xbajr Privacy Policy — How We Handle Your Data

1 Introduction

xbajr ("we", "us", "our") is committed to protecting the privacy of all users of the xbajr platform at https://xbajr.org. This Privacy Policy describes the personal information we collect from you when you use our website, create an account, make a deposit or withdrawal, place a wager, or interact with our customer support team.

This Privacy Policy applies to all personal data collected through the xbajr platform, whether provided directly by you during registration, generated through your use of our services, or obtained through third-party verification processes. By using the xbajr platform, you consent to the data practices described in this policy.

This policy should be read in conjunction with our Terms and Conditions. Where any conflict exists between this Privacy Policy and our Terms and Conditions, the Terms and Conditions shall prevail to the extent of that conflict.

2 Our Data Protection Commitments

xbajr handles your personal data according to six core principles that shape every decision we make about privacy on the platform:

3 Information We Collect

xbajr collects personal information in the following categories. The specific data points within each category depend on how you interact with the platform:

• Identity information — full name, date of birth, and government-issued identification number or document (e.g. National ID card) collected during registration and KYC verification.
• Contact information — Bangladesh mobile number, and optionally an email address, used for account communications, OTP verification and support correspondence.
• Financial information — deposit and withdrawal records, transaction amounts, payment method identifiers (e.g. registered bKash or Nagad mobile numbers), and account balance history.
• Gaming activity — bet histories, game session data, wagering patterns, bonus usage and win/loss records, retained for responsible gaming monitoring and regulatory compliance purposes.
• Technical information — IP address, device type, operating system, browser type, and session timestamps collected automatically when you access the platform.
• Support communications — records of conversations with the xbajr customer support team, including chat logs, emails and any documents or screenshots you share with us during a support request.

We collect this information only when you voluntarily provide it to us (for example, by registering an account) or when it is automatically generated through your use of the platform (for example, technical logs). We do not purchase data about you from third-party data providers.

4 How We Use Your Information

The personal data collected by xbajr is used for the following purposes, all of which are directly connected to the operation of the platform or required by law:

• Account creation and management — verifying your identity, maintaining your account, processing login requests and enabling access to all platform features.
• Payment processing — facilitating deposits via bKash, Nagad, Rocket and Upay, processing withdrawal requests and maintaining accurate financial records.
• KYC compliance — verifying that users are who they say they are, confirming minimum age of 21 years, and meeting anti-money laundering (AML) obligations.
• Responsible gaming — monitoring gaming patterns to identify signs of problem gambling, applying self-imposed limits set by users, and contacting users where responsible gaming concerns arise.
• Customer support — responding to your queries, resolving disputes, processing complaints and maintaining records of support interactions for quality assurance purposes.
• Platform improvement — using aggregated, anonymised analytics data to understand how the platform is used, identify technical issues and improve user experience for all players.

We do not use your personal data for automated decision-making that produces significant legal effects on you without human review. Where automated systems flag an account for review (for example, for suspected fraud), a member of the xbajr team reviews the case before any action is taken.

5 Legal Basis for Processing

xbajr processes your personal data on the following legal bases:

• Contractual necessity — processing required to create and maintain your account, process deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal obligation — processing required to comply with AML regulations, KYC requirements, age verification mandates and any other applicable legal or regulatory obligations.
• Legitimate interests — processing for fraud prevention, responsible gaming monitoring, platform security and the improvement of our services, where these interests are not overridden by your rights.
• Consent — where you have given us specific consent to process your data for a particular purpose, such as receiving marketing communications. You may withdraw consent at any time by contacting support.

6 Sharing of Your Information

xbajr does not sell your personal data. We share personal data only in the limited circumstances described below, and only where necessary:

• Payment service providers — we share the minimum necessary financial data with bKash, Nagad, Rocket and Upay to process your transactions. These providers are bound by their own privacy and security obligations.
• Identity verification providers — we share identity documents and information with third-party KYC service providers solely for the purpose of age and identity verification in compliance with legal requirements.
• Game software providers — game providers such as Evolution Gaming, Pragmatic Play and others may receive anonymised session data necessary to operate their games. No personally identifiable information is shared with game providers beyond what is technically required.
• Law enforcement and regulators — we will disclose personal data to competent authorities where required by law, court order or regulatory direction. We will notify you of any such disclosure unless prohibited from doing so.

We require all third parties who process personal data on our behalf to maintain appropriate technical and organisational security measures and to use the data only for the specific purpose for which it was shared.

7 Payment Data and Financial Information

All financial transactions on xbajr are processed in Bangladeshi Taka (BDT) via mobile financial services including bKash, Nagad, Rocket and Upay. When you make a deposit or request a withdrawal, we collect the mobile number associated with your payment account and the transaction reference number generated by the payment provider. We do not store full payment account credentials on our servers.

Transaction records are retained for a minimum period required by applicable financial regulations and anti-money laundering obligations. These records may be reviewed by xbajr's compliance team or shared with relevant authorities in the event of a regulatory inquiry or investigation.

8 Cookies and Tracking Technologies

xbajr uses cookies and similar technologies on the platform to deliver a functional and consistent experience. The categories of cookies we use are:

• Strictly necessary cookies — essential for the platform to function, including session management, authentication tokens and security cookies. These cannot be disabled without impairing platform functionality.
• Analytical cookies — anonymised cookies that help us understand how users navigate the platform, which pages are visited most frequently, and where technical errors occur. Data from analytical cookies does not identify individual users.
• Functional cookies — cookies that remember your preferences and settings (for example, language preference) so that you do not need to reset them on every visit.

You can manage cookie settings through your browser. Note that disabling strictly necessary cookies will affect platform functionality. xbajr does not use third-party advertising cookies or cross-site tracking technologies.

9 Data Retention

xbajr retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and regulatory reporting obligations. The following general retention periods apply: account data is retained for the duration of the account relationship plus a minimum post-closure period required by applicable law; financial transaction records are retained for the minimum period required by anti-money laundering regulations; support communications are retained for a period sufficient to resolve any related dispute or complaint.

When your data is no longer required, xbajr will securely delete or anonymise it. Where anonymisation is used, the resulting data set no longer relates to you as an identifiable individual and may be retained indefinitely for aggregated analytical purposes.

10 Your Privacy Rights

As a user of the xbajr platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details at the bottom of this page:

xbajr will respond to all privacy rights requests within a reasonable timeframe. Where a request cannot be fulfilled due to legal or regulatory obligations, we will explain the reason in writing.

11 Security Measures

xbajr implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and the platform, secure server infrastructure with access controls, regular security assessments, and staff training on data protection obligations.

While xbajr takes all reasonable precautions, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, xbajr will notify affected users as soon as reasonably practicable.

12 Children's Privacy and Age Policy

xbajr is strictly an adult platform. The xbajr platform is not directed at, and is not intended to be used by, anyone under the age of 21. We do not knowingly collect personal data from individuals under the age of 21. If xbajr becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all associated balances will be forfeited, and the personal data will be securely deleted to the extent permitted by law.

13 Changes to This Privacy Policy

xbajr reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via the platform or by the contact details held on your account. We encourage you to review this policy periodically to stay informed about how we protect your data.

Your continued use of the xbajr platform after any change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any change, you should stop using the platform and contact support to request account closure.

14 Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or the way xbajr handles your personal data, please contact our support team. We aim to respond to all privacy-related queries within 24 hours Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]