xbajer Privacy Policy

1.Data Controller

xbajer is the data controller responsible for the personal information collected and processed through this platform. As data controller, xbajer determines the purposes for which and the manner in which personal data is processed. All data-related enquiries, subject access requests, and data deletion requests should be directed to our support team at [email protected]. We will acknowledge all requests within five (5) business days and respond substantively within thirty (30) calendar days.

2.Personal Data We Collect

xbajer collects personal data through several channels: directly from you when you register an account, make a deposit, contact support, or interact with platform features; automatically as you use the platform; and from third parties including payment processors and identity verification services.

The categories of personal data we may collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless directly relevant to a responsible gaming intervention or required by law. We do not store full payment card numbers; card transactions are processed entirely by our certified payment partners.

For players in Bangladesh, identity verification may include submission of a National Identity Card (NID), passport, or other government-issued document. Mobile money account details (bKash, Nagad, Rocket, Upay) are collected solely for the purpose of processing deposits and withdrawals and are not used for any secondary purpose without your explicit consent.

3.How We Use Your Personal Data

xbajer processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we use your data are as follows:

• Account management: To create, maintain, and administer your xbajer player account, including verifying your identity and age in accordance with our 21+ policy.
• Transaction processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate records of all financial activity on your account.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, fraud prevention requirements, and responsible gaming standards. This includes monitoring account activity for suspicious behaviour and reporting to relevant authorities where required by law.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via our support channels. Support communications may be recorded and retained for quality assurance and training purposes.
• Platform security: To detect and prevent unauthorised access, abuse of promotional offers, use of automated scripts, multi-accounting, and other violations of our Terms & Conditions.
• Personalisation: To tailor your gaming experience, including displaying game recommendations, promotional offers, and content that may be relevant to your activity on the platform.
• Marketing communications: Where you have opted in, to send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and platform news. You may withdraw this consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour, and to proactively contact players or apply account restrictions where appropriate in accordance with our responsible gaming obligations.

xbajer will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where otherwise permitted by applicable law.

4.Legal Bases for Processing

xbajer relies on the following lawful bases to process your personal data:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing necessary to comply with applicable laws including AML requirements, age verification obligations, and responses to lawful requests from regulatory bodies or law enforcement agencies.
• Legitimate interests: Processing carried out for our legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, abuse prevention, and internal analytics to improve our services.
• Consent: Where no other lawful basis applies — most notably for the sending of direct marketing communications — we will rely on your freely given, specific, and informed consent. You retain the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.Data Sharing and Third Parties

xbajer does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may, however, share your data with carefully selected third parties where necessary to deliver our services or fulfil legal obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, and other payment service providers receive the minimum data necessary to process your financial transactions. These providers operate under their own privacy policies and are bound by contractual data protection obligations with xbajer.
• Identity verification providers: Third-party KYC (Know Your Customer) and AML screening services may process your identity documents and personal details to fulfil our verification obligations. All such providers are contractually required to handle your data securely and confidentially.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver their game content. These providers do not receive your full identity information.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Technology and infrastructure providers: Cloud hosting, analytics, and platform security vendors may process data on our behalf under strict data processing agreements that prohibit any use of your data for their own purposes.

All third-party data processors engaged by xbajer are required to implement appropriate technical and organisational security measures and to process data solely on our documented instructions.

6.Cookies and Tracking Technologies

xbajer uses cookies and similar tracking technologies to operate the platform, improve user experience, and support our security and analytics functions. Cookies are small data files stored on your device when you access our website. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function, including maintaining your login session, securing your account, and processing transactions. These cannot be disabled without impacting your ability to use the service.
• Functional cookies: Used to remember your preferences such as language settings, game history, and display preferences, providing a more personalised experience on return visits.
• Analytics cookies: Help us understand how players navigate the platform, which pages are most visited, and where usability improvements can be made. This data is processed in aggregate and does not identify you individually.
• Security cookies: Used to detect fraudulent activity, prevent bot access, and protect the integrity of the platform and your account.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the xbajer platform. Continued use of the platform after being presented with our cookie notice constitutes acceptance of our use of strictly necessary cookies.

7.Data Retention

xbajer retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained throughout the lifetime of your account and for a minimum of five (5) years following account closure, in accordance with AML recordkeeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial regulatory obligations.
• Identity verification documents: Retained for the duration of your account and for five (5) years post-closure, or longer if required by law enforcement or regulatory instruction.
• Support communications: Retained for two (2) years from the date of the communication, or longer where the communication relates to an ongoing dispute or investigation.
• Marketing preferences: Retained until you withdraw consent or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information. Where anonymisation rather than deletion is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for analytical purposes.

8.Data Security

xbajer employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the xbajer platform.
• Encryption of sensitive data at rest, including stored identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Secure data centre facilities with physical access controls and environmental safeguards.
• Staff training on data protection obligations and security best practices.

While we take all reasonable precautions to safeguard your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, xbajer will notify affected players and relevant authorities in accordance with applicable legal requirements and without undue delay.

You also have an important role to play in keeping your account secure. Never share your password with anyone, use a strong and unique password for your xbajer account, and contact us immediately at [email protected] if you suspect your account has been compromised.

9.Your Data Subject Rights

As a player on the xbajer platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with your account username and a description of your request:

Please note that certain rights are subject to limitations where xbajer has an overriding legal obligation to retain data — for example, AML recordkeeping requirements may prevent us from fulfilling a deletion request in full. Where this is the case, we will explain the specific legal basis for retaining the data in our response to your request.

You also have the right to withdraw consent for marketing communications at any time. This does not affect the lawfulness of any processing carried out prior to the withdrawal of consent, and will not affect your ability to use the xbajer platform.

10.Children and Minors

The xbajer platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a player who is under the minimum age threshold, that account will be immediately closed, all data will be securely deleted, and any deposits made will be returned via the original payment method after verification.

If you believe that a minor has registered an account on the xbajer platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

11.Changes to This Policy

xbajer reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or share data with a new class of third party — we will provide advance notice to registered players via email or an in-platform notification at least fourteen (14) days before the changes take effect.

Minor updates, such as corrections to wording or clarifications of existing practices, may be made without prior notice. The "Last updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically. Continued use of the xbajer platform following the effective date of any revised Policy constitutes your acceptance of the changes.

If you do not agree with any update to this Policy, you should cease using the platform and may request account closure by contacting our support team. Data retained following account closure will be handled in accordance with Section 7 (Data Retention) of this Policy.