xbjae Privacy Policy
At xbjae, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect from Bangladesh players, why we collect it, how we use and store it, who we may share it with, and what rights you have over your own information. Please read this document in full before registering an account.
End-to-End Encryption
All data transmitted between your browser or device and the xbjae platform is encrypted using 256-bit SSL technology. Your login credentials, payment information, and personal details are protected at every step.
You Control Your Data
xbjae players have the right to access, correct, restrict, or request deletion of their personal data at any time. Simply contact our support team at [email protected] to exercise any of these rights.
We Never Sell Your Data
xbjae does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your data is used exclusively to operate and improve the xbjae platform and services.
Transparent Cookie Use
We use first-party and limited third-party cookies solely to maintain your session, remember your preferences, and generate anonymised analytics. Full cookie details are set out in Section 4 of this policy.
Secure Data Storage
Personal data is stored on secure, access-controlled servers with AES encryption at rest. Only authorised xbjae personnel with a legitimate business need are granted access to player records.
Minimal Data Principle
xbjae collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with applicable legal obligations. We do not collect data speculatively or beyond what each purpose requires.
Data We Collect
When you interact with the xbjae platform — whether by registering an account, making a deposit, placing a bet, or contacting support — we collect certain categories of personal data. The specific data we collect depends on how you use the platform and what actions you take. Below is a full breakdown of the categories of personal data xbjae may hold about you.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number, passport number | Registration and KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong) | Registration and account updates |
| Financial Data | bKash / Nagad / Rocket wallet numbers, bank account details, transaction amounts in ৳ | Deposits, withdrawals, and payment verification |
| KYC Documents | Scanned NID card, passport, driving licence, utility bill, bank statement | Identity and address verification |
| Technical Data | IP address, device type, operating system, browser version, time zone (BST UTC+6) | Automatic collection on each visit |
| Usage Data | Pages visited, games played, session duration, bet amounts, bet types | Continuous, during active sessions |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact xbjae support |
| Marketing Preferences | Opted-in promotional channels, preferred game categories, bonus history | When you set preferences or claim bonuses |
Data We Do Not Collect
xbjae does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric data, or health records unless specifically required by law. We do not collect data from individuals who have not registered an account with us, except for anonymised technical data (such as aggregate page-view counts) used solely for website performance analysis.
How We Use Your Data
xbjae processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following sets out the primary purposes for which your data is used, together with the legal basis that justifies each use.
Account Management & Service Delivery
We use your identity and contact data to create and maintain your xbjae player account, authenticate your logins, process deposits and withdrawals in Bangladeshi Taka (৳), award bonuses, record your betting activity, and deliver the core platform services you have signed up for. This processing is necessary for the performance of our contract with you.
Identity Verification & Fraud Prevention
We process your KYC documents and financial data to verify your identity, confirm your age (18+ requirement), confirm ownership of payment methods, and detect, investigate, and prevent fraud, money laundering, and other financial crime. This processing is necessary to comply with our legal obligations and to protect our legitimate business interests.
Responsible Gaming Monitoring
xbjae uses your usage data and betting activity records to monitor for indicators of problem gambling behaviour. This allows us to proactively offer responsible gaming tools — such as deposit limits, cool-off periods, and self-exclusion — to players who may be at risk. This processing is in your vital interest and reflects our commitment to player welfare across Bangladesh.
Customer Support
Your contact data and communications data are used to respond to your support enquiries via live chat and email, to manage formal complaints, to process account closure requests, and to follow up on unresolved issues. Support communications are retained for quality assurance and dispute resolution purposes.
Platform Improvement & Analytics
Anonymised and aggregated usage data is used to analyse how players navigate the xbjae platform, which game categories are most popular, how deposit flows work, and where technical improvements are needed. This analysis is conducted at an aggregate level and does not identify individual players.
