Privacy Policy — xxbajee
At xxbajee, your privacy is not an afterthought. This Privacy Policy sets out exactly what personal data we collect from Bangladesh players, why we collect it, how it is stored and protected, and what rights you hold over your own information.
This Privacy Policy ("Policy") applies to all users of the xxbajee platform at xxbajee.net and any associated mobile interfaces. It governs the collection, processing, storage, and disclosure of personal data submitted to or generated through xxbajee by players based in Bangladesh and any other jurisdiction from which xxbajee accepts registrations.
By creating an xxbajee account, depositing funds, placing a bet, or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use xxbajee.
xxbajee may revise this Policy periodically. Registered players will be notified of material changes through an on-platform notification. The effective date at the top of this page reflects the most recent revision. Continued use of xxbajee following an update constitutes your acceptance of the revised Policy.
Your data stays within xxbajee. We do not sell, rent, or trade your personal information to third-party marketers. Data shared with service providers is strictly limited to what is necessary for them to perform their function.
SSL encryption on every page. All data transmitted between your device and xxbajee.net is protected by industry-standard TLS/SSL encryption, including account pages, cashier flows, and game sessions.
Secure Data Storage
All personal data collected by xxbajee is stored on encrypted servers with restricted access. Only authorised xxbajee personnel with a verified business need may access your personal records.
No Data Selling
xxbajee never sells, rents, or trades your personal data to third-party advertisers or marketing agencies. Your information is used solely to operate the platform and comply with legal obligations.
Your Rights Respected
You have the right to access, correct, and request deletion of your personal data at any time. xxbajee provides clear pathways to exercise these rights through our support team.
Payment Data Protection
Payment credentials including bKash, Nagad, Rocket, and card details are processed through encrypted channels. xxbajee does not store full card numbers or mobile wallet PINs on its servers.
Transparent Cookie Use
xxbajee uses cookies strictly for session management, security, and platform performance analytics. No third-party advertising cookies are placed without your awareness and consent where required.
AML Compliance
Some data processing by xxbajee is required to meet anti-money laundering obligations. This processing is carried out in accordance with international best-practice AML standards and only to the extent legally necessary.
Data We Collect
xxbajee collects personal data in two ways: data you provide directly to us during registration and platform use, and data we collect automatically as you interact with the xxbajee platform. Below is a detailed breakdown of each category.
Data You Provide Directly
When you register an xxbajee account or update your profile, you provide us with information that may include:
- Identity data: Full legal name, date of birth, gender, and nationality.
- Contact data: Email address, Bangladesh mobile phone number, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh).
- Verification data: National ID Card number, passport number, selfie photograph, and utility bill or bank statement submitted for KYC purposes.
- Account credentials: Username and hashed password (xxbajee never stores passwords in plain text).
- Payment data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account references, and debit/credit card details processed via our payment gateway partners. Full card numbers are not stored by xxbajee.
- Communications data: Records of messages you send to xxbajee support via live chat or email, including the content of those messages.
- Responsible gaming preferences: Any deposit limits, session time limits, self-exclusion periods, or cooling-off requests you set through the platform.
Data Collected Automatically
As you use the xxbajee platform, we automatically collect technical and behavioural data including:
- Device data: IP address, device type, operating system, browser type and version, and screen resolution.
- Usage data: Pages visited on xxbajee.net, time spent on each page, links clicked, game sessions started, bets placed (amount, market, outcome), and deposit and withdrawal history.
- Location data: Approximate geographic location derived from your IP address. xxbajee does not collect precise GPS location data.
- Session data: Login timestamps, session duration, and logout events, used for security monitoring and responsible gaming analysis.
- Cookie and tracking data: As described in the Cookies section of this Policy.
Data from Third Parties
xxbajee may receive personal data about you from third parties in limited circumstances, including identity verification agencies (to cross-check KYC documents), payment processors (to confirm transaction outcomes), and fraud prevention services (to flag suspicious activity patterns). Data received from third parties is handled with the same level of care as data you provide directly.
Data Categories at a Glance
- Identity: Name, DOB, nationality
- Contact: Email, phone, address
- Verification (KYC): ID, passport, selfie
- Payment: Wallet numbers, card references
- Behavioural: Bets, sessions, page visits
- Technical: IP address, device, browser
- Communications: Support chat and email records
Providing accurate personal data is a condition of your xxbajee account. Submitting false information during registration or KYC is a breach of our Terms & Conditions and may result in account suspension.
How We Use Your Data
xxbajee processes your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the original purpose for which it was collected. The table below summarises the key purposes for which xxbajee processes personal data, the legal basis for that processing, and the data categories involved.
| Purpose | Legal Basis | Data Categories |
|---|---|---|
| Account registration and management | Contract performance | Identity, contact, credentials |
| Age and identity verification (KYC) | Legal obligation / Contract | Identity, verification documents |
| Processing deposits and withdrawals | Contract performance | Payment, identity |
| Fraud detection and prevention | Legitimate interest / Legal obligation | Technical, behavioural, payment |
| Anti-money laundering (AML) monitoring | Legal obligation | Identity, payment, behavioural |
| Customer support and complaint handling | Contract performance / Legitimate interest | Identity, contact, communications |
| Responsible gaming monitoring | Legitimate interest / Legal obligation | Behavioural, session, preferences |
| Platform security and abuse prevention | Legitimate interest | Technical, session, behavioural |
| Service improvement and analytics | Legitimate interest | Technical, behavioural (aggregated) |
| Promotional communications (opted-in players) | Consent | Contact, behavioural preferences |
Marketing Communications
xxbajee will only send you promotional messages — including bonus offers, tournament announcements (BPL season, IPL, T20 World Cup), and seasonal promotions (Eid, Pohela Boishakh, Victory Day offers) — if you have opted in to receive them at the point of registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in the platform's account settings section or by contacting xxbajee support via live chat.
Automated Decision-Making
xxbajee uses automated systems for certain decisions, including fraud risk scoring, responsible gaming behavioural alerts, and bonus eligibility checks. Where an automated decision has a significant effect on your account (such as a withdrawal hold triggered by a fraud flag), you have the right to request human review of that decision by contacting our support team.
We Process Your Data Only To:
- Run your xxbajee account
- Verify your identity as required
- Process your deposits and withdrawals
- Detect fraud and protect your account
- Meet AML legal obligations
- Provide 24/7 customer support
- Monitor responsible gaming patterns
- Improve the platform experience
- Send promotions (with your consent only)
Data Sharing & Disclosure
xxbajee does not sell your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Service Providers
xxbajee works with a carefully selected group of third-party service providers to operate the platform. These providers act as data processors on our behalf, meaning they process your data only on xxbajee's instructions and for no independent purpose. Categories of service providers include:
- Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors who handle transaction authentication and settlement.
- KYC and identity verification providers: Third-party services that cross-check the identity documents you submit against official databases to confirm authenticity.
- Fraud and AML screening services: Automated screening tools that analyse transaction patterns and flag unusual activity for manual review.
- Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi whose game platforms integrate with xxbajee. These studios receive only the session data necessary to run the game (e.g., bet amount, player session token) and not your full personal profile.
- Cloud hosting and infrastructure providers: Secure hosting partners on whose servers xxbajee platform data is stored and processed.
- Customer support tools: Live chat and ticketing platform providers that facilitate xxbajee's 24/7 support function.
Legal and Regulatory Disclosure
xxbajee may disclose your personal data to regulatory bodies, law enforcement agencies, financial intelligence units (including the Bangladesh Financial Intelligence Unit, BFIU), or courts where we are legally required to do so or where disclosure is necessary to protect the safety and security of our players and platform. xxbajee will, where legally permitted, inform you of any such disclosure.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of xxbajee's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to privacy practices that results from it, with an opportunity to close your account before the transfer takes effect if you wish.
