xbajre Privacy Policy

When you register an account, use the xbajre Platform, or contact our support team, we collect certain personal data. We gather only what is necessary to provide you with a safe, legal, and enjoyable experience. The categories of data we collect are set out below.

1.1 Registration Data

When you create an xbajre account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued photo ID)
• Email address
• Bangladesh mobile phone number
• Date of birth (to verify you are 18 years of age or older)
• Account password (stored in encrypted, hashed form — never in plain text)
• Preferred currency (Bangladeshi Taka, BDT, by default)

1.2 KYC Verification Data

To comply with our Know Your Customer (KYC) obligations and to process withdrawal requests, we collect identity verification documents including:

• Bangladesh National Identity Card (NID) — front and back images
• Valid Bangladesh or international passport (photo page image)
• Proof of address documents (utility bills or bank statements dated within 90 days)
• Selfie photograph for identity confirmation, where required

1.3 Financial Transaction Data

When you make deposits or withdrawals on xbajre, we record:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Transaction amounts in Bangladeshi Taka (BDT)
• Transaction timestamps and reference numbers
• The mobile number or account number associated with your payment method

We do not store full card numbers on our servers. All card payment data is processed via PCI-DSS compliant payment gateways. Mobile money transactions (bKash, Nagad, Rocket) are handled through encrypted API integrations with the respective payment providers.

1.4 Technical & Usage Data

When you browse or use the xbajre Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser type and version
• Pages visited, games played, and session duration
• Referring URL (the address of the page that linked you to xbajre)
• Click-path data and on-site interaction events

1.5 Communications Data

If you contact our customer support team by email, live chat, or any other channel, we retain a record of that communication including the content of messages, timestamps, and any files or screenshots you submit. This information is used to resolve your query, improve our support processes, and maintain a history of your interactions with xbajre for quality and training purposes.

xbajre uses the personal data it collects solely for legitimate operational purposes. We do not use your data for purposes beyond those described in this Privacy Policy without first obtaining your explicit consent. The primary purposes for which we process your personal data are as follows:

2.1 Marketing Communications

xbajre will only send you promotional emails, bonus notifications, or marketing messages if you have explicitly opted in to receive such communications at the time of registration or via your account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Withdrawing marketing consent does not affect the lawfulness of processing carried out before your withdrawal.

2.2 Automated Decision-Making

xbajre uses automated systems for certain operational decisions, including fraud detection scoring, bonus abuse flagging, and responsible gaming alerts. Where an automated decision produces a significant effect on your account (such as a temporary suspension), you have the right to request a manual review of that decision by contacting our support team at [email protected]. We will acknowledge your request within 5 working days and provide a human review outcome within 14 working days.

xbajre does not sell or rent your personal data to any third party under any circumstances. We may, however, share certain categories of personal data with trusted third-party service providers where it is strictly necessary to operate the Platform and deliver services to you. All third parties with whom we share data are contractually bound to process that data only for the specified purpose and in compliance with applicable data protection standards.

3.1 Categories of Third-Party Recipients

• Payment Processors: Mobile money providers (bKash, Nagad, Rocket, Upay) and international card schemes (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals. Payment processors operate under their own privacy policies and PCI-DSS compliance frameworks.
• Banking Partners: Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank may receive transfer instructions containing your name and account details when you request a bank transfer withdrawal.
• KYC & Identity Verification Services: Identity documents submitted for KYC verification are processed by our trusted identity verification partner. Document images and verification outcomes are stored securely and are not shared beyond the verification workflow.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate game loading. Game providers do not receive your full name, payment data, or contact details.
• IT Infrastructure and Hosting Providers: Our cloud hosting and CDN partners store Platform data on secure, encrypted servers. All hosting agreements include data processing addenda that restrict how infrastructure providers may handle your data.
• Fraud Detection and Security Tools: Anonymised technical data (IP address, device fingerprint, session patterns) may be processed by fraud detection tools to identify suspicious activity and protect your account.

3.2 Legal Disclosures

xbajre may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, a valid court order, or a formal legal request. In all such cases, we will disclose only the minimum data required to satisfy the legal obligation and will notify you of the disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event that xbajre undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, xbajre will take reasonable steps to ensure that your data continues to be handled in a manner consistent with this Privacy Policy, and will notify registered players by email prior to any material change in data controller.

xbajre uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and gather analytics data that helps us improve our services. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) by websites you visit. They are widely used to make websites work efficiently, remember your preferences, and provide information to website operators. Cookies set by xbajre are first-party cookies. Cookies set by our third-party service providers (such as analytics tools or game providers) are third-party cookies.

4.2 Types of Cookies We Use

4.3 Managing Your Cookie Preferences

You can control or delete cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, and receive a notification each time a new cookie is placed. Please note that disabling strictly necessary cookies will affect the functionality of the xbajre Platform — you may be unable to log in or maintain an active session if these cookies are blocked.

