Your Privacy Matters at xbije

1 Introduction and Scope

This Privacy Policy ("Policy") describes how xbije ("we", "us", "our") collects, processes, stores, and protects personal data belonging to users ("you", "your") of the xbije website, mobile interface, and all associated services (collectively, the "Platform"). This Policy applies to all registered players, prospective registrants who browse the Platform, and any individual who communicates with xbije through any channel including live chat, email, or telephone.

xbije is committed to handling personal data responsibly and transparently in accordance with internationally recognised data protection principles. We believe that every player has a fundamental right to know what information we hold about them and how it is used. This Policy is designed to provide that clarity in plain, accessible English.

This Policy is incorporated by reference into our Terms & Conditions. By registering an account with xbije or continuing to use the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to arrange account closure.

2 Data We Collect

xbije collects personal data in several ways: directly from you when you register, make a deposit, contact support, or complete a verification process; automatically when you interact with the Platform via your browser or device; and from third-party service providers such as payment processors and identity verification agencies. The categories of data we collect are as follows:

Identity and Contact Data

• Full legal name, date of birth, gender (where provided)
• Residential address, city, district, and postcode within Bangladesh
• Email address and mobile phone number
• National Identity Card (NID) number, passport number, or driving license number (for KYC verification)
• Profile photograph or scanned copies of identity documents (where submitted)

Financial and Transaction Data

• Mobile money account identifiers (bKash, Nagad, Rocket, Upay wallet numbers) — not full account credentials
• Bank account names and last-four-digit references for bank transfer methods (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Deposit amounts, withdrawal requests, transaction timestamps, and transaction reference numbers
• Crypto wallet addresses where USDT transactions are used

Gameplay and Behavioural Data

• Betting history, game session data, wager amounts, wins, and losses
• Platform preferences, favourite games, and session frequency
• Responsible gaming settings such as deposit limits, self-exclusion requests, and time-out activations

Technical and Device Data

• IP address, browser type, operating system, device type, and screen resolution
• Cookies, session tokens, and similar tracking identifiers (see Section 5)
• Pages visited, navigation path, time on page, and click interactions
• Geolocation data (country and city level, derived from IP address)

Summary of Data Categories

3 How We Use Your Data

xbije uses the personal data we collect for the following specific and lawful purposes. We rely on one or more legal bases for each type of processing activity, including contractual necessity, legitimate interests, legal obligation, and your explicit consent where required.

• Account Management: To create, maintain, and administer your xbije account, including verifying your identity, managing your balance, and providing access to all Platform features.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method, reconcile transactions, and detect payment fraud or unauthorised transactions.
• KYC and Compliance: To verify your identity and age in compliance with our Know Your Customer obligations, anti-money-laundering (AML) requirements, and fraud prevention protocols.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 support channels.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, apply deposit limits, and provide appropriate interventions where our responsible gaming indicators are triggered.
• Platform Improvement: To analyse aggregated usage data, improve game offerings, optimise platform performance, and personalise your experience on the xbije Platform.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account compromise, bot usage, and other security threats to the Platform and its users.
• Marketing Communications: Where you have opted in to receive promotional communications, we will send you information about bonuses, promotions, new games, and special events. You can opt out at any time through your account settings or by contacting support.
• Legal Obligations: To comply with applicable legal requirements including responding to lawful requests from regulatory, law enforcement, or judicial authorities in Bangladesh or other relevant jurisdictions.

4 Data Sharing and Third Parties

xbije does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. We share your data only in the specific circumstances described below, and only with third parties that are bound by appropriate data protection obligations.

Service Providers

We share necessary personal data with third-party service providers who process data on our behalf to enable the Platform to function. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard, and USDT gateway providers — for transaction processing only.
• Identity verification providers: Third-party KYC and AML screening services that assist in verifying the identity and age of registered players.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios that provide content streamed through the Platform. These providers may receive session-level data necessary to run their games.
• Customer support platforms: Third-party live chat and ticketing systems used to operate our 24/7 support service.
• Analytics and security providers: Services used to monitor Platform performance, detect fraud, and protect system integrity.

Legal and Regulatory Disclosure

We may disclose personal data to government bodies, regulators, law enforcement agencies, or courts in Bangladesh or other jurisdictions if we are legally required to do so, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of xbije, our users, or the public.