No Sale of Data
xxbajee does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing described in this section is strictly operational and governed by data processing agreements that bind our service providers to confidentiality and data protection standards no less protective than those in this Policy.
We never sell your data. Your personal information is not a product at xxbajee. It is a responsibility. We share data only to operate essential platform functions or to meet legal obligations.
Who May Receive Your Data
- Payment processors (bKash, Nagad, Visa, etc.)
- KYC / identity verification services
- Fraud and AML screening tools
- Game studio session integrations
- Cloud infrastructure providers
- Support platform providers
- Law enforcement / BFIU (when legally required)
Cookies & Tracking Technologies
xxbajee uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to ensure the platform functions correctly, to maintain the security of your session, and to understand how players use the platform so we can improve the experience.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, CSRF security tokens, and load balancer routing. Without these, the platform cannot function. | Session |
| Functional | Remember your platform preferences such as language, display settings, and last-used game categories. | Up to 12 months |
| Analytics | Aggregate, anonymised data on how players navigate xxbajee — pages visited, session length, feature usage — used solely for internal platform improvement. | Up to 24 months |
| Security | Device fingerprinting tokens used to detect suspicious login attempts and account takeover attempts. | Up to 6 months |
Third-Party Cookies
Some xxbajee pages may include content served by third-party game studios. These studios may set their own session cookies necessary to run their game content within the xxbajee interface. xxbajee does not control the cookie practices of these studios and recommends reviewing their individual privacy policies for details. No third-party advertising or retargeting cookies are placed on xxbajee.net.
Managing Cookies
Strictly necessary cookies cannot be disabled without preventing the platform from functioning. Functional and analytics cookies can be managed through your browser settings. Most modern browsers allow you to view, block, or delete cookies through the browser's privacy or settings menu. Note that disabling functional cookies may affect your platform experience (for example, your preferences may not be saved between sessions).
Cookie Summary
- Strictly necessary: Always active — required for platform operation
- Functional: Saves your preferences
- Analytics: Anonymised usage data only
- Security: Device recognition for fraud prevention
- Advertising: Not used on xxbajee
To manage cookies, visit your browser's privacy settings. Disabling strictly necessary cookies will prevent xxbajee from functioning correctly.
Data Retention
xxbajee retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, to maintain your account, and to meet our legal obligations. The retention periods below apply from the date of your last account activity or from the date of account closure, whichever is later.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | 5 years after account closure | AML and fraud investigation obligations |
| KYC documents (ID, passport, selfie) | 5 years after account closure | Regulatory compliance and legal disputes |
| Transaction and financial records | 7 years after transaction date | Financial record-keeping best practice |
| Betting and gaming history | 5 years after account closure | Dispute resolution and AML review |
| Support communications | 3 years after case closure | Complaint and dispute records |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of consent for compliance |
| Analytics data (anonymised) | Up to 24 months on a rolling basis | Platform improvement |
Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Data that forms part of an active legal dispute, regulatory investigation, or AML inquiry will be retained until that matter is fully resolved, regardless of the standard retention period.
Key Retention Points
- Account data: 5 years post-closure
- Financial records: 7 years
- Support chats: 3 years
- Analytics: 24 months rolling
- Active disputes: until resolved
After the retention period, data is securely deleted or anonymised so it cannot be linked back to you as an individual.
Data Security Measures
xxbajee takes the security of your personal data seriously and implements a layered approach to information security. Our security programme is reviewed regularly and updated in response to emerging threats.
Technical Measures
- TLS/SSL encryption: All data in transit between your device and xxbajee.net is encrypted using TLS 1.2 or higher.
- Encryption at rest: Sensitive personal data stored on xxbajee servers — including KYC documents and financial records — is encrypted at rest using AES-256.
- Password hashing: Account passwords are never stored in plain text. xxbajee uses a cryptographic hashing algorithm with salting to store password credentials.
- Two-factor authentication (2FA): Players are offered SMS OTP-based 2FA for account login. xxbajee strongly recommends enabling 2FA in account settings.
- Intrusion detection: xxbajee's infrastructure is monitored 24/7 by automated intrusion detection and alerting systems.
- Access controls: Internal access to personal data systems is role-based, with the principle of least privilege enforced. Staff access logs are maintained and audited.
Organisational Measures
- All xxbajee staff with access to personal data receive regular data protection training.
- Data processing agreements are in place with all third-party service providers.
- A formal incident response process is maintained to manage and report data breaches promptly.
Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, xxbajee will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — via the email address registered to your account. The notification will describe the nature of the breach, the categories of data affected, and the steps xxbajee is taking to address it.
While xxbajee implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying xxbajee immediately if you suspect your account has been compromised.
Security at xxbajee
- TLS/SSL encryption on every page
- AES-256 encryption at rest
- Password hashing with salting
- SMS OTP two-factor authentication
- 24/7 intrusion detection monitoring
- Role-based internal access controls
- Regular staff data protection training
Protect your own account. Use a strong, unique password for xxbajee. Enable SMS OTP 2FA. Never share your login details with anyone — xxbajee support staff will never ask for your password.
Your Privacy Rights
As an xxbajee player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact xxbajee support via live chat or email [email protected] (plain text — not a clickable link). xxbajee will respond to all data rights requests within 30 days.
Right of Access
You have the right to request a copy of the personal data xxbajee holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.
Right to Rectification
If any personal data xxbajee holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic profile information directly through your account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that xxbajee may be required to retain certain data to meet legal obligations even after an erasure request.
Right to Restriction
You have the right to request that xxbajee restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Right to Portability
Where processing is based on your consent or a contract, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another service provider where technically feasible.
Right to Object
You have the right to object to processing carried out on the basis of xxbajee's legitimate interests, including profiling for responsible gaming analysis. You may also withdraw marketing consent at any time through your account settings.
How to exercise your rights: Contact xxbajee support via the platform's 24/7 live chat or send a written request to [email protected] (plain text — not a clickable link). Please include your registered username and a brief description of your request. xxbajee will verify your identity before processing any data rights request. We will respond within 30 days; complex requests may require up to 60 days, in which case we will inform you of the extension.
Contact & Data Enquiries
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how xxbajee handles your personal data, please reach out to us through the following channels:
Primary Support Channel
The fastest way to reach the xxbajee privacy team is through the 24/7 live chat available on the platform after login. Select the "Privacy & Data" topic when starting your chat session to ensure your enquiry reaches the right team member.
Email Enquiries
For formal written data enquiries — including data subject access requests, erasure requests, and data breach concerns — you may contact us at:
[email protected] (plain text — not a clickable link)
Please include your registered xxbajee username and the nature of your enquiry in the subject line. xxbajee will acknowledge receipt of all formal data enquiries within 5 business days and provide a substantive response within 30 days.
Policy Updates
When xxbajee makes material changes to this Privacy Policy, registered players will receive an on-platform notification. We encourage you to review this page periodically. The effective date at the top of this page always reflects the most recent version of the Policy.
Contact Summary
- Live chat: Available 24/7 on the xxbajee platform — fastest response
- Email: [email protected] (plain text only — not a link)
- WhatsApp support hours: 09:00–23:00 BST (UTC+6)
- Data rights response time: Within 30 days
- Breach notification: Within 72 hours of discovery
- Formal notice acknowledgement: Within 5 business days
Questions about our Terms? This Privacy Policy should be read alongside the xxbajee Terms & Conditions and Responsible Gaming Policy, which together form the complete user agreement for the xxbajee platform.
18+ only. xxbajee is strictly for players aged 18 and above. If you believe a minor has registered an account, contact us immediately via live chat so we can investigate and close the account without delay.
Your Privacy Matters at xxbajee
Have a question about how we handle your data? Our support team is available 24/7. You can also explore our FAQ or review the full Terms & Conditions for more detail.