For instructions on managing cookies in your specific browser, refer to your browser's help documentation. Common browser cookie management guides:

• Google Chrome: Settings → Privacy and Security → Cookies and Other Site Data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Samsung Internet (popular in Bangladesh): Settings → Privacy → Smart Anti-Tracking
• Safari (iOS/macOS): Settings → Safari → Privacy & Security

4.4 Local Storage & Similar Technologies

In addition to cookies, xbajre may use browser local storage and session storage to hold temporary data such as your current game session state and UI preferences. This data is stored locally on your device and is not transmitted to xbajre servers in the same way as cookies. You can clear local storage data through your browser's developer tools or by clearing your browser's site data for xbajre.net.

xbajre retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our legal, regulatory, and operational obligations. When data is no longer required, it is securely deleted or anonymised in accordance with our internal data lifecycle policy.

5.1 Retention Periods

5.2 Data Storage Location

All personal data collected by xbajre is stored on secure cloud servers. Data is encrypted both in transit (via TLS 1.2 or higher) and at rest (AES-256 encryption). Server infrastructure is maintained by our hosting partners under strict contractual data processing agreements that prohibit any unauthorised use of your data.

5.3 Data Deletion

When personal data reaches the end of its retention period, or when a valid deletion request is received and approved, xbajre will securely delete or anonymise the data within 30 days. Where data cannot be immediately deleted due to an active legal hold, ongoing dispute, or regulatory requirement, deletion will be completed as soon as the legal hold is lifted. You will be informed of any such delay if you have submitted a deletion request.

xbajre takes the security of your personal data seriously and implements a range of technical, organisational, and procedural safeguards to protect your information against unauthorised access, loss, alteration, or disclosure.

6.1 Technical Security Controls

• SSL/TLS Encryption: All data transmitted between your device and xbajre servers is protected by 256-bit SSL/TLS encryption. The padlock indicator in your browser confirms that your connection is secure at all times.
• Password Hashing: Account passwords are never stored in plain text. They are one-way hashed using industry-standard cryptographic algorithms before storage.
• Two-Factor Authentication (2FA): Players are encouraged to enable two-factor authentication on their xbajre accounts for an additional layer of login security.
• DDoS Protection: xbajre's infrastructure is protected by distributed denial-of-service mitigation systems to ensure Platform availability and prevent malicious traffic from disrupting services.
• Intrusion Detection: Automated intrusion detection and prevention systems monitor Platform activity around the clock for signs of unauthorised access or anomalous behaviour.

6.2 Organisational Security Controls

• Access to personal data is restricted to xbajre employees and contractors who genuinely require it to perform their role. Access rights are reviewed regularly and revoked promptly when no longer needed.
• All staff who handle personal data undergo data protection and security training as part of their onboarding process and on an annual refresher basis.
• xbajre maintains an incident response plan to ensure that any data security breach is identified, contained, and reported in a timely manner.

6.3 What You Can Do to Stay Secure

• Use a strong, unique password for your xbajre account that you do not use on any other platform.
• Enable two-factor authentication on your account where available.
• Never share your login credentials with anyone. xbajre staff will never ask for your password.
• Log out of your xbajre account when using a shared or public device.
• Contact [email protected] immediately if you suspect that your account credentials have been compromised.

xbajre respects your right to control your personal data. As a registered player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our privacy team at [email protected] with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of all personal data that xbajre holds about you. Upon receiving a verified access request, we will provide you with a complete summary of your data in a readable format within 30 days. This is sometimes referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account details (name, email, phone number), you may be able to update these directly from your account profile. For KYC-verified data, corrections require you to submit updated documentation via our support team.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer needed for the purpose it was collected, or where you withdraw your consent and there is no other legal basis for processing. Please note that some data (such as financial transaction records) must be retained for specific periods to meet our legal obligations, and deletion requests for such data may be partially declined with an explanation.

7.4 Right to Data Portability

Where data is processed on the basis of your consent or for the performance of a contract, you have the right to request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider of your choice.

7.5 Right to Object to Processing

You have the right to object to the processing of your personal data where xbajre relies on legitimate interest as its legal basis. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You may also object to direct marketing at any time — this is an absolute right and we will act on it immediately upon receipt.

7.6 Right to Withdraw Consent

Where processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time by contacting [email protected] or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

7.7 Response Timeframes

xbajre will acknowledge all privacy rights requests within 5 business days of receipt and will aim to fulfil verified requests within 30 calendar days. In complex cases, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reason for the delay within the initial 30-day window.

xbajre reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal and regulatory obligations. When we make material changes to this Policy, we will take reasonable steps to inform registered players before the changes take effect.

8.1 Notification of Changes

Material changes to this Privacy Policy will be communicated to registered players via one or more of the following methods:

• A notice displayed prominently on the xbajre Platform at login
• An email to your registered email address (where marketing communications are enabled)
• An update to the "Effective Date" shown at the top of this page and in the hero section above

We encourage you to review this Privacy Policy periodically, even when you have not received a direct notification, to stay informed about how xbajre handles your personal data.

8.2 Continued Use as Acceptance

Your continued use of the xbajre Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a change, you should cease using the Platform and may request account closure and data deletion by contacting [email protected].

8.3 Version History

The current version of this Privacy Policy is effective as of 1 January 2026. This is the first published version of the xbajre Privacy Policy. All prior informal data practices are superseded by this document from its effective date.