xbije Privacy Policy — How We Handle Your Data

Our Commitment to Your Privacy

This Privacy Policy describes how xbije collects, uses, stores, and discloses personal information provided by players of the xbije website and mobile platform. This Policy forms part of our Terms and Conditions, which you accept when you register an account or use our services.

xbije handles personal data with care and only collects what is necessary to operate the platform securely, process transactions, fulfil legal obligations, and deliver a quality gaming experience to players across Bangladesh — from Dhaka and Chittagong to Sylhet, Rajshahi, Khulna, and beyond.

Privacy at a Glance

1Information We Collect

xbije collects personal information through three channels: directly from you when you register or use our platform; automatically through your use of the platform; and from third-party verification services when required for KYC compliance. The main categories of personal data we hold are as follows.

• Identity and contact information: full name, date of birth, email address, mobile phone number, and residential address provided during registration or KYC verification.
• Account credentials: username and hashed password. Passwords are stored using one-way hashing and xbije staff cannot access your plain-text password under any circumstances.
• Financial and transaction data: deposit and withdrawal amounts, payment method references (for example bKash or Nagad wallet number partial references), transaction timestamps, and balance history. Full card or wallet credentials are never stored on our servers.
• Gaming activity data: game history, wager amounts, session durations, bet outcomes, bonus usage, and responsible gaming tool usage such as deposit limits set or self-exclusion requests. This data is used to operate our gaming services and fulfil regulatory obligations.
• Technical and device data: IP address, device type, operating system, browser type and version, and page interaction data collected via cookies and analytics. This helps us detect fraud, fix issues, and optimise the platform for mobile users in Bangladesh.

2How We Use Your Information

xbije processes personal data only for specific, disclosed purposes and does not use your data for purposes incompatible with those listed below.

• Account creation and management: verifying your identity, setting up your player account, processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported methods, and managing your balance, bonuses, and responsible gaming preferences.
• Service delivery and improvement: providing game access, processing bets and winnings, personalising your experience, and improving platform performance based on aggregated usage data.
• Legal and regulatory compliance: carrying out KYC identity checks, fulfilling anti-money laundering obligations, responding to lawful regulatory or law enforcement requests, and maintaining records as required by applicable law.
• Fraud prevention and platform security: detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, collusion, and money laundering through automated tools and manual review.
• Responsible gaming monitoring: monitoring gaming behaviour for signs of problem gambling and applying interventions including deposit limits, cooling-off periods, and self-exclusion as required or voluntarily requested.
• Communications: sending account-related notifications such as deposit confirmations and KYC status updates, and — with your consent — promotional messages about offers, bonuses, and new game launches relevant to Bangladesh players.

3Legal Basis for Processing Your Data

xbije processes personal data only where a valid legal basis exists. The legal bases we rely on are as follows.

• Contractual necessity: processing required to perform our contract with you — specifically to operate your player account, process deposits and withdrawals, and deliver the gaming services you requested.
• Legal obligation: processing required to comply with applicable law, including KYC identity verification, anti-money laundering obligations, and responses to lawful authority requests.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement where these interests are not overridden by your data protection rights.
• Consent: where we rely on your consent — for example to send promotional communications — you may withdraw that consent at any time by contacting support or updating your communication preferences in account settings.

4Sharing Your Personal Information

xbije does not sell, rent, or trade your personal data to third parties. We may share your data with the categories of recipient below, strictly for the purposes set out in this Policy and only to the extent necessary.

• Payment processors and financial service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive only the transaction data necessary to process your deposits and withdrawals. They operate under their own privacy and security standards.
• Identity verification and KYC providers: third-party KYC services may receive your identity document data solely to verify your age and identity in compliance with our legal obligations. Their use of your data is contractually restricted to this purpose.
• Technology and platform partners: cloud hosting, analytics, and fraud detection providers who process data on our behalf under strict data processing agreements that prohibit independent use of your personal data.
• Regulatory and law enforcement authorities: where required by applicable law, court order, or lawful government request, xbije may disclose personal data to relevant authorities. We will notify affected players where legally permitted.

5Payment Data and Financial Information

xbije treats the security of your financial information with the highest priority. All payment data transmitted between your device and our platform is protected with 256-bit SSL encryption. We use tokenisation for payment references so that sensitive account numbers are never stored in plain text on our servers.

Financial transaction records are retained for the minimum period required by applicable financial regulations. These include deposit and withdrawal logs, payment method references, and transaction timestamps. Retention of financial records is a legal obligation and cannot be waived even where a general data deletion request is submitted.

• bKash and Nagad wallet references: mobile wallet numbers used for deposits or withdrawals are stored as partial references only, sufficient to verify ownership during KYC checks and to match withdrawal requests to the originating deposit method.
• Bank transfer references: where bank transfers are used, xbije retains only the last four digits of the account number, the bank name, and the transaction reference. Full account numbers are never retained.
• Suspicious transaction reporting: where xbije is legally required to file a suspicious transaction report with relevant authorities, it will do so without notifying the player, as required by applicable anti-money laundering law. This is a strict legal obligation and does not constitute a breach of this Privacy Policy.

6Cookies and Tracking Technologies

xbije uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and analyse usage patterns. A cookie is a small text file placed on your device when you visit. The following categories of cookies are in use on the xbije platform.

• Essential cookies: strictly necessary for the platform to function, including session authentication tokens, fraud prevention identifiers, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Preference cookies: remember your display settings and responsible gaming preferences so they are applied consistently across visits. You may disable these without losing access to the platform, though some personalisation features will not work.
• Analytics cookies: collect anonymised, aggregated data on page visits and feature usage to help us understand how players use xbije and identify areas for improvement. These do not identify you individually.
• Security and fraud detection cookies: fingerprint your device session to detect anomalous activity, account takeover attempts, and bot-driven interactions. These are essential and cannot be disabled.

7Data Retention

xbije retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Active account data is retained for the lifetime of the account plus the minimum period required after closure by financial and regulatory obligations. KYC identity documents are retained for the minimum period after account closure required by anti-money laundering law. Marketing consents are retained until you withdraw consent or for a reasonable period after your last platform interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical or analytical purposes without restriction.

8Your Data Protection Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your personal data. To exercise any right, please contact our support team.

9Data Security Measures

xbije implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes 256-bit SSL encryption on all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options for player accounts, regular security audits and penetration testing, staff access controls on a strict need-to-know basis, and real-time intrusion detection and threat monitoring.

While xbije takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach posing a significant risk to your rights, xbije will notify affected players as required by applicable law and take prompt remediation steps. If you suspect your account has been compromised, contact our support team immediately at [email protected].

10Children and Underage Players

The xbije platform is strictly intended for players aged 21 and above. xbije does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the xbije platform or provide any personal information to us. If we discover or are notified that we have collected personal data from a person under 21 without appropriate verification, we will delete that data as promptly as possible and close the associated account.

11Changes to This Privacy Policy

xbije reserves the right to update or amend this Privacy Policy at any time. When we make material changes — that is, changes that meaningfully affect how we collect, use, or share your personal data — we will notify registered players by email or by a prominent notice on the xbije platform before the changes take effect. The date of the most recent revision is displayed at the top of this Policy.

Your continued use of the xbije platform following any update to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with changes, you should stop using the platform and may contact support to request account closure and confirm how your personal data will be handled following closure.

12Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how xbije handles your personal data, please contact our support team. All privacy-related queries are handled with strict confidentiality and responded to within a reasonable timeframe. Support is available 24 hours a day, 7 days a week in both English and Bengali.