xbjee Privacy Policy

Our Privacy Commitments

1Introduction

This Privacy Policy ("Policy") describes how xbjee ("xbjee", "we", "us", "our") collects, uses, stores, and discloses personal data in connection with the operation of the xbjee online gaming platform, accessible at xbjee.asia and all associated subdomains, applications, and services (collectively, "the Service"). xbjee is committed to protecting the privacy of all registered players and visitors to the platform.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you do not agree with how xbjee handles your personal data as described in this Policy, you should not use the Service. This Policy is incorporated by reference into xbjee's Terms and Conditions, which govern your use of the Service.

2Personal Data We Collect

xbjee collects different categories of personal data depending on your relationship with the platform. The table below summarises the main categories of data we collect and the primary source of each category.

xbjee does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers for the purposes of account registration or Service delivery. Where identity verification requires a copy of a government-issued identity document, this document is processed solely for the purpose of confirming the account holder's identity and age, and is not retained beyond the period necessary for that verification.

3How We Use Your Personal Data

xbjee uses the personal data it collects for the following purposes. We process your data only to the extent necessary to fulfil each stated purpose, and we do not use your data for any purpose that is incompatible with those stated below without first obtaining your explicit consent.

• Account creation and management: to register your account, verify your identity in accordance with KYC requirements, maintain your account balance, and process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Service delivery: to provide you with access to the full xbjee game library including cricket betting, live casino, slots, crash games, and fishing games; to credit and settle bets; and to manage bonuses, promotions, and loyalty rewards.
• Fraud prevention and security: to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct; to carry out transaction monitoring; and to comply with our obligations under applicable anti-money-laundering regulations.
• Customer support: to respond to your queries, complaints, and requests submitted via live chat, email, or any other support channel; to maintain records of support interactions; and to improve our support quality based on feedback.
• Responsible gaming: to monitor gameplay patterns for signs of problem gambling; to enforce self-exclusion requests, deposit limits, and cooling-off periods; and to provide you with responsible gaming tools and resources in accordance with our Responsible Gaming policy.
• Marketing and communications: to send you promotional offers, bonus notifications, and platform updates that we believe may be of interest to you, where you have not opted out of such communications. You may opt out of marketing communications at any time by contacting xbjee support at [email protected].

xbjee does not use automated decision-making or profiling in any way that produces a legal effect or similarly significantly affects you as a player, beyond automated fraud-detection systems that operate as part of our security infrastructure.

4Legal Basis for Processing

xbjee processes personal data on one or more of the following legal bases, depending on the specific processing activity. Where processing is based on consent, you have the right to withdraw that consent at any time, though withdrawal will not affect the lawfulness of any processing carried out prior to the withdrawal.

• Contractual necessity: processing that is required in order to perform our obligations under the account registration agreement and Terms and Conditions, including KYC verification, transaction processing, account management, bet settlement, and customer support.
• Legitimate interests: processing for fraud prevention, security monitoring, platform integrity, responsible gaming enforcement, and general improvement of the Service, where xbjee's legitimate interest in protecting the platform and its users outweighs any privacy impact on the individual.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, identity verification mandates, and responses to lawful requests from law enforcement or regulatory authorities.
• Consent: processing for marketing communications, where xbjee sends promotional offers or notifications that go beyond what is strictly necessary for Service delivery. You may withdraw your consent to marketing processing at any time by contacting [email protected].

5Sharing Your Personal Data

xbjee does not sell, rent, or trade your personal data to any third party for their own marketing purposes. xbjee may share your personal data with third parties only in the following limited circumstances, and only to the extent necessary for the purpose stated.

• Payment service providers: xbjee shares transaction reference data with bKash, Nagad, Rocket, Upay, and other payment providers solely to facilitate the processing of deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations, and receive only the minimum data necessary to process the transaction.
• Game providers and software suppliers: game providers such as Pragmatic Play, Evolution Gaming, Spribe, and others may process limited technical and session data in connection with the delivery of their games. This data is processed under data processing agreements that bind the provider to appropriate data protection standards.
• Fraud prevention and regulatory compliance: xbjee may share personal data with fraud prevention agencies, financial intelligence units, or law enforcement authorities where required by applicable law or where disclosure is necessary to prevent, detect, or investigate financial crime or other serious criminal activity.
• Business transfers: in the event that xbjee undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by xbjee may be transferred to the acquiring or successor entity as part of that transaction, subject to the same data protection commitments set out in this Policy.

6Payment Data and Financial Information

xbjee processes financial data strictly for the purpose of facilitating deposits and withdrawals on the platform. xbjee does not store full mobile banking credentials, PIN numbers, or complete payment account numbers on its own servers. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the payment provider's own secure system. xbjee retains only a transaction reference identifier and the last few digits of the payment account for reconciliation and fraud prevention purposes.

All financial transactions conducted on the xbjee platform are denominated in Bangladeshi Taka (BDT). Transaction records, including deposit amounts, withdrawal amounts, and associated timestamps, are retained by xbjee for a minimum period of five years from the date of the transaction in order to comply with applicable record-keeping obligations. These records are stored securely and are accessible only to authorised xbjee personnel and, where legally required, to competent regulatory or law enforcement authorities.

7Cookies and Tracking Technologies

xbjee uses cookies and similar tracking technologies on its web platform to enable essential functionality, improve performance, and analyse how the Service is used. The following categories of cookies are used on the xbjee platform.

