xbajj Privacy Policy — How We Protect Your Data

xbajj is an online casino and sports betting platform operated under the brand name xbajj and accessible at xbajj.ws. xbajj acts as the data controller for all personal data collected through the platform. For the purposes of this Privacy Policy, 'we', 'us', and 'our' refer to xbajj. If you have any questions or concerns about how xbajj handles your personal data, you may contact the xbajj data privacy team at [email protected]. We endeavour to respond to all privacy-related queries within 5 business days of receipt.

xbajj collects personal data when you register an account, use the platform, make transactions, or contact support. The categories of data we collect include:

• Identity data: your full name, date of birth, and nationality, collected during account registration and used for age verification and KYC compliance purposes.
• Contact data: your mobile phone number and email address (if provided), used to send account verification codes, transaction confirmations, promotional communications, and security alerts.
• Financial data: transaction amounts, deposit and withdrawal records, and the payment method reference (e.g. your bKash or Nagad account number). Full payment credentials are never stored on xbajj servers — they are processed exclusively through the payment provider's own secure gateway.
• Technical data: your IP address, device type, browser type and version, operating system, and session duration. This data is collected automatically when you visit xbajj.ws and is used for platform security, fraud detection, and service improvement.
• Usage data: your betting history, game play patterns, session frequency, and platform navigation behaviour. This data is used to personalise your experience, identify responsible gaming indicators, and improve the xbajj product.

xbajj uses your personal data only for the purposes for which it was collected, or for closely related purposes that you would reasonably expect. Our primary uses of your data are:

• Account operation: to create and manage your player account, process your deposits and withdrawals, verify your identity (KYC), authenticate your login sessions, and provide you with access to the xbajj platform.
• Compliance and fraud prevention: to comply with anti-money laundering (AML) obligations, detect and prevent fraud, identify potential underage users, and fulfil any legal obligations that apply to xbajj as an operator.
• Responsible gaming: to monitor gameplay patterns for signs of problem gambling behaviour and, where appropriate, to trigger responsible gaming interventions such as account alerts, cooling-off reminders, or referrals to the xbajj self-exclusion tool.
• Communications: to send you transaction confirmations, account security alerts, and — where you have consented — promotional messages about xbajj bonuses, offers, and product updates. You may opt out of promotional communications at any time by contacting xbajj support.
• Service improvement: to analyse aggregated, anonymised usage data to identify technical issues, improve platform performance, and develop new features. This analysis does not involve identifying individual players — it operates on anonymised data sets only.

xbajj does not sell, rent, or trade your personal data to any third party. We share your data only with the following categories of trusted service providers, and only to the extent necessary to deliver the xbajj service:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways receive the minimum data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• Identity verification providers: where KYC verification is required, xbajj may share your identity documents with a specialist identity verification service. These providers are contractually required to process your data only for the verification purpose and to apply appropriate security measures.
• Law enforcement and regulatory authorities: xbajj may disclose personal data to government bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory obligation. xbajj will only disclose the minimum data necessary to satisfy the legal requirement.

xbajj retains your personal data for as long as your account is active and for a reasonable period thereafter to allow for dispute resolution, comply with legal obligations, and maintain audit records as required. Account data is typically retained for a minimum of 5 years after account closure. Transaction records are retained in accordance with applicable anti-money laundering regulations. You may request deletion of your personal data by contacting [email protected]. Where deletion is legally permissible, xbajj will process your request within 30 days. Some data may be retained beyond this period where required by law, for fraud prevention purposes, or to resolve outstanding disputes.

xbajj uses cookies and similar technologies on xbajj.ws for the following purposes:

• Essential session cookies: these are strictly necessary for the platform to function. They maintain your login session, preserve your account preferences, and enable the security features that protect your account. You cannot opt out of essential cookies while using the platform — they are required for xbajj to work.
• Security cookies: used to detect unusual login patterns, flag potential account takeover attempts, and enforce two-step verification where enabled. These cookies do not store any personal data beyond a session identifier.
• Performance cookies: used to monitor page load times, identify technical errors, and measure which parts of the xbajj platform receive the most use. This data is collected in aggregate and anonymised form — no individual user is identified. You may opt out of performance cookies by adjusting your browser settings.
• xbajj does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any other invasive tracking technology. Your browsing behaviour on xbajj.ws is not shared with advertising networks.

As a data subject, you have the following rights with respect to your personal data held by xbajj:

• Right of access: you may request a copy of all personal data xbajj holds about you. We will provide this information within 5 business days of a verified request. Requests must be made by contacting [email protected] from your registered email or mobile number.
• Right to rectification: if any personal data xbajj holds about you is inaccurate or incomplete, you have the right to request correction. Common examples include an incorrect date of birth entered at registration or an outdated mobile number on file.
• Right to erasure: you may request that xbajj delete your personal data. xbajj will process erasure requests within 30 days where deletion is legally permissible. Some data may need to be retained to comply with anti-money laundering laws, resolve disputes, or fulfil legal obligations.
• Right to object to marketing: you may opt out of promotional communications from xbajj at any time. To opt out, contact [email protected] and state clearly that you wish to stop receiving promotional messages. Your opt-out will be processed within 2 business days.
• Right to lodge a complaint: if you believe xbajj has handled your personal data improperly, you have the right to raise a complaint directly with xbajj by contacting [email protected]. xbajj will acknowledge your complaint within 2 business days and provide a substantive response within 10 business days.

xbajj takes the security of your personal data seriously. We implement a range of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, or alteration. These measures include 256-bit SSL encryption on all data transmissions between your device and xbajj.ws, encrypted storage of sensitive account data, access controls that restrict staff access to personal data on a need-to-know basis, regular internal security audits, and automated fraud detection systems that flag unusual account activity in real time. While xbajj takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data and poses a risk to your rights, xbajj will notify affected players as promptly as practicable.

xbajj is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. If xbajj discovers or is notified that a registered account belongs to a person under 21, we will immediately suspend the account, delete the associated personal data to the extent legally permissible, and cancel any pending transactions. If you believe a minor has registered an account on xbajj, please contact [email protected] immediately so that we can take prompt action. Parents and guardians are encouraged to use device parental controls and internet filtering software to prevent minors from accessing online gambling platforms.

The xbajj platform does not contain links to third-party websites as a general rule. In the event that any third-party link appears on the platform — for example, a payment provider's terms page — xbajj is not responsible for the privacy practices of that third party. We recommend reviewing the privacy policy of any external site you visit. xbajj has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.

xbajj reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered mobile number or email address before the changes take effect. The date of the most recent update is shown at the top of this page. If you continue to use the xbajj platform after the updated policy has been communicated to you, your continued use will constitute your acceptance of the revised policy. If you do not agree with any changes, you should stop using xbajj and may request account closure by contacting [email protected].