1. Home
  2. Privacy Policy
Last Updated: January 1, 2026

Xbajee Privacy Policy – How We Protect Your Personal Information

At Xbajee, your data is your trust — and we take that trust seriously. This policy clearly outlines what information we collect, why we collect it, where it is stored, and what rights you have.

Open an account Terms & Conditions
256-bit
SSL encryption
Zero
Sold to third parties
GDPR
Industry-standard protection
24/7
Data monitoring
Core Privacy Principles

Xbajee's six commitments to data protection

We believe privacy is not merely a legal obligation — it is a fundamental right of every user

Minimal Data Collection

Xbajee only collects the information strictly necessary to provide its services. We do not request unnecessary data, and we never will.

Data minimization principle
Maximum Encryption

Every piece of your data is encrypted with 256-bit SSL, from transmission to storage — protected at every layer.

Military-grade protection
Full transparency

Every piece of data and its purpose is clearly stated in this policy — no hidden agendas, no ambiguity.

Transparent data policy
Never sold to third parties

Your personal data is never sold — nor is it shared with any advertiser or third-party company.

No-Sale Policy
Your Control

You have the full right to view, correct, download, or delete your data. Submit a request at any time and it will be actioned.

User autonomy
International standards

Xbajee's Privacy Policy follows international GDPR standards. Your information is protected in line with global best practices.

GDPR Compliant
Table of contents

1. Introduction – Who This Policy Applies To

This Privacy Policy applies to you whenever you use the Xbajee website or mobile app. It serves as the data agreement between you and Xbajee.

We understand that many people in Bangladesh are understandably cautious about sharing personal information online. That's why we've written this policy in plain, straightforward language — no legal jargon, no confusion. You'll know exactly what information we collect, why we collect it, and how it's kept safe.

Xbajee firmly believes that personal data belongs to the individual — Xbajee acts only as a temporary custodian, holding it solely to provide its services.

This policy is also available in English. In the event of any conflict between the Bangla and English versions, the Bangla version shall be considered authoritative.

2. What Data We Collect

Xbajee only collects data that is strictly necessary to deliver its services. A detailed breakdown is provided below.

Information collected directly from you

  • Full name, date of birth, and gender
  • Mobile number and email address
  • bKash/Nagad/Rocket number (for payments)
  • National ID number (at the time of identity verification)
  • Address (for security verification purposes)

Automatically collected data

  • Device type, operating system & browser
  • IP address and approximate location
  • Pages visited and time spent on each
  • Betting history and transaction records
  • Customer support contact details

What We Don't Collect

  • Full bank card or bank account details
  • Password (except as an encrypted hash)
  • Health or religious information
  • Private messages on social media

3. How Your Data Is Used

Xbajee uses your data only for specific, defined purposes. Each purpose and its basis are clearly outlined below.

Purpose Data Used Legal Basis
Account creation & management Name, mobile number, email Contractual
Identity Verification (KYC) NID, date of birth, photo Legal obligation
Payment processing Mobile banking number Contractual
Fraud prevention IP, device, transactions Legitimate interest
Service Improvement Usage data (anonymized) Legitimate interest
Marketing communications Mobile, email Consent
Legal Compliance All the information you need Legal obligation

Marketing communications: You can opt out of marketing messages at any time. Reply STOP to any SMS or click the unsubscribe link in any email. Even after unsubscribing, you will still receive essential service-related communications.

4. Who We Share Your Data With

Simply put — xbajee never sells your data. However, in certain limited circumstances, it may be shared with specific third parties.

Who we share your data with

  • Payment processors: Solely to process transactions via bKash, Nagad & Rocket
  • Identity verification services: Registered partners for KYC completion
  • Regulator: To the relevant authorities when legally required
  • Law enforcement: By court order or lawful request

Who your data is never shared with

  • Advertisers or marketing companies
  • Data brokers or information resellers
  • Any other betting or gaming platform
  • Social media companies

All of our partner organizations are contractually required to adhere to Xbajee's privacy standards. They receive data only for specific purposes and are not permitted to use it for anything else.

