xbaij Privacy Policy

xbaij (hereinafter referred to as "xbaij", "we", "us", or "the Company") is an online sports betting and casino entertainment platform operating at https://xbaij.io and serving registered players in Bangladesh. xbaij is committed to protecting the privacy of every individual who interacts with our platform, whether as a registered account holder, a visitor browsing our website, or a person contacting our support team.

This Privacy Policy (the "Policy") has been prepared in accordance with internationally recognised data protection principles and applies to all personal data collected, processed, stored, or transmitted by xbaij in connection with the operation of the xbaij platform and related services. The Policy covers data collected via the xbaij website, mobile-optimised web interface, progressive web application, email communications, and all customer support channels.

This Policy should be read alongside the xbaij Terms and Conditions, which are incorporated by reference. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions. The effective date of this version of the Policy is stated in the page hero above; previous versions of this Policy are available on request from our support team.

xbaij collects personal data through several channels, including the account registration process, ongoing use of the platform, communications with our support team, and technical data generated automatically by your device and browser. The categories of personal data we collect are described in the table below.

xbaij does not knowingly collect sensitive personal data beyond what is required for identity verification (such as a copy of your Bangladesh National ID card or passport). We do not collect biometric data, health data, religious beliefs, political opinions, or racial and ethnic origin data. If you voluntarily provide such information in a support communication, it will be used solely to address your query and will not be stored in your permanent profile.

xbaij processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or being required to do so by law. The primary purposes for which xbaij uses your data are:

• Account Administration: Creating and maintaining your xbaij account, verifying your identity and age (21+ requirement), processing your login and authentication requests, and managing account security including two-factor authentication via Bangladesh mobile SMS OTP.
• Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer channels; recording transaction histories; detecting and preventing payment fraud; and complying with anti-money laundering (AML) obligations.
• Platform Operation: Providing access to xbaij sports betting markets (including cricket BPL, T20, IPL, and football markets), live casino games, video slots, crash games, and fishing games; settling bet outcomes; crediting winnings and bonuses to your wallet; and maintaining the technical integrity of the platform.
• Legal Compliance: Meeting Know Your Customer (KYC) requirements, fulfilling record-keeping obligations, responding to lawful requests from courts or regulatory authorities, and preventing fraud, match-fixing, and money laundering.
• Responsible Gaming: Monitoring gambling patterns to identify potential problem gambling behaviour; enforcing deposit limits, session time limits, cooling-off periods, and self-exclusion requests as set by the account holder; and complying with our responsible gaming obligations.
• Customer Support: Responding to queries, resolving complaints, providing account assistance, and maintaining a record of communications to improve service quality.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting [email protected].
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the xbaij platform, identify areas for improvement, and develop new features and markets.

xbaij processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform the contract between you and xbaij — i.e., to operate your account, process transactions, settle bets, and provide access to the platform services you have registered for. Without this processing, xbaij cannot fulfil its obligations to you under the Terms and Conditions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations, age verification requirements (21+ minimum), data retention requirements, and lawful requests from courts or regulatory authorities.
• Legitimate Interests: Processing carried out in pursuit of xbaij's legitimate business interests, provided those interests are not overridden by your data protection rights. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing communications via email or SMS. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where xbaij relies on legitimate interests as the legal basis for a processing activity, we conduct a balancing test to confirm that our interests do not override your fundamental rights and freedoms. The results of these balancing tests are documented internally and are available to you upon written request.

xbaij does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the circumstances described below and only to the extent strictly necessary for the stated purpose:

• Payment Processors: We share the financial data necessary to process your transaction with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other supported channels). Each payment partner operates under its own privacy policy and is bound by contractual data processing obligations with xbaij.
• Identity Verification Providers: To fulfil our KYC obligations, xbaij may use third-party identity verification services to validate the authenticity of documents you submit during registration. These providers process your identity data solely for verification purposes and are bound by strict confidentiality obligations.
• Game Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data (such as a session token and account identifier) to operate their games on the xbaij platform. These providers do not receive your full identity data or financial data.
• Analytics Providers: xbaij may use privacy-respecting analytics tools to analyse aggregate, anonymised platform usage data. Any such tools are configured to anonymise IP addresses and are prohibited from using xbaij data for their own purposes.
• Legal & Regulatory Authorities: xbaij will disclose personal data to courts, law enforcement agencies, or regulatory bodies where required to do so by a valid legal obligation, court order, or regulatory request. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of xbaij's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via email or prominent notice on the xbaij platform in advance of the transfer taking effect.

xbaij uses cookies and similar tracking technologies (collectively "cookies") to ensure the proper functioning of the platform, to remember your preferences, and to collect aggregate usage data that helps us improve the xbaij experience. A cookie is a small text file placed on your device by the xbaij web server when you visit the platform. The following categories of cookies are used by xbaij:

• Strictly Necessary Cookies: These cookies are essential for the xbaij platform to operate. They maintain your login session so you do not have to re-authenticate on every page, store your in-session bet slip contents, and ensure secure platform navigation. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your stated preferences — such as your preferred deposit method, display settings, and notification preferences — so that xbaij can provide a more personalised experience on your next visit. They do not track your activity outside the xbaij platform.
• Analytics Cookies: xbaij uses privacy-respecting analytics cookies to understand how players navigate the platform in aggregate — for example, which sports markets are most popular, which pages have the highest exit rates, and how platform features are being used. All analytics data is aggregated and anonymised before it is reviewed by the xbaij team.