5 Cookies and Tracking Technologies

xbije uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage objects) to operate the Platform, remember your preferences, keep you logged in securely, and gather aggregated analytics about how the Platform is used. Below is a summary of the cookie types we deploy:

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. All other cookie categories require your consent, which is collected via our cookie preference centre when you first visit the Platform. You may update your cookie preferences at any time through your browser settings or by contacting our support team.

Please note that disabling functional or analytics cookies may limit your experience on the xbije Platform and may prevent some features from working as intended.

6 Data Retention and Storage

xbije retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years following permanent account closure, to comply with AML and fraud prevention obligations.
• Transaction records: Financial transaction data is retained for a minimum of seven years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for five years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Customer support chat logs and email correspondence are retained for three years from the date of the last interaction.
• Marketing data: Marketing preference records and campaign interaction data are retained for two years from your last interaction with a marketing communication, or until you withdraw consent, whichever comes first.
• Technical and analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer identifies you personally.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where deletion is technically complex (for example, data in encrypted backup systems), data is quarantined and excluded from active processing until it can be permanently deleted.

7 Your Rights and Choices

xbije respects your rights over your personal data. As a registered user of the Platform, you have the following rights with respect to the data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right is subject to legal retention obligations — we may not be able to delete data that we are required to retain by law.
• Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances, for example if you contest its accuracy while we verify it.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may continue to process your data if we have compelling legitimate grounds.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact our data team at [email protected] with the subject line "Data Rights Request" and describe the right you wish to exercise. We will acknowledge your request within five business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension.

8 Data Security Measures

xbije implements a comprehensive, layered security programme to protect the personal data of all Platform users. Our technical and organisational security measures include, but are not limited to, the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and our servers is encrypted using 256-bit SSL/TLS protocols, preventing interception by unauthorised third parties.
• At-Rest Encryption: Sensitive data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption standards.
• Two-Factor Authentication (2FA): xbije offers two-factor authentication for all registered accounts. We strongly encourage all players to enable 2FA to add an additional layer of protection against unauthorised login attempts.
• Access Controls: Access to personal data within xbije's systems is strictly limited to authorised personnel who require it for specific operational purposes. All staff access is logged and audited on a regular basis.
• Intrusion Detection and Monitoring: Our infrastructure is protected by continuous automated monitoring for suspicious activity, intrusion attempts, and anomalous data access patterns.
• Regular Security Audits: xbije engages independent third-party security specialists to conduct penetration testing and vulnerability assessments on a regular basis.
• Incident Response: In the unlikely event of a personal data breach, xbije has an established incident response procedure. Affected users will be notified promptly in accordance with applicable requirements, and remediation action will be taken without delay.

9 Minors and Age Verification

The xbije Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 18. Our registration process includes age declaration requirements, and our KYC verification procedures are designed to identify and reject applications from underage individuals.

If xbije becomes aware or has reasonable grounds to suspect that a registered account belongs to a person under the age of 18, we will immediately suspend that account, initiate a full verification review, withhold any funds pending the outcome of that review, and if the suspicion is confirmed, permanently close the account and return any eligible real-money balance to the payment method used for deposits.

Parents and guardians who believe that a minor may have registered an account with xbije, or who are concerned about a minor accessing gambling content online, are encouraged to use parental control software tools. Contact our support team at [email protected] immediately if you have concerns about a minor accessing this Platform, and we will investigate without delay.

10 Changes to This Policy

xbije reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or Platform features. When we make material changes to this Policy, we will notify registered users by sending an email to their registered address and by displaying a prominent notice on the Platform for a minimum of 30 days following the update.

The effective date displayed at the top of this Policy reflects the date of the most recent revision. We encourage all users to review this Policy periodically to stay informed about how xbije protects their personal data. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

For historical versions of this Policy, or if you have questions about what changed in a specific revision, please contact our data team at [email protected] and reference the version you are enquiring about.

11 Contact Our Data Team

If you have any questions, concerns, or complaints about how xbije handles your personal data, or if you wish to exercise any of your data rights as described in Section 7 of this Policy, please contact our dedicated data support team using the details below:

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: 24/7 live chat is available directly on the xbije Platform
• Response Time: We aim to acknowledge all privacy-related enquiries within five business days (Bangladesh Standard Time, UTC+6)

We are committed to resolving all privacy concerns fairly and promptly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.