xbjee Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how xbjee ("xbjee", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the xbjee platform, including the website at xbjee.ws and all associated services, features, and interfaces (collectively, the "Platform").

xbjee is Bangladesh's premier online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and beyond. Our entire operation — including all account communications, support interactions, and this Policy — is conducted in English.

By registering an account, accessing the Platform, or otherwise engaging with any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must immediately cease using the Platform.

2 Data Controller

For the purposes of this Policy, xbjee acts as the data controller in respect of the personal data collected through the Platform. As data controller, xbjee determines the purposes and means by which your personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the xbjee Data Protection team via the contact channels set out in Section 15 of this Policy. We are committed to responding to all privacy-related communications within a reasonable timeframe and in accordance with applicable law.

3 Personal Data We Collect

xbjee collects personal data in several categories depending on how you interact with the Platform. The table below summarises the main data types we may hold about you:

xbjee does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless expressly required by law and with your explicit consent where applicable.

4 How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data xbjee holds is information you provide directly, including during account registration, KYC verification, deposit and withdrawal requests, live chat and email support interactions, completion of promotional forms, and participation in surveys or feedback programmes.

4.2 Data Collected Automatically

When you access the xbjee Platform, certain technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser configuration, and records of your activity on the Platform such as pages visited, games played, and session timestamps.

4.3 Data From Third Parties

xbjee may receive personal data about you from third-party service providers involved in the delivery of the Platform, including identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, and banking partners), fraud detection services, and analytics platforms. Data received from these sources is subject to the same protections as data you provide directly.

5 Purposes of Processing

xbjee processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your xbjee account, including login authentication and password management.
• Identity Verification (KYC): Verifying your identity and age (21+) in accordance with our platform policies and applicable legal obligations.
• Payment Processing: Facilitating deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and connected banking partners.
• Service Delivery: Providing access to casino games, sports betting markets (including cricket BPL, T20, IPL), live dealer tables, slots, and all other Platform features.
• Customer Support: Responding to enquiries, resolving disputes, and providing assistance via live chat and email in Bangladesh Standard Time (BST, UTC+6).
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct.
• Responsible Gaming: Monitoring player behaviour to identify potential problem gambling patterns and to apply deposit limits, session limits, or self-exclusion where warranted.
• Legal Compliance: Meeting obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: Analysing usage patterns to improve game offerings, interface design, payment flows, and overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.

6 Legal Basis for Processing

xbjee processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account registration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuance of xbjee's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit, freely given consent, such as the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Sharing Your Data

7.1 Service Providers and Partners

xbjee shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), identity verification providers, game software suppliers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others), hosting and cloud infrastructure providers, and customer support tools. All such providers are bound by data processing agreements that require them to protect your information and use it only for the specified purpose.

7.2 Legal and Regulatory Disclosure

xbjee may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where required by applicable law, court order, or lawful regulatory demand. In such cases, xbjee will disclose only the minimum amount of data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of xbjee's business assets, personal data held about Platform users may be transferred as part of that transaction. Affected players will be notified in advance where legally and practically possible, and the receiving entity will be required to honour the commitments set out in this Policy.

7.4 No Sale of Personal Data

xbjee does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. This commitment applies without exception.

8 Data Retention

xbjee retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with xbjee, plus a minimum of 5 years following account closure to meet anti-money-laundering and record-keeping obligations.
• KYC and Verification Documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable law.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Communications: Retained for 3 years from the date of the last communication, to support dispute resolution and quality assurance.
• Technical and Usage Logs: Retained for up to 12 months for security monitoring and fraud investigation purposes, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for the duration of the marketing relationship, plus 1 year following opt-out to demonstrate consent history.

When personal data is no longer required, xbjee securely deletes or anonymises it in accordance with industry-standard data disposal practices.

9 Data Security

xbjee implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial credentials and identity documents.
• Restricted access controls ensuring that personal data is accessible only to staff with a legitimate operational need.
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure.
• Two-factor authentication (2FA) available to all players to protect Account access.
• Automated fraud detection systems monitoring transactions and login behaviour in real time.
• Staff training on data protection obligations and information security best practices.

While xbjee takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, xbjee will notify affected players and, where required by law, the relevant authorities, as promptly as possible.

10 Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. xbjee uses cookies and similar technologies (such as web beacons and local storage) to operate the Platform effectively, remember your preferences, and gather analytical data about how the Platform is used.

10.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your language preferences, display settings, and game history to personalise your Platform experience.
• Analytical Cookies: Used to collect anonymised data about how players interact with the Platform, including pages visited, game sessions initiated, and navigation paths. This data helps xbjee improve the Platform.
• Security Cookies: Used to detect fraudulent activity, identify suspicious login patterns, and protect the integrity of your Account.

10.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the xbjee Platform, including your ability to log in or access certain features. For full guidance on managing cookies in your specific browser, refer to the browser's official help documentation.

11 Your Data Rights

As a player on the xbjee Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact the xbjee support team using the details in Section 15.

12 Minors and Age Policy

The xbjee Platform is strictly intended for individuals aged 21 and above. xbjee does not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account, access any game, or provide any personal information to xbjee.

If xbjee becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately suspended, all associated data will be deleted in accordance with applicable law, and any funds held will be returned to the originating payment method where technically possible. Parents or guardians who believe their child has registered an Account on xbjee are urged to contact the support team without delay.

13 International Data Transfers

xbjee's primary operations and data storage infrastructure are oriented toward serving the Bangladesh market. However, certain service providers engaged by xbjee — including game software suppliers, cloud hosting providers, and fraud detection services — may be located in jurisdictions outside Bangladesh. Where personal data is transferred to such providers, xbjee ensures that appropriate safeguards are in place to protect your data, including data processing agreements that impose data protection standards consistent with this Policy.

xbjee does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first putting in place appropriate contractual protections. If you have concerns about international data transfers relating to your personal data, please contact the xbjee Data Protection team using the details in Section 15.

14 Changes to This Privacy Policy

xbjee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. Material changes will be communicated to registered players via the email address on file at least 7 days before the updated Policy takes effect.

The most current version of this Privacy Policy will always be available at xbjee.ws/privacy-policy, with the effective date clearly displayed at the top of the document. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your Account.

15 Contact Us — Data and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the xbjee Data Protection and support team through the following channels. All communications are handled in English and are available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

• Live Chat: Available directly on the xbjee Platform at any time — the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000 (plain text — not a clickable link)

xbjee aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response or fulfil data subject requests within 30 calendar days, extendable by a further 30 days where the complexity of the request warrants it, with notice provided to you of the extension.