Privacy Policy of xbbajee

1 Information We Collect

xbbajee collects personal data that is necessary to provide you with a safe, functional, and enjoyable gaming experience. The categories of data we collect depend on how you interact with the platform and are outlined below.

Information You Provide Directly

When you register an account on xbbajee, you provide us with certain personal details. This includes your full name, date of birth, email address, mobile number, and preferred payment method. You may also provide a residential address as part of the identity verification (KYC) process.

• Registration data: Full name, date of birth, email address, mobile number, preferred username.
• Identity verification data: National Identity Card (NID), passport, or driving licence copy; proof of address document.
• Payment data: bKash or Nagad mobile number, Rocket account reference, bank account details where applicable. Full payment card numbers are never stored by xbbajee.
• Communications: Messages sent to our support team via email or live chat, including the content of those messages.

Information Collected Automatically

When you use the xbbajee platform, certain data is collected automatically by our systems and third-party analytics tools. This data helps us maintain platform security, diagnose technical issues, and understand how players engage with our games and features.

• Device data: Device type, operating system, browser type and version, screen resolution.
• Network data: IP address, approximate geographic location (derived from IP), mobile network operator.
• Usage data: Pages visited, games played, bet amounts, session duration, click patterns, and navigation paths within the platform.
• Cookie and tracker data: Session identifiers, preference cookies, analytics cookies. See the Cookies section below for full details.

Information from Third Parties

In limited circumstances, xbbajee may receive information about you from third parties. This includes identity verification data returned by KYC service providers, fraud risk scores from anti-fraud systems, and payment status updates from bKash, Nagad, Rocket, and other payment processors. Such information is used solely for the purposes described in this Privacy Policy.

2 How We Use Your Data

xbbajee processes your personal data for specific, legitimate purposes. The table below maps the primary uses of your data to the legal basis on which xbbajee relies for each processing activity.

Marketing Communications

xbbajee will only send you marketing emails, SMS messages, or in-platform notifications if you have explicitly opted in to receive them during registration or via your account settings. Marketing communications may include information about promotions, bonuses, new games, BPL season offers, Eid specials, and other platform news.

You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting support at support@xbbajee. Withdrawing marketing consent does not affect service messages such as deposit confirmations, withdrawal notifications, and account security alerts — these are sent on the basis of contract performance and cannot be disabled.

3 Cookies and Tracking

xbbajee uses cookies and similar technologies such as local storage objects and pixel tags to operate the platform effectively and to understand how players interact with our services. This section explains what these technologies are, which ones we use, and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember information about your session, preferences, and usage patterns. Cookies cannot access other files on your device and do not carry viruses or malware.

Types of Cookies Used by xbbajee

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language, preferred game view, and whether you have dismissed certain notices. These improve your experience but are not essential.
• Analytics cookies: Allow us to understand aggregate usage patterns — which games are most popular, how long sessions last, and where users navigate. This data is anonymised and used to improve the platform.
• Marketing cookies: Used only if you have consented to marketing. These allow us to show you relevant offers based on your activity on xbbajee.

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, and be notified when a new cookie is placed. Note that disabling strictly necessary cookies will prevent you from logging in to your xbbajee account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

4 Data Sharing and Disclosure

xbbajee does not sell, rent, or trade your personal information to third parties for commercial purposes. We share your data only in the specific, limited circumstances described below.

Payment Processors

To process your deposits and withdrawals, xbbajee shares the minimum necessary payment and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers process your data under their own privacy policies and are bound by their own regulatory obligations.

Identity Verification Providers

During the KYC process, your identity documents may be shared with accredited third-party identity verification service providers. These providers verify document authenticity and return a verification result to xbbajee. They are not permitted to retain your documents beyond the verification process.

Game Providers

Games on xbbajee are powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may collect technical session data (such as game session IDs and bet outcomes) in order to deliver their games. They do not receive your full identity or payment data.

Legal and Regulatory Disclosure

xbbajee may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to the rights of others.

5 Data Retention

xbbajee retains your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, and for as long as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

When the applicable retention period expires, xbbajee will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where anonymisation is not technically possible, the data will be securely archived and isolated from active processing systems.

6 Security of Your Data

xbbajee takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction.

Technical Safeguards

• All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL).
• Passwords are stored using industry-standard one-way hashing algorithms. xbbajee staff cannot view your password in plain text.
• Payment data is handled in compliance with the standards set by our payment partners; full card numbers are never stored on xbbajee servers.
• Access to production systems containing personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• Regular security audits and vulnerability assessments are conducted on the xbbajee platform infrastructure.

Organisational Safeguards

• All staff with access to personal data receive mandatory data protection training.
• Data access is granted on a need-to-know basis only.
• Third-party service providers who process personal data on our behalf are bound by data processing agreements requiring them to implement equivalent security standards.

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, xbbajee will notify affected users as promptly as possible and take immediate steps to contain and remediate the breach. Where legally required, relevant authorities will also be notified.

7 Your Privacy Rights

As a user of xbbajee, you hold a number of rights in relation to the personal data we hold about you. xbbajee is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at support@xbbajee with the subject line "Privacy Rights Request".

• Right of access: You may request a copy of the personal data xbbajee holds about you, including the categories of data, the purposes for which it is processed, and the parties with whom it has been shared.
• Right to rectification: If any personal data xbbajee holds about you is inaccurate or incomplete, you may request that it be corrected or completed. You can update many details directly via your account settings.
• Right to erasure: You may request that xbbajee deletes your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that some data must be retained by law and cannot be erased on request.
• Right to restrict processing: In certain circumstances, you may request that xbbajee restricts the processing of your data — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes. If you object to marketing, xbbajee will cease marketing processing immediately.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

xbbajee will respond to all verified privacy rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, and you will be informed of the extension and the reasons for it.

8 Updates to This Policy

xbbajee reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, applicable law, or regulatory guidance. When material changes are made, we will notify you by email to your registered address or by displaying a prominent notice on the platform.

The "Effective" date at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this Privacy Policy regularly so that you remain informed about how xbbajee protects your personal information.

Your continued use of xbbajee following the posting of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes made to this Privacy Policy, you should stop using the platform and may request account closure by contacting support at support@xbbajee.