Marketing & Promotional Communications
Where you have given explicit consent, we may use your contact data and marketing preference data to send you information about xbjae promotions, bonus offers, seasonal campaigns (e.g., Eid special bonuses, BPL cricket promotions, IPL offers), and new game launches. You may withdraw your marketing consent at any time by contacting [email protected] or by updating your account notification preferences.
Data Sharing & Disclosure
xbjae does not sell your personal data to any third party. We share personal data only where it is strictly necessary to deliver the platform services, to comply with legal obligations, or to protect the safety and interests of our players and the wider public. The following categories of recipients may receive limited personal data from xbjae in the course of normal platform operations.
Payment Processing Partners
To process your deposits and withdrawals in Bangladeshi Taka (৳), xbjae works with payment processing partners who support bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions. These partners receive only the payment data necessary to execute and verify your transaction. They are bound by strict data processing agreements and are not permitted to use your data for any purpose beyond payment facilitation.
Game Technology Providers
The casino games and sports betting products on the xbjae platform are supplied by third-party technology partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account identifier and game session data to authenticate your access to their games and to maintain accurate game records. They do not receive your full name, payment details, or KYC documents.
Legal & Regulatory Disclosure
xbjae may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory authorities where required to do so by applicable law, by court order, or where we have a good-faith belief that disclosure is necessary to prevent or investigate criminal activity, fraud, or a threat to public safety. In such cases, disclosure will be limited to the minimum data required to satisfy the legal obligation.
IT & Infrastructure Providers
xbjae uses third-party cloud hosting, cybersecurity, and infrastructure providers to operate and maintain the platform. These providers process personal data only on our documented instructions, under strict confidentiality obligations, and are not permitted to access or use your data for their own purposes. All infrastructure providers are contractually required to implement security standards consistent with industry best practice.
Cookies & Tracking Technologies
xbjae uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, and collect anonymised analytics data. A cookie is a small text file placed on your device by a website server. It cannot execute programmes or deliver viruses; it simply allows the site to recognise your browser on subsequent visits.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, load game assets, prevent CSRF attacks, enforce security policies | Session (deleted on browser close) |
| Functional | Remember your display language (English), notification preferences, and responsible gaming settings | Up to 12 months |
| Analytics | Anonymised page-view counts, feature usage rates, error logging — used to improve platform performance | Up to 24 months |
| Marketing | Track which promotional campaigns led to account registration or deposit (used only with your consent) | Up to 30 days |
Managing Cookies
You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only first-party cookies, or delete cookies after each session. Please note that disabling strictly necessary cookies will prevent you from logging into your xbjae account and using core platform features. Disabling functional or analytics cookies will not affect your ability to play, deposit, or withdraw.
xbjae does not use cookies to track your activity on websites other than xbjae.net. We do not sell cookie-derived data to advertising networks or data brokers.
Data Retention & Storage
xbjae retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our operational obligations. The following retention periods apply to the main categories of player data we hold.
- Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations.
- Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction. This includes deposit records, withdrawal records, and bonus transaction logs, all denominated in Bangladeshi Taka (৳).
- KYC Documents: Retained for the duration of your account plus 5 years following closure. Physical copies are not retained; all KYC documents are stored digitally in encrypted form.
- Communications Data: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction for quality assurance and dispute resolution purposes.
- Usage and Game Activity Data: Session and betting records are retained for 3 years from the date of activity. Anonymised aggregate analytics data may be retained indefinitely.
- Marketing Preference Data: Retained until you withdraw your marketing consent, after which your contact details are removed from all active marketing lists within 30 days.
When the retention period for a category of data expires, that data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. Data deletion processes are reviewed periodically by our internal compliance team to ensure adherence to these retention schedules.
Data Security Measures
Protecting the personal data of our Bangladesh players is a core operational priority at xbjae. We implement a multi-layered security framework that combines technical controls, organisational policies, and staff training to minimise the risk of unauthorised access, data loss, or data breach.
Technical Safeguards
- Transport Encryption: All data in transit between your device and our servers is protected by 256-bit SSL/TLS encryption. HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS) headers active.
- Data at Rest Encryption: Personal data stored in our databases is encrypted using AES-256. Encryption keys are managed through a dedicated key management system with access restricted to authorised infrastructure personnel only.
- Access Controls: Access to player data within xbjae's internal systems is granted on a strict need-to-know basis. Role-based access controls (RBAC) ensure that support agents, finance teams, and compliance officers only see the data categories relevant to their function.
- Two-Factor Authentication: All internal xbjae staff accounts that have access to player data require two-factor authentication. We also strongly encourage players to enable two-factor authentication on their own xbjae accounts via the account security settings.
- Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems. Suspicious activity patterns trigger immediate alerts to our security team for investigation.
- Penetration Testing: xbjae commissions regular independent penetration tests and security audits of the platform's infrastructure to identify and remediate vulnerabilities before they can be exploited.
Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, xbjae will notify affected individuals as promptly as practicable. Notifications will be issued in English via the email address registered on your xbjae account and will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we have taken and recommend you take to mitigate potential harm.
Your Privacy Rights
As a registered xbjae player, you have the following rights with respect to your personal data. These rights may be exercised at any time by contacting our support team in English via live chat or at [email protected]. We will respond to all valid privacy rights requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
Right of Access
You have the right to request a copy of all personal data xbjae holds about you. This is sometimes called a Subject Access Request (SAR). We will provide a full data export in a structured, commonly used format, covering all categories of data listed in Section 1 of this policy, together with details of the purposes for which each category is processed and the retention periods that apply.
Right to Rectification
If any of the personal data xbjae holds about you is inaccurate or out of date — for example, if you have changed your mobile number or moved from Dhaka to Chittagong — you have the right to request that we correct it. You may update many account details directly via your account settings, or contact support for assistance with data that cannot be self-updated.
Right to Erasure
You may request that xbjae delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been processed unlawfully. Please note that the right to erasure is not absolute — we may be required to retain certain data for legal compliance reasons as described in Section 5. Where erasure is not possible in full, we will explain the specific data categories that must be retained and the legal basis for doing so.
Right to Restrict Processing
In certain circumstances — such as where you contest the accuracy of your data or where you have objected to processing — you may request that xbjae restrict its use of your personal data while the matter is under review. During a restriction period, we will store your data but not actively process it, except where strictly required for legal compliance.
Right to Data Portability
Where processing is based on your consent or on a contractual relationship with you, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider if you choose to do so.
Right to Object to Marketing
You have the right to object to the use of your personal data for direct marketing purposes at any time. Upon receiving a valid objection, xbjae will cease all marketing communications to you within 30 days and will update your marketing preference record accordingly.
Contact & Privacy Enquiries
If you have any questions about this Privacy Policy, about how xbjae processes your personal data, or about exercising any of your privacy rights, please contact our support team. All privacy-related communications must be submitted in English and will be handled by trained personnel with responsibility for data protection matters.
Support Channels
- Live Chat: Available 24 hours a day, 7 days a week directly from the xbjae platform. Live chat is the fastest channel for general privacy questions and account-related data queries.
- Email: For formal privacy rights requests, data breach reports, or written privacy enquiries, contact us at [email protected] with the subject line "Privacy Enquiry". We aim to acknowledge all written enquiries within 48 hours and to provide a substantive response within 30 days.
Policy Updates
xbjae reserves the right to update this Privacy Policy at any time. When material changes are made, the revised policy will be published on this page with an updated effective date, and registered players will be notified via their registered email address. Your continued use of the xbjae platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a revised policy, you should cease using the platform and request account closure.
This Privacy Policy was last updated on 1 January 2026 and applies to all players using the xbjae platform regardless of their location within Bangladesh, including players in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
Your Privacy Is Our Priority
Have questions about your data? Our English-language support team is available 24/7. You can also explore other key policies, browse our games, or log in to your xbjae account.