xbajy Privacy Policy — How We Handle Your Data

Introduction

1. Introduction and Scope of This Policy

xbajy ("we", "us" or "our") is committed to protecting the privacy of all registered players and visitors to the xbajy Platform at xbajy.org. This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the third parties with whom it may be shared, and the rights available to you as a data subject. This policy applies to all individuals who register an account with xbajy, access the Platform as a guest, or interact with xbajy through any other channel including customer support communications.

By accessing or using the xbajy Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should not use the Platform. For questions about how your data is handled, you may contact xbajy via the support email address published on the Platform.

Data Use

3. How xbajy Uses Your Personal Data

xbajy processes your personal data for the following purposes. We do not process your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• 1
  Account creation, identity verification (KYC), and ongoing account management — including processing deposits and withdrawals via bKash, Nagad, Rocket and other supported payment channels.
• 2
  Providing access to the full range of xbajy services, including live casino games, slots, crash games, fish shooting games, and cricket betting markets such as BPL and IPL fixtures.
• 3
  Fraud prevention, anti-money laundering compliance, and detection of prohibited conduct as described in the xbajy Terms and Conditions — including monitoring for duplicate accounts, bonus abuse and suspicious transaction patterns.
• 4
  Responsible gaming monitoring — tracking session patterns to identify players who may be at risk and enabling deposit limit, session reminder and self-exclusion tools on your account.
• 5
  Customer support — responding to your enquiries, processing complaints, and maintaining records of our communications as required for dispute resolution and regulatory compliance.
• 6
  Service improvement and Platform analytics — using aggregated, anonymised data to understand how Bangladesh players use xbajy, identify technical issues, and improve the overall gaming experience. Individual player data is not used for this purpose in identifiable form.

Data Sharing

5. Who We Share Your Data With

xbajy does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary for the stated purpose.

• 1
  Payment service providers — bKash, Nagad, Rocket, Upay and banking partners receive the minimum data necessary to process your deposit and withdrawal transactions. These providers have their own privacy policies governing their handling of your data.
• 2
  Game content providers — certified studios such as Evolution Gaming, Pragmatic Play, Spribe and others receive session data necessary to deliver and log game outcomes. Game providers do not receive your payment or identity data.
• 3
  Regulatory and law enforcement authorities — where required by applicable law, we may disclose your data to government bodies, regulatory agencies, or law enforcement authorities. xbajy will comply with lawful requests while endeavouring to notify you where permitted by law.
• 4
  Technical and operational service providers — including hosting infrastructure providers, analytics platforms (using anonymised data only), and customer support software providers, under contractual obligations of confidentiality and data protection.

Cookies

7. Cookies and Tracking Technologies

xbajy uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following types of cookies are used.

• 1
  Essential cookies — strictly necessary for the Platform to function, including session authentication, language preferences, and security tokens. These cannot be disabled without breaking core functionality.
• 2
  Analytics cookies — used in anonymised form to understand how players navigate xbajy, which game categories are most accessed, and where technical errors occur. No individual player is identified through analytics data.
• 3
  Preference cookies — store your language selection and display settings so you do not need to re-enter them on each visit. You may clear these via your browser settings at any time, though doing so will reset your stored preferences.

Your Rights

9. Your Data Subject Rights

As a player using xbajy, you have the following rights in relation to your personal data. To exercise any of these rights, contact xbajy support via the email address published on the Platform. xbajy will respond to valid requests within a reasonable timeframe.

• Right of Access

  You have the right to request a copy of the personal data xbajy holds about you, including account information, transaction history, and gaming records.

• Right to Rectification

  You have the right to request that inaccurate or incomplete personal data held by xbajy be corrected or completed. Requests to update name, date of birth, or contact details may require supporting documentation.

• Right to Erasure

  You have the right to request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations such as those applicable to financial and anti-money laundering records.

• Right to Restrict Processing

  You have the right to request that xbajy restricts the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.

• Right to Object

  Where xbajy processes your data on the basis of legitimate interests, you have the right to object to that processing. xbajy will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

Third-Party Links

11. Third-Party Links and Services

The xbajy Platform may contain references to game providers and payment partners that operate their own platforms and privacy policies. xbajy is not responsible for the privacy practices of any third-party provider. When you interact with a third-party payment service such as bKash or Nagad, your data is processed by that provider in accordance with its own privacy policy. xbajy recommends that you review the privacy policies of any third-party services you use in connection with your xbajy account.

Contact

13. How to Contact Us About Your Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how xbajy has handled your personal data, please contact the xbajy support team using the details below. xbajy will acknowledge your request and respond within a reasonable timeframe. For account-related enquiries, please have your registered account details available when contacting support.