Privacy Policy — Your Data, Our Responsibility

1. Data We Collect

x bajee collects personal data in the following categories, depending on how you interact with the platform:

1.1 Registration Data

When you create an x bajee account, we collect the information you provide directly, including:

• Full legal name;
• Date of birth (to verify age eligibility);
• Email address and mobile phone number;
• Residential address (city, district, postal code);
• Username and encrypted account password;
• Preferred payment method and associated account identifiers (e.g., bKash mobile number).

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to protect the integrity of our platform, x bajee may request the following documents before processing withdrawals or at any point during your account lifetime:

• National Identity Card (NID) or passport;
• Driving licence (where used as a secondary identity document);
• Proof of address (utility bill, bank statement, or equivalent);
• Selfie photograph for liveness verification.

KYC documents are stored in an encrypted document vault. Access is restricted to authorised x bajee compliance personnel only.

1.3 Transaction Data

x bajee maintains records of all financial transactions associated with your account, including deposit amounts, withdrawal requests, bonus credits, wager history, and payout records. Transaction records are denominated in Bangladeshi Taka (BDT) and are retained for audit and fraud-prevention purposes.

1.4 Technical & Device Data

When you access x bajee, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location (city level);
• Browser type, version, and operating system;
• Device type (desktop, mobile, tablet) and screen resolution;
• Session timestamps, page views, and navigation paths;
• Referral source (how you arrived at the x bajee website).

This technical data is used exclusively for platform security, fraud detection, and aggregate analytics. It is not linked to individual player profiles for marketing purposes.

1.5 Customer Support Communications

When you contact x bajee support via email at [email protected], we retain records of the communication — including your name, contact details, and the content of your message — to resolve your query and to improve our support quality. Support records are retained for a period of 24 months from the date of the most recent interaction.

2. How We Use Your Data

x bajee uses the personal data it collects for the following clearly defined purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, device data	Contractual necessity
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Transaction data, payment method identifiers	Contractual necessity
Fraud detection and prevention	IP address, device data, transaction patterns	Legitimate interest
Customer support resolution	Support communication records	Contractual necessity
Platform security monitoring	Session data, login history, device data	Legitimate interest
Responsible gaming monitoring	Wager history, session duration, deposit frequency	Legal obligation / legitimate interest
Service improvement and analytics	Aggregated, anonymised usage data	Legitimate interest

x bajee does not use your personal data to serve third-party advertisements, build behavioural profiles for sale, or share your information with data brokers. Any direct communications we send you — such as account notifications or promotional offers — relate exclusively to your x bajee account activity and are sent to the contact details you registered with us.

3. Cookies & Tracking

x bajee uses a limited set of cookies to ensure the platform functions correctly and securely. We do not use advertising networks or third-party behavioural tracking technologies on our platform.

3.1 Essential Cookies

Essential cookies are required for the platform to operate. They manage your login session, maintain your cart or game state between page loads, and protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing core platform functionality.

3.2 Analytics Cookies

We use first-party analytics cookies to understand aggregate user behaviour — such as which pages are most visited, how long sessions last, and where users tend to exit the platform. This data is collected in anonymised, aggregated form only and is used solely to improve the x bajee user experience. No individual player is identified through analytics data.

3.3 Fraud Prevention Cookies

Certain cookies support our fraud detection systems by allowing x bajee to recognise trusted devices and flag unusual login patterns, such as access from a new device or an unfamiliar location. These cookies are a core component of our account security infrastructure.

3.4 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will affect your ability to log in and use the x bajee platform normally. Disabling analytics or fraud-prevention cookies may reduce the level of security protection applied to your account.

4. Data Sharing & Third Parties

x bajee does not sell or rent your personal data. We share your data with third parties only in the following strictly limited circumstances:

4.1 Payment Processing Partners

To process deposits and withdrawals, x bajee shares the minimum necessary transaction data — such as your registered mobile number or bank account identifier — with the relevant payment gateway (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard). Each payment partner operates under its own privacy terms and data security obligations. x bajee does not transmit full payment credentials to these partners beyond what is technically required to complete the transaction.

4.2 Game Technology Providers

x bajee's game catalogue includes products from third-party game studios and live dealer providers such as Ezugi, Pragmatic Play, Spribe, Evolution Gaming, NetEnt, and Microgaming. These providers may receive anonymised session identifiers to facilitate game delivery and fair-play certification. No personally identifiable registration data is shared with game providers.

