. They maintain your login session, remember your language and display preferences within the current session, and enable core security features. These cookies cannot be disabled without affecting your ability to use the platform. No personal data collected via strictly necessary cookies is shared with third parties.
• Analytics Cookies: xbaijee uses first-party analytics tools to measure platform usage, page performance, and feature engagement. Analytics data is aggregated and anonymised before analysis and is used solely to improve the xbaijee platform. Analytics cookies do not identify you personally and are not shared with advertising networks.
• Functional Cookies: These cookies remember choices you have made on the platform — such as your preferred currency display, notification settings, and game category preferences — to provide you with a more personalised experience during future visits.
• Security Cookies: These cookies support xbaijee's fraud detection and account security systems. They help identify suspicious login attempts, unusual account activity, and potential multi-account violations. Security cookie data is retained only for as long as is necessary for security monitoring purposes.

What xbaijee does NOT use: xbaijee does not deploy third-party advertising cookies, behavioural tracking pixels from social media platforms, or any tracking technology that follows your activity across websites other than xbaijee.net. We do not participate in cross-site advertising networks or retargeting programmes.

Managing your cookie preferences: Most web browsers allow you to control cookies through their settings. You can configure your browser to block new cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling strictly necessary cookies will impair your ability to log in and use core xbaijee platform features. Detailed instructions for managing cookies are available in the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, etc.).

4. Data Sharing & Third Parties

xbaijee does not sell, lease, or trade your personal data to any third party for commercial purposes. However, in order to deliver our services effectively and comply with applicable legal obligations, we do share certain personal data with a limited set of trusted third-party service providers. All such providers are carefully vetted and contractually required to handle your data in a manner consistent with this Privacy Policy and applicable data protection standards.

Categories of third parties with whom xbaijee may share your data:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the minimum payment data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are regulated financial institutions with their own data protection obligations.
• Identity Verification (KYC) Providers: xbaijee works with trusted identity verification service providers to conduct age verification and document authentication as part of the KYC process. These providers receive copies of the documents you submit and return a verification decision. Submitted documents are not retained by the KYC provider beyond the period necessary for verification.
• Game Software Providers: Game studios and software providers whose titles are hosted on xbaijee — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session data (such as game outcomes and wagering amounts) necessary for the technical operation of their games. These providers do not receive your name, contact details, or payment information.
• Platform Infrastructure Providers: xbaijee uses cloud hosting and content delivery services to operate the platform. These infrastructure providers may process data on our behalf in the course of providing their services. All such providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing the contracted services to xbaijee.
• Legal and Regulatory Authorities: xbaijee may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where we are legally compelled to do so, or where disclosure is necessary to prevent or detect fraud, money laundering, or other financial crime. In such cases, xbaijee will disclose only the minimum data required and will notify you where legally permitted to do so.

5. Data Security Measures

xbaijee takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. While no digital platform can guarantee absolute security, xbaijee's security framework is designed to reflect current industry best practices for online gaming platforms operating in the Bangladesh market.

Technical security measures in place at xbaijee include:

• SSL/TLS encryption on all data transmitted between your browser or device and the xbaijee platform, ensuring that your credentials, personal data, and transaction details are protected in transit.
• Encrypted storage of sensitive data fields including passwords (stored as salted cryptographic hashes — never in plain text), payment method identifiers, and KYC document references.
• Multi-layer firewall and intrusion detection systems monitoring xbaijee's server infrastructure on a continuous basis.
• Role-based access controls ensuring that only authorised personnel with a specific operational need can access identifiable player data. All such access is logged with timestamps and reviewed periodically.
• Regular security assessments and vulnerability scanning of the xbaijee platform to identify and remediate potential weaknesses before they can be exploited.
• Two-factor authentication (2FA) options available to all registered players to provide an additional layer of protection for account access beyond the username and password combination.

Your responsibilities: The security of your account also depends on steps you take. You are responsible for maintaining the confidentiality of your xbaijee username and password. You should not share your login credentials with any third party and should use a strong, unique password for your xbaijee account that is not reused on other websites. If you suspect that your account has been accessed without your authorisation, please contact xbaijee support immediately at [email protected] so that we can take prompt protective action.

Data Breach Response: In the event of a personal data breach that poses a risk to your rights and interests, xbaijee will assess the breach, take immediate containment measures, and notify affected players via their registered email address within a reasonable timeframe. Our security team operates a documented incident response process to ensure that breaches are handled promptly and transparently.

6. Data Retention Policy

xbaijee retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, taking into account our legal obligations, dispute resolution requirements, and the enforcement of our agreements with players. The following retention periods apply to the principal categories of data xbaijee holds:

When data reaches the end of its applicable retention period, xbaijee deletes it securely using methods that prevent recovery. Where complete deletion is not immediately possible due to backup system architecture, data is isolated from active processing and deleted during the next scheduled backup cycle. If you request early deletion of your data (see Your Privacy Rights below), xbaijee will action that request within the timeframes set out in that section, subject to any overriding legal retention obligations.

7. Your Privacy Rights

As a registered player on xbaijee, you have a number of rights in relation to the personal data we hold about you. xbaijee is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with your request. We will respond within 30 days of receiving a valid, verifiable request, and will notify you if additional time is required to fulfil a complex request.

• Right of Access: You have the right to request a copy of the personal data that xbaijee holds about you, together with information about the purposes for which it is processed, the categories of data held, and the parties with whom it has been shared. This is sometimes called a Subject Access Request (SAR). xbaijee will provide this information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Rectification: If any personal data that xbaijee holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain information directly via your xbaijee account settings page; for data that cannot be self-corrected, please contact support with the relevant correction details.
• Right to Erasure: You may request that xbaijee deletes your personal data — sometimes referred to as the "right to be forgotten". xbaijee will action erasure requests where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to any overriding legal obligations that require xbaijee to retain data for a defined period (such as financial transaction records retained for AML compliance).
• Right to Restriction of Processing: You may request that xbaijee restrict the active processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and xbaijee is considering that objection. During a restriction period, your data will be stored but not actively used for any processing purpose.
• Right to Data Portability: Where xbaijee processes your data on the basis of your consent or for the performance of a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your data in a portable, machine-readable format (such as JSON or CSV), and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to xbaijee processing your personal data for direct marketing purposes at any time. You may also object to other forms of processing where xbaijee relies on a legitimate interest basis, unless xbaijee can demonstrate compelling legitimate grounds for the processing that override your interests and rights.
• Right to Withdraw Consent: Where xbaijee processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

xbaijee will not discriminate against you for exercising any of the rights listed above. Exercising your privacy rights will not result in any degradation of service, account restrictions, or other adverse treatment — provided that the exercise of those rights does not require xbaijee to take an action that is inconsistent with its legal obligations (for example, xbaijee cannot delete identity records that are required to be retained under AML regulations).

8. Contact & Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xbaijee handles your personal data, please contact our dedicated privacy support team. xbaijee takes all privacy enquiries seriously and commits to responding to every valid privacy request within 30 days.

Policy Updates: xbaijee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, registered players will be notified via the email address associated with their account. The date of the most recent revision is displayed at the top of this page. Your continued use of the xbaijee platform following notification of a material policy change constitutes your acceptance of the updated Privacy Policy. If you do not accept the updated Policy, you should cease using the platform and contact us to close your account.

This Privacy Policy is effective from January 2026 and supersedes all previous versions of the xbaijee Privacy Policy. All capitalised terms used but not defined in this Policy carry the meanings assigned to them in the xbaijee Terms & Conditions.