• Strictly necessary cookies: these cookies are essential for the operation of the xbjee platform and cannot be disabled. They include cookies required for user authentication (keeping you logged in during a session), security tokens, and session management. Without these cookies, core platform features cannot function.
• Performance and analytics cookies: these cookies collect aggregated, anonymised data about how users interact with the xbjee platform, including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used solely to improve the platform experience and is not linked to individual account profiles.
• Functional cookies: these cookies remember your preferences such as language selection and interface settings, so that you do not need to re-enter them each time you visit the platform.
• Marketing cookies: xbjee may use limited marketing cookies to track whether a player arrived at xbjee via a promotional link and to attribute bonus eligibility accordingly. These cookies do not track your activity across third-party websites and are not used to build advertising profiles.

You may adjust your browser settings to refuse or delete cookies at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging into your xbjee account and using core platform features. Disabling performance or functional cookies will not affect your ability to use the Service but may result in a reduced or less personalised experience.

8Data Retention

xbjee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data held by xbjee.

• Account data (identity, contact, and KYC documentation): retained for the duration of your active account plus a minimum of five years following permanent account closure, in order to comply with applicable anti-money-laundering record-keeping obligations and to handle any post-closure disputes or regulatory inquiries.
• Financial transaction records: retained for a minimum of five years from the date of each transaction in order to comply with applicable financial record-keeping requirements and to support any audit, investigation, or dispute resolution process that may arise.
• Technical and behavioural data (logs, session data, betting history): retained for a rolling period of up to 24 months from the date of collection for platform security, fraud analysis, and responsible gaming monitoring purposes, after which it is anonymised or deleted.

Where xbjee is required by applicable law to retain data for a longer period than stated above, the legally mandated retention period will take precedence. Where you exercise your right to erasure (see Section 9 below), xbjee will delete your personal data as far as possible within the applicable retention constraints, and will confirm in writing the scope of any deletion carried out.

9Your Data Protection Rights

xbjee recognises that you hold a number of rights in relation to the personal data that xbjee holds about you. The rights described below apply to all registered users of the xbjee platform. To exercise any of these rights, please contact xbjee support at [email protected]. xbjee will respond to all data rights requests within 30 calendar days of receipt.

To exercise any of the rights described above, please submit your request in writing to [email protected] with the subject line "Data Rights Request" and include your registered account name and mobile number so that we can verify your identity before processing the request. xbjee will not charge a fee for handling data rights requests except where requests are manifestly unfounded or excessive.

10Data Security

xbjee implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis in line with current best practice for online platforms operating in the financial services sector.

• SSL/TLS encryption is applied to all data transmitted between your browser or device and the xbjee platform, ensuring that personal data, login credentials, and financial transaction data cannot be intercepted in transit.
• Access to personal data on xbjee's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive data protection training and are bound by confidentiality obligations.
• xbjee's platform infrastructure is hosted on secured servers with firewalls, intrusion detection systems, and regular vulnerability assessments. Database access is logged and monitored. Sensitive data fields are stored in encrypted form.
• In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, xbjee will take immediate steps to contain the breach, assess the extent and impact, and notify affected users as appropriate. xbjee will document all personal data breaches in accordance with applicable data protection obligations.

While xbjee employs industry-standard security measures, no online platform can guarantee absolute security against all possible threats. Players are advised to use a strong, unique password for their xbjee account, to avoid accessing the platform on public or unsecured Wi-Fi networks, and to contact xbjee support immediately if they suspect that their account has been accessed without authorisation.

11Protection of Minors

The xbjee platform is strictly intended for use by adults aged 21 and above. xbjee does not knowingly collect or process personal data from individuals under the age of 21. If xbjee becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. Parents and guardians who believe that a minor may have registered an account on xbjee are requested to contact [email protected] immediately so that the matter can be investigated and resolved promptly.

12Third-Party Links and Services

The xbjee platform may contain links or references to third-party websites, applications, or services, including game providers and payment processors. These third-party services operate independently of xbjee and are governed by their own privacy policies and data protection practices. xbjee is not responsible for the privacy practices of any third-party service, and the inclusion of a link or reference to a third-party service on the xbjee platform does not constitute an endorsement of that service's privacy practices.

Players are advised to review the privacy policies of any third-party services they interact with in connection with their use of xbjee, including the privacy policies of bKash, Nagad, Rocket, and Upay. xbjee has no control over, and accepts no responsibility for, the data practices of these independent third parties.

13Changes to This Privacy Policy

xbjee reserves the right to update or amend this Privacy Policy at any time. Any changes will be published at xbjee.asia/privacy-policy and will take effect immediately upon publication. The date of the most recent update will always be shown at the top of this Policy. Where a change is material — for example, a change to the categories of data collected or to the third parties with whom data is shared — xbjee will endeavour to notify active account holders via the platform notification system or registered email address prior to the change taking effect.

14Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a data protection concern, please contact the xbjee privacy team using the details below. All privacy-related enquiries will be handled with strict confidentiality and responded to within 30 calendar days.

When submitting a data rights request, please include your registered account name, registered mobile number, and a brief description of your request. xbjee may need to verify your identity before processing certain data rights requests in order to ensure that personal data is disclosed or amended only at the direction of the account holder.