xbaij does not use advertising cookies, retargeting cookies, or any cookies that track your browsing behaviour across third-party websites. You can control cookie preferences via your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the xbaij platform. Your browser's help documentation provides guidance on managing cookies for your specific browser and device.

xbaij implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our current security measures include:

• Encryption in Transit: All data exchanged between your device and xbaij servers is encrypted using TLS 1.3 / 256-bit SSL. This applies to all platform interfaces including the desktop website and mobile-optimised interface.
• Encryption at Rest: Sensitive personal data and financial data stored on xbaij servers is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within xbaij's internal systems is restricted on a strict need-to-know basis. All xbaij staff and contractors who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: xbaij offers SMS OTP two-factor authentication for all registered accounts. We strongly recommend that all players enable 2FA to protect their account from unauthorised access.
• Intrusion Detection: xbaij's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data flows. Our security team investigates and responds to all alerts in real time.
• Penetration Testing: xbaij engages independent security professionals to conduct regular penetration testing of the platform infrastructure and application layer to identify and remediate potential vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xbaij will notify affected users promptly and take all reasonable steps to contain, investigate, and remediate the breach. Breach notifications will be sent to the email address registered on your xbaij account.

xbaij retains your personal data for no longer than is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply to the main categories of personal data held by xbaij:

At the end of the applicable retention period, personal data is either securely and permanently deleted from xbaij's systems or anonymised such that it can no longer be linked to a specific individual. Anonymised data may be retained indefinitely for aggregate analytics and business intelligence purposes.

As a registered xbaij user, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] from the email address registered on your xbaij account. xbaij will verify your identity before processing any data rights request and will respond within 14 business days of receipt.

• Right of Access: You have the right to request a copy of all personal data that xbaij holds about you, along with information about how that data is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information (such as your contact details) directly via your account settings panel without needing to contact support.
• Right to Erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing — you may request that xbaij delete your personal data. Please note that this right is subject to our legal obligations to retain certain data (such as KYC and financial records) for the minimum periods described in Section 8.
• Right to Restrict Processing: You have the right to request that xbaij restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of the personal data you have provided to xbaij in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where xbaij relies on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

xbaij will not charge a fee for handling data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied. If you are dissatisfied with how xbaij has handled your personal data or a data rights request, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

The xbaij platform is strictly intended for individuals aged 21 years and above. xbaij does not knowingly collect, process, or store personal data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth verification step and a KYC document check specifically designed to prevent access by underage individuals.

If xbaij discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void any bets placed or winnings generated by that account, and securely delete all personal data associated with the underage user as expeditiously as possible.

Parents and guardians who believe that a minor in their care has registered an account on xbaij or accessed the platform are urged to contact us immediately at [email protected]. We take all such reports extremely seriously and will act on them without delay. xbaij also recommends that parents and guardians use parental control software to restrict access to online gambling platforms on shared or family devices.

xbaij's primary servers and data processing infrastructure are operated to serve the Bangladesh market. In some cases, personal data may be transferred to or accessed from servers or service providers located outside Bangladesh — for example, where a third-party game provider or identity verification service processes data on servers in another jurisdiction.

Where such transfers occur, xbaij ensures that appropriate safeguards are in place to protect your personal data at the destination in a manner consistent with the protections described in this Policy. Safeguards may include contractual clauses that require the recipient to protect your data to a standard equivalent to those described herein, and selection of service providers that operate under recognised international data protection frameworks.

By using the xbaij platform and accepting this Privacy Policy, you consent to the transfer of your personal data to servers or service providers in other jurisdictions where necessary for the provision of the xbaij service, subject always to the safeguards described above.

The xbaij platform may contain references to third-party game providers, payment services, and sports data feeds. While xbaij carefully selects its partners and requires them to meet our data protection standards under contract, this Privacy Policy applies only to data processing carried out by xbaij itself and does not cover the privacy practices of any third party.

Payment service providers such as bKash, Nagad, and Rocket operate their own independent privacy policies governing the data they collect and process in connection with your mobile financial service account. xbaij is not responsible for the privacy practices of these providers and encourages you to review their respective privacy policies.

Game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may collect limited technical data (such as game session identifiers) in connection with delivering their games on the xbaij platform. This data collection is governed by those providers' own privacy policies. xbaij does not share your full personal profile with game providers.

xbaij reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. When we make material changes to this Policy, we will update the effective date and version number at the top of this page and, where the changes are significant, notify registered users via the email address associated with their xbaij account or via a prominent notice on the platform.

We encourage you to review this Policy periodically to stay informed about how xbaij protects your personal data. Your continued use of the xbaij platform following the publication of any updated Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you must cease using the xbaij platform and may request account closure by contacting [email protected].

Minor administrative amendments — such as corrections to typographical errors or clarifications that do not alter the substance of the Policy — may be made without specific notification. Only changes that materially affect your rights or our data practices will be accompanied by a formal notice.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data xbaij holds about you , please contact the xbaij Data Protection team using the details below. All privacy-related enquiries are handled by our dedicated support team and will be responded to within 14 business days.

Our Data Protection contact email is: [email protected]

Please include "Privacy Policy Enquiry" in the subject line of your message, along with your registered xbaij username and the nature of your request. This helps our team locate your account and respond to your query as efficiently as possible.

For responsible gaming support, self-exclusion requests, deposit limit adjustments, or account cooling-off requests, please also contact [email protected] and include "Responsible Gaming Request" in your subject line. These requests are treated as high priority and are actioned within one business day of receipt.