5. Data Retention & Security Measures

Xbajee servers are hosted in internationally certified data centers with 24/7 security monitoring. Review the measures below to understand how well-protected your data really is.

Technical Security

  • 256-bit AES encryption — applied to both transmission and storage
  • Two-Factor Authentication
  • Firewall and DDoS protection
  • Regular security audits & penetration testing
  • Automated detection of suspicious activity

How long we retain your data

  • Active accounts: for as long as the account remains open
  • Closed accounts: up to 5 years (as required by law)
  • Transaction records: 7 years (in compliance with financial regulations)
  • Anonymized analytics data: indefinitely

Important: xbajee will never ask anyone for your account password. If someone asks for it, treat it as fraud and contact our support team immediately.

7. Protection of Minors' Data

Xbajee strictly refrains from providing services to anyone under the age of 18. This is a matter of ethical principle, not merely legal compliance.

  • No data is collected from anyone under the age of 18
  • Accounts identified as belonging to minors will be closed immediately
  • Age verification is mandatory at the time of registration
  • KYC verification is requested for suspicious accounts

If any minor's data has been collected inadvertently and you notify us, Xbajee will take immediate steps to delete it.

8. Your Data Rights

At Xbajee, you have full control over your personal data. You can exercise any of the rights listed below at any time.

1
Right to Access

Submit a request if you'd like to see what information Xbajee holds about you. It will be provided within 30 days.

2
Right to rectification

If any of your information is incorrect or out of date, you may request a correction. We will update it within 7 business days.

3
Right to Erasure

If you close your account, you may request that your data be deleted. Everything will be removed except records we are legally required to retain.

4
Right to Portability

You can download your data in a machine-readable format (JSON/CSV). It will be delivered within 15 days of your request.

5
Right to restrict processing

You can request that we stop using your data for specific purposes without having to close your account.

6
Right to lodge a complaint

If you notice any irregularities in how your data is being handled, you have the right to file a complaint directly with us or with the relevant regulatory authority.

To exercise any of the rights listed above privacy@xbajee.run Send us an email with the nature of your request in the subject line. We will respond within 30 calendar days.

9. International Data Transfers

Some of xbajee's technical infrastructure is hosted on international cloud servers. This means your data may occasionally be processed on servers located outside Bangladesh.

  • Encryption is mandatory for all international data transfers
  • Data is only transferred to countries that comply with GDPR or equivalent standards
  • All overseas server providers are contractually bound to comply with xbajee's policies
  • A record is kept of all data transfers and can be made available upon request

10. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in technology, legislation, or our services. However, we will always notify you in advance of any significant changes.

  • At least 15 days' notice via SMS and email before any major changes
  • The date of the latest update will always be displayed at the top of the page
  • Previous versions will be archived and available upon request
  • Continued use of the platform after any changes will be considered acceptance of the updated policy

11. Frequently Asked Questions About Privacy

Yes, completely safe. Your bkash number is used solely for payment processing and is secured with 256-bit AES encryption. No third party can access this information, and no xbajee employee can view your mobile banking PIN or password.

Your betting history is completely private. Authorised xbajee staff may access it on a limited basis for security and verification purposes only. No information is shared with any third party — including family, friends, or anyone else. The only exception to this policy is a valid court order.

Once you request account closure, Xbajee will begin the process of deleting your personal data. However, financial transaction records must be retained for up to 7 years for legal reasons, as required under Bangladesh's financial regulations. These records are only disclosed upon request from a regulatory authority.

Yes, absolutely. In the event of a data breach that puts your information at risk, we will notify you by SMS and email within 72 hours and provide guidance on what steps to take. This is both a GDPR obligation and our ethical responsibility.

Send an email to privacy@xbajee.run with the subject "Data Portability Request". Once your identity is verified using the mobile number registered to your account, your data will be sent in JSON or CSV format within 15 business days.

Your data is safe — join with complete peace of mind

Your privacy is protected at Xbajee. Open an account today under a fully transparent policy.

Register for Free Log In
SSL
Secure connection
Zero
Sold to third parties
100%
Your Control
বাংলা