xbaji Privacy Policy

This privacy policy ("Policy") applies to the xbaji platform and all its services. By using the xbaji website or creating an account, you agree to the terms set out in this policy. This policy applies in both English and Bengali, and in the event of any conflict between the two, the Bengali version takes precedence.

xbaji places the highest importance on the security of its users' personal information. The purpose of this policy is to clearly inform you of the reasons we use your information, how long we retain it, and our policy on sharing any information with third parties.

xbaji collects the following types of information:

2.1 Information Provided Directly

When you register an account on xbaji, make a deposit, withdraw, or contact our support team, you voluntarily provide certain information. This includes:

• Full name and date of birth
• Mobile number and email address
• National ID or passport details (for identity verification)
• Username and password
• Mobile financial service details (bKash, Nagad, Rocket, Upay — for transaction verification)

2.2 Automatically Collected Information

When you use the xbaji website or app, certain information is collected automatically:

• IP address and device type
• Browser type and version
• Pages visited and time spent
• Cookie and session data
• Login time and activity history

2.3 Information Received from Third Parties

In certain cases, information may be collected from payment processors and identity verification agencies — solely for the purpose of ensuring the security of your account and the validity of transactions.

xbaji uses your information only for specific and legitimate purposes. The information collected is used for the following:

• Creating accounts and verifying identity
• Processing deposits, withdrawals and other financial transactions
• Activating bonuses and promotions and providing VIP benefits
• Providing customer support — via live chat and email
• Ensuring platform security and preventing fraudulent activity
• Improving service quality and resolving technical issues
• Meeting legal obligations
• Personalising the service according to user preferences

xbaji uses industry-standard security measures to keep your information safe. Our security framework includes:

4.1 Encryption and Protection

• All data transmissions are encrypted using SSL (Secure Socket Layer) technology
• Sensitive information — especially passwords — is stored in encrypted form and is never kept in plain readable form
• Financial transaction data is stored in a separate secured layer
• Regular security audits and vulnerability assessments are carried out

4.2 Data Retention Period

Relevant information is retained while your account remains active. After an account is closed, some information may be kept for a specified period as required by legal obligations. Once no longer needed, information is securely deleted or anonymised.

4.3 Access Control

Only authorised staff may access user information for specific operational needs. This access is logged and reviewed regularly. However, no data transmission over the internet is entirely risk-free — so keeping your password and login details confidential is your responsibility.

The xbaji website uses cookies and similar tracking technologies. Cookies are small text files stored on your device.

5.1 Types of Cookies

• Essential cookies: These are necessary to maintain login sessions and keep core functionality running. The service will not work properly without these cookies.
• Functionality cookies: These remember your preferences and settings — such as language preference or balance display options.
• Analytics cookies: Used to monitor site usage and improve the service. This information is analysed in aggregate, not individually.

5.2 Cookie Control

You can disable cookies from your browser settings, but some parts of the service may not work correctly if you do. Essential cookies cannot be turned off, as they are necessary for the core functioning of the service.

xbaji does not sell or rent your personal information to third parties. However, limited information may be shared in specific circumstances:

6.1 Service Providers

Only necessary information is shared with payment processors (bKash, Nagad, Rocket, Upay), identity verification agencies and technology service providers. These third parties are bound to use the information under our terms and may not use it for any other purpose.

6.2 Legal Obligations

It may be legally required to disclose information upon a court order or a valid request from a competent authority. In such circumstances, only the information required by law will be provided.

6.3 Business Changes

In the event of a business acquisition or merger, user information may be transferred. If such a change occurs, users will be notified in advance and will have the option to close their account if they do not accept the new policy.

As a user of xbaji, you have the following rights over your own information:

• Access: You may ask what information we hold about you.
• Correction: If your information is incorrect or outdated, you may request that it be corrected.
• Deletion: In certain circumstances you may request that your information be deleted, though it may not be possible to delete all information if legal obligations apply.
• Objection to processing: You may object to your information being used for marketing or other specific purposes.
• Portability: You may request your information in a structured format.

xbaji is for persons aged 21 and above only. We do not knowingly collect personal information from any minor. An age verification process is followed at the time of account registration. If we become aware that a minor's information has been collected by mistake, it will be deleted immediately.

To learn more about ensuring responsible gaming, please read our Responsible Gaming page, where safe play practices and ways to set limits are discussed in detail.

xbaji's servers and data processing centres may be located in various countries. Regardless of where your information is stored or processed, the protection standards set out in this policy apply everywhere.

When sharing information with third parties, appropriate agreements are used to ensure they follow the same standard of data protection.

xbaji reserves the right to change this privacy policy as needed. If significant changes are made, users will be notified by email or via a notice on the platform. For minor changes, only the "Last updated" date at the top of the page will be changed.

Continuing to use the service after a policy change means you have accepted the new policy. We therefore recommend visiting this page regularly.

To learn more about xbaji, visit our About Us page.

If you have any questions, concerns or requests regarding this privacy policy, please contact our support team. We are available 24 hours a day, seven days a week in both Bengali and English.