4.3 Identity Verification Services

Where x bajee uses a third-party KYC verification service to process identity documents, that service provider is contractually bound to handle your data in accordance with confidentiality and data security standards equivalent to those applied by x bajee. KYC data is never shared beyond the scope of identity verification.

4.4 Legal & Regulatory Disclosure

x bajee may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are subject to a lawful instruction, court order, or regulatory obligation to do so. In such cases, x bajee will disclose only the minimum data required to comply with the specific legal request and will not volunteer additional information beyond the scope of that request.

4.5 Business Transfers

In the event that x bajee undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the successor entity as part of that transaction. Should such a transfer occur, the successor entity will be required to honour the commitments made in this Privacy Policy with respect to your personal data, and you will be notified of any material changes to how your data is processed.

5. Data Retention

x bajee retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and responsible platform management standards. The following retention periods apply:

Data Category	Retention Period	Reason for Retention
Account registration data	Duration of account + 5 years after closure	Audit trail, fraud prevention, legal compliance
KYC identity documents	Duration of account + 5 years after closure	Regulatory and anti-money-laundering obligations
Transaction records	7 years from the date of each transaction	Financial audit requirements
Wager and game history	3 years from the date of each session	Dispute resolution, responsible gaming monitoring
Customer support records	24 months from last interaction	Quality assurance, dispute resolution
Technical / session logs	90 days rolling	Security monitoring, fraud detection

When a retention period expires, x bajee securely deletes or anonymises the relevant data so that it can no longer be linked to any individual player. Data subject to an active investigation or legal hold will be retained until that matter is resolved, after which normal retention rules apply.

6. Data Security

x bajee implements a layered security architecture to protect the personal data of our players. Our security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your browser or device and the x bajee platform is encrypted using Transport Layer Security (TLS). You should always see a valid HTTPS connection when accessing x bajee.
• Encrypted data storage: Sensitive fields — including passwords, KYC documents, and payment method identifiers — are stored in encrypted form. Passwords are hashed using a one-way algorithm and cannot be recovered by x bajee staff.
• Access controls: Internal access to personal data is restricted to authorised x bajee personnel on a need-to-know basis. Access logs are maintained and audited regularly.
• Intrusion detection: x bajee operates real-time monitoring systems to detect and respond to anomalous access patterns, brute-force attempts, and other potential security threats.
• Regular security audits: Our platform infrastructure undergoes periodic security reviews to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If you believe your x bajee account has been compromised, contact our support team immediately at [email protected] so that we can take protective action on your account without delay.

7. Your Rights

As a player on x bajee, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 2 business days and respond in full within 7 business days (Bangladesh Standard Time, UTC+6).

7.1 Right of Access

You have the right to request a copy of the personal data x bajee holds about you. We will provide this in a clear, readable format. Where the volume of data is substantial, we may provide it in structured sections.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a misspelled name) can often be resolved by contacting support directly. Corrections to identity-critical fields such as date of birth may require supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other legal basis for processing exists. Please note that certain data — particularly transaction records and KYC documents — must be retained for the regulatory retention periods set out in Section 5, and cannot be deleted on request during those periods.

7.4 Right to Restriction of Processing

In certain circumstances — such as where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over deletion — you may request that x bajee restrict the processing of your personal data to storage only, pending resolution of the dispute.

7.5 Right to Data Portability

Where technically feasible, you may request a structured, machine-readable export of the personal data you provided to x bajee, such as your account registration information and transaction history, so that you may transfer it to another service provider.

7.6 Right to Object

You have the right to object to the processing of your personal data where x bajee relies on legitimate interest as the legal basis for that processing, and where you believe your individual rights and freedoms outweigh those legitimate interests. Objections will be assessed on a case-by-case basis.

8. Contact for Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data x bajee holds about you, please contact our data team using the details below. We are committed to handling all data-related queries with diligence and transparency.

Data Enquiries:
Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 7 business days (Bangladesh Standard Time, UTC+6)

x bajee reserves the right to update this Privacy Policy periodically to reflect changes in platform operations, applicable regulations, or industry best practices. When material changes are made, registered players will be notified via the email address associated with their account. The "Effective" date at the top of this page reflects the date of the most recent revision. Continued use of the x bajee platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms.