xbajay's Privacy Policy
Your personal information is completely safe with us — find out clearly how xbajay collects, uses, and protects your data.
This Privacy Policy ("Policy") sets out the terms for the collection and processing of information between the xbajay platform ("we", "us") and all users of its services ("you", "user"). By using xbajay's website or services, you are considered to have agreed to the terms of this Policy.
1. Introduction and Scope
Purpose of the Policy
xbajay operates a reliable online entertainment and betting platform for users in Bangladesh. We believe your privacy is a fundamental right. The purpose of this Policy is to inform you with full transparency about what information we collect, why we collect it, how we use it, and how well we keep it protected.
Scope of Application
This Policy applies to xbajay's website, mobile platform, and all associated digital services. It applies to all registered members, guest users, and any person who interacts with our platform in any way.
2. What Information We Collect
A Information Provided Directly
When you register with xbajay or use our services, we may collect the following information:
- Full name and date of birth
- Mobile number and email address
- National ID (NID) number or passport details (for identity verification)
- Residential address
- Payment information such as bKash, Nagad, or Rocket account numbers
- Bank account details (where applicable)
B Automatically Collected Information
When you use our platform, the following technical information may be collected automatically:
- IP address and device identifier information
- Browser type, operating system, and screen resolution
- Session logs — login time, pages visited, and activity
- Information obtained from cookies and similar tracking technologies
- Transaction history and amounts
- Gaming activity data (bet amounts, outcomes, etc.)
C Information Received from Third Parties
In some cases, for the purpose of identity verification or fraud prevention, we may verify certain information through trusted third-party service providers. Information received in this way is used only for the specified purpose and the same security standards apply.
3. Purpose of Data Use
Account Management and Service Delivery
The information we collect is primarily used for the following purposes:
- Account creation, verification, and management
- Processing deposit and withdrawal transactions
- Providing bonuses and promotional offers
- Ensuring customer support services
- Sending important account-related notifications
Security and Compliance
We also use your information to ensure platform security and legal compliance:
- Preventing unauthorized access and fraud
- Complying with anti-money laundering (AML) regulations
- Fulfilling Know Your Customer (KYC) requirements
- Implementing responsible gaming policies
- Preventing access by those under 21 years of age
Service Improvement and Analytics
We may use information for analytical purposes to improve the quality of the platform. This includes analyzing user behavior, identifying service issues, and taking steps to improve the user experience. Personally identifiable information is always avoided in this analysis.
4. Sharing Information with Third Parties
We Do Not Sell Your Information
xbajay never sells, rents, or commercially transfers your personal information to third parties. Your privacy is our highest priority.
Limited Third-Party Disclosure
We may share some information in the specific circumstances listed below and subject to strict conditions:
- Payment processors: Only the necessary information to complete transactions with payment service providers such as bKash, Nagad, Rocket, and bank transfers.
- Identity verification services: With licensed verification agencies as part of the KYC process.
- Technology partners: Software service providers required to operate the platform, who are contractually bound to comply with our privacy standards.
- Legal obligations: Where required to comply with a court order or government directive.
International Data Transfers
By the nature of our services, some data may be stored on international servers. In such cases, we ensure that data security standards are maintained and that applicable legal frameworks are followed.
5. Cookies and Similar Technologies
What Cookies Are and Why We Use Them
Cookies are small text files stored on your device. xbajay uses cookies for the following purposes:
- Essential cookies: Maintaining login sessions and ensuring the basic functionality of the platform.
- Functional cookies: Saving your preferences such as language and theme.
- Analytics cookies: Monitoring platform usage to improve services.
Cookie Controls
You can manage cookies through your browser settings. Please note that disabling certain essential cookies may cause some platform features to not work properly. Disabling non-essential cookies will not affect your use of our core services.
6. Data Security Measures
Technical Security
xbajay applies industry-standard security technology to protect your information:
- SSL/TLS encryption — encryption is used for all data transfers
- Sensitive data stored with AES-256 encryption
- Firewall and intrusion detection systems
- Two-factor authentication support
- Regular security audits and testing
Organizational Security
Alongside technical measures, we maintain the following organizational security practices:
- Staff data protection training
- "Need-to-know access" policy — only authorized staff can access personal data
- Data breach response plan
- Regular security policy reviews
Steps in the Event of a Data Breach
Should an unexpected data breach occur, we will notify the relevant authorities and affected users as quickly as possible. We will transparently communicate the details of the incident, its impact, and the remedial steps taken.
7. Data Retention Period
Data for Active Accounts
While your account is active, we retain all information necessary to provide services. Even after an account is closed, certain information may need to be retained for a defined period due to legal and regulatory obligations.
Data Deletion Policy
Once the legal retention period has passed, we securely delete or anonymize your personal information. Our data lifecycle policy ensures that no personal information is retained beyond the time it is needed.
8. Your Rights
As a user of xbajay, you have the following rights. To exercise these rights, contact us directly.
Right to Access
You have the right to know what information we hold about you and to receive a copy of that information.
Right to Rectification
If any information we hold about you is incorrect or incomplete, you can request that it be corrected.
Right to Erasure
In certain circumstances, where there is no legal obligation to retain it, you can request that your personal information be deleted.
Right to Object to Processing
You have the right to object to marketing communications or certain types of data processing.
9. Protection of Minors
Access Prohibited for Those Under 21
xbajay is for users aged 21 and above only. We do not knowingly collect information from anyone under the age of 21. Age verification is mandatory during the registration process. If we become aware that information from a minor has been collected, we will immediately close that account and delete the related information.
10. Changes to the Policy
Update Notifications
xbajay may update this Privacy Policy from time to time. The Policy is reviewed when there are changes to services or legal requirements. For significant changes, we will notify you by email or through the platform. Continuing to use the platform after a change means you accept the updated Policy.
Previous Versions
If you would like to know about a previous version of the Policy, please contact us. We retain the history of the Policy for a reasonable period.
11. Contact Us
Privacy Requests
If you have any questions about this Privacy Policy, wish to exercise any rights regarding your information, or have any concerns, please contact us:
- Email: [email protected]
- Live Chat: Use our live chat for 24/7 support in Bengali
We aim to respond to all privacy-related requests as quickly as possible.
Related Policies
We also encourage you to read our other policies, which together form a complete user protection framework: