xbjj Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data xbjj collects from players in Bangladesh, why we collect it, how we use and protect it, and what rights you hold over your own information.
What This Policy Covers
The following cards summarise the most important aspects of how xbjj handles your personal data. They do not replace the full legal text below — please read all sections carefully.
Data We Collect
xbjj collects only the personal data necessary to operate your account, verify your identity, process transactions, and meet our legal obligations — including your name, NID details, contact information, and payment data.
Why We Use It
Your data is used to provide and improve xbjj services, process deposits and withdrawals, conduct KYC verification, personalise your experience, and comply with applicable legal and regulatory requirements.
Who Sees It
xbjj does not sell your personal data to third parties. Data is shared only with trusted service providers (such as payment processors and KYC verification partners) strictly as needed to operate the Platform.
How We Protect It
All data transmitted between your device and xbjj is protected by 256-bit SSL encryption. Personal data is stored on access-controlled servers with ongoing security monitoring and regular vulnerability assessments.
Your Rights
You have the right to access, correct, or request deletion of the personal data xbjj holds about you. You may also object to certain types of processing or request a copy of your data in a portable format.
Cookies & Tracking
xbjj uses cookies and similar tracking technologies to keep your session active, remember your preferences, and analyse Platform usage. You can manage cookie preferences through your browser settings at any time.
Important Notice: This Privacy Policy applies to all users of the xbjj Platform, including visitors who browse without registering and registered players who hold an active xbjj account. By using the xbjj Platform in any capacity, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.
Introduction
xbjj ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our Platform. This Privacy Policy describes the types of personal information we collect, the purposes for which we use that information, the circumstances under which we may share it with third parties, and the security measures we employ to keep it safe.
This Policy applies to all data collected through the xbjj website at xbjj.io, any associated sub-domains, our mobile-optimised interface, customer support channels, and any other means by which you interact with xbjj. It covers personal data collected both from registered account holders and from unregistered visitors to the Platform.
xbjj operates exclusively in the Bangladesh market, serving adult players aged 21 and above who wish to access online casino games, live casino, cricket betting, slots, and related entertainment services. All monetary references in this Policy use Bangladeshi Taka (BDT, ৳) as the operating currency. All personal data processing described in this Policy is conducted in the English language.
This Privacy Policy should be read together with the xbjj Terms & Conditions and our Responsible Gaming Policy, both of which form part of the agreement between you and xbjj.
Data Controller
For the purposes of this Privacy Policy, xbjj acts as the data controller in respect of all personal data collected from players and visitors to the Platform. As data controller, xbjj determines the purposes and means by which your personal data is processed.
If you have any questions, concerns, or requests regarding the handling of your personal data, you may contact xbjj's data protection contact point directly:
- Email: [email protected]
- Response Target: Within 72 hours for data subject requests
- Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
Please use the subject line "Privacy Request" when contacting us regarding data protection matters. This helps our team route your query to the appropriate team member and respond within the target timeframe.
Data We Collect
xbjj collects personal data from you through several channels — directly when you provide it to us, automatically when you use the Platform, and occasionally from trusted third-party sources as part of our identity verification and fraud prevention processes. The categories of personal data we may collect are described below.
Registration & Account Data
When you create an xbjj account, we collect the information you provide during the registration process, including:
- Full legal name (as it appears on your Bangladesh National ID)
- Date of birth
- Email address
- Bangladeshi mobile phone number
- Residential address in Bangladesh (city, district, postal code)
- Username and password (password is stored in encrypted form only)
KYC & Identity Verification Data
To comply with our age verification and anti-money laundering obligations, we collect:
- Bangladesh National ID (NID) number and a copy of your NID card (front and back)
- Passport or driving licence (where accepted as an alternative to NID)
- Proof of address documents (utility bills, bank statements dated within 3 months)
- Selfie or live photo verification (where required by our KYC provider)
Financial & Transaction Data
When you make deposits or request withdrawals, we collect data related to your financial transactions, including:
- bKash, Nagad, Rocket, or Upay mobile wallet number
- Bank name and account details (where bank card payments are used)
- Transaction amounts, dates, and reference numbers
- Deposit and withdrawal history
Usage & Behavioural Data
When you use the xbjj Platform, we automatically collect certain technical and behavioural data, including:
- IP address and approximate geographic location (city/district level)
- Device type, operating system, and browser version
- Session start and end times, session duration
- Pages visited and features used within the Platform
- Games played, bet amounts, and game session history
- Clickstream data and navigation patterns within the Platform
Communication Data
When you contact xbjj support, we collect records of your communications, including:
- Email correspondence with the xbjj support team
- Live chat transcripts
- Complaint and dispute records
- Survey or feedback responses (where voluntarily provided)
Data Minimisation: xbjj adheres to the principle of data minimisation — we collect only the personal data that is genuinely necessary for the specific purpose for which it is being collected. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification.
How We Use Your Data
xbjj uses your personal data for specific, clearly defined purposes. We do not use your data for any purpose incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal data are as follows:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your xbjj account, authenticating your identity at login, and managing account settings and preferences. |
| Transaction Processing | Processing deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in Bangladeshi Taka. |
| Age & Identity Verification | Confirming that all players are 21 years of age or older and that account details match verified identity documents (KYC). |
| Fraud & AML Prevention | Monitoring account activity to detect and prevent fraud, bonus abuse, money laundering, and other prohibited activities. |
| Customer Support | Responding to queries, resolving disputes, investigating complaints, and providing technical assistance. |
| Responsible Gaming | Administering deposit limits, cooling-off periods, self-exclusion requests, and monitoring for signs of problem gambling behaviour. |
| Platform Improvement | Analysing usage patterns and player feedback to improve Platform functionality, game selection, and overall user experience. |
| Marketing Communications | Sending promotional emails and SMS notifications about bonuses, new games, and seasonal offers — only where you have provided consent. |
| Legal Compliance | Maintaining records required by applicable law and responding to lawful requests from regulatory or law enforcement authorities. |
Marketing Opt-Out
If you have previously consented to receive marketing communications from xbjj and wish to withdraw that consent, you may do so at any time by clicking the "unsubscribe" link in any marketing email, updating your communication preferences in your account settings, or emailing [email protected] with the subject line "Marketing Opt-Out". Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.
Legal Basis for Processing
xbjj processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:
- Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to provide you with access to the xbjj Platform, operate your account, and process your transactions.
- Legal Obligation: Processing that is required to comply with applicable legal obligations, including age verification, anti-money laundering checks, and record-keeping requirements.
- Legitimate Interests: Processing carried out in pursuit of xbjj's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided those interests are not overridden by your rights and freedoms.
- Consent: Processing for purposes such as marketing communications, where we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting other processing activities.
Where xbjj relies on legitimate interests as a legal basis, we conduct a balancing assessment to ensure that our interests do not unfairly override your privacy rights. You may contact us at [email protected] to request information about the specific legitimate interests assessment applied to any given processing activity.
Data Sharing & Third Parties
xbjj does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with trusted third parties only in the specific circumstances described below.
Service Providers
xbjj engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These providers are permitted to use your data only for the specific service they provide to xbjj and may not use it for any other purpose. Current categories of service providers include:
- Payment Processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card payment gateways supporting Visa and Mastercard transactions issued by Bangladeshi banks.
- KYC & Identity Verification Providers: Third-party identity verification services that assist with NID validation, age verification, and document authentication.
- Game Technology Providers: Licensed game studios (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, Play'n GO, and Red Tiger) who may receive pseudonymised session data to support game delivery and dispute resolution.
- Cloud Infrastructure & Hosting Providers: Secure server infrastructure providers who store Platform data under encryption and access controls.
- Customer Support Technology: Live chat and ticketing platform providers who facilitate communication between players and the xbjj support team.
- Analytics Providers: Platform usage analytics tools that process anonymised or aggregated data to help xbjj understand how the Platform is used.
Legal & Regulatory Disclosure
xbjj may disclose personal data to government bodies, regulators, law enforcement agencies, or courts in Bangladesh where we are legally required or compelled to do so — for example, in connection with an anti-money laundering investigation, a court order, or a formal regulatory inquiry. We will notify you of any such disclosure where we are legally permitted to do so.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of xbjj's assets, your personal data may be transferred to the acquiring entity as part of the transaction. In such cases, xbjj will notify registered players via email in advance of any change in data controller, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
No Sale of Personal Data: xbjj has never sold personal data to third-party advertisers, data brokers, or marketing companies, and we have no plans to do so. Your data is used solely to operate your xbjj account and deliver the services you have requested.
Data Retention
xbjj retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods we apply to different categories of personal data are outlined below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and compliance obligations |
| KYC / identity verification documents | Duration of account + 5 years after closure | AML record-keeping requirements |
| Transaction records (deposits/withdrawals) | 7 years from transaction date | Financial record-keeping obligations |
| Game session history | 3 years from session date | Dispute resolution and responsible gaming monitoring |
| Customer support communications | 3 years from last interaction | Dispute resolution and service improvement |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent for marketing communications |
| Website usage / log data | 13 months on a rolling basis | Security monitoring and platform analytics |
When the applicable retention period expires, xbjj will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Where data cannot be immediately deleted due to technical constraints, it will be isolated from further processing until deletion is possible.
Data Security
xbjj takes the security of your personal data seriously and employs a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction.
Technical Security Measures
- 256-bit SSL Encryption: All data transmitted between your device and the xbjj Platform is encrypted using industry-standard TLS/SSL protocols, the same level of protection used by Bangladesh's leading financial institutions.
- Encrypted Data Storage: Sensitive personal data, including KYC documents and payment information, is stored in encrypted form at rest on access-controlled servers.
- Password Hashing: User passwords are never stored in plain text. xbjj uses strong one-way cryptographic hashing with salting to store password data.
- Two-Factor Authentication (2FA): Players are strongly encouraged to enable SMS-based two-factor authentication on their xbjj accounts. 2FA significantly reduces the risk of unauthorised account access.
- Intrusion Detection: xbjj operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.
- Regular Security Audits: The Platform undergoes regular third-party security assessments and vulnerability testing to identify and remediate potential weaknesses.
Organisational Security Measures
- Access to personal data is restricted on a strict need-to-know basis. Only xbjj team members with a legitimate operational need are granted access to player personal data.
- All xbjj staff with access to personal data receive regular data protection and security awareness training.
- Third-party service providers are subject to contractual data security obligations and are assessed for security compliance before engagement.
Security Incident Response: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, xbjj will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. You should report any suspected security incidents related to your xbjj account to [email protected] immediately.
Cookies & Tracking Technologies
xbjj uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.
What Are Cookies?
Cookies are small text files that are placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and remember information about your session or preferences. Cookies are widely used across the internet and are essential to the functioning of most modern web platforms.
Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Essential for Platform operation — keeping you logged in, maintaining session security, and enabling core features like deposits and game loading. | No — required for Platform to function |
| Functional | Remember your preferences such as language, display settings, and game lobby filters to personalise your experience. | Yes — via browser settings |
| Analytics | Collect anonymised usage data to help xbjj understand how players navigate the Platform and identify areas for improvement. | Yes — via browser settings |
| Security | Detect and prevent fraudulent login attempts, session hijacking, and other security threats. | No — required for account security |
Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please note that disabling certain cookies may affect the functionality of the xbjj Platform — for example, you may be required to log in again more frequently if session cookies are blocked. For guidance on managing cookies in your specific browser, please refer to your browser's help documentation.
Your Rights
As an individual whose personal data is processed by xbjj, you hold a number of rights in relation to that data. xbjj is committed to honouring these rights and will respond to all valid data subject requests within 72 hours of receipt.
- Right of Access: You have the right to request a copy of the personal data xbjj holds about you, along with information about how it is being used. We will provide this in a clear, readable format.
- Right to Rectification: If any of the personal data xbjj holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your xbjj account settings.
- Right to Erasure ("Right to Be Forgotten"): You may request that xbjj delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that erasure requests may be subject to overriding legal retention obligations (see Section 7).
- Right to Restrict Processing: In certain circumstances, you may request that xbjj restricts the processing of your personal data — for example, while a correction request is being verified, or where you have objected to processing pending determination of whether xbjj's legitimate interests override your rights.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object: You have the right to object at any time to processing of your personal data based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". We may ask you to verify your identity before processing your request. xbjj will not charge a fee for reasonable requests but reserves the right to charge a reasonable administrative fee or refuse clearly excessive or repetitive requests.
Account Closure & Data: Closing your xbjj account does not result in the immediate deletion of all your personal data. Legal retention obligations (described in Section 7) require us to retain certain categories of data — particularly KYC and transaction records — for a defined period after account closure. We will inform you of applicable retention periods when you submit a closure request.
Protection of Minors
xbjj is an adult-only platform. Access to xbjj is strictly limited to individuals who are 21 years of age or older. We do not knowingly collect or process personal data from individuals under the age of 21, and we do not direct any element of the xbjj Platform toward minors.
If xbjj becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, secure the data, and take steps to delete it in accordance with our data minimisation obligations. Any funds deposited by an underage player will be handled in accordance with the relevant provisions of the xbjj Terms & Conditions.
Parents and guardians who believe that a minor in their care may have accessed the xbjj Platform are encouraged to contact our support team immediately at [email protected]. We take all such reports seriously and will act promptly to investigate and remediate the situation.
xbjj strongly encourages the use of parental control software to prevent minors from accessing online gambling platforms. Free parental control tools are available from a number of reputable providers and can be configured to block access to gambling-related websites across all devices used by children in your household.
International Data Transfers
xbjj's primary operations are focused on the Bangladesh market. However, some of the third-party service providers we engage — including cloud infrastructure providers, game technology partners, and KYC verification services — may store or process personal data on servers located outside of Bangladesh.
Where personal data is transferred to a jurisdiction outside Bangladesh, xbjj takes appropriate steps to ensure that the transfer is carried out in compliance with applicable data protection principles and that your data continues to receive an adequate level of protection. These steps may include:
- Entering into data processing agreements with the relevant service provider that include binding data protection obligations;
- Relying on the service provider's internationally recognised certifications or compliance frameworks (such as ISO 27001);
- Transferring data only to jurisdictions that maintain adequacy standards comparable to those applied in Bangladesh.
You may request further information about the safeguards applied to any specific international data transfer by contacting xbjj at [email protected] with the subject line "International Transfer Query".
Changes to This Policy
xbjj reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes to this Policy, we will take reasonable steps to notify registered players, which may include:
- Displaying a prominent notice on the xbjj homepage or Platform login screen;
- Sending an email notification to the address associated with your registered xbjj account;
- Updating the "Last Updated" date at the top of this page and in the sidebar table of contents.
We encourage you to review this Privacy Policy periodically to stay informed about how xbjj protects your personal data. Your continued use of the xbjj Platform following notification of a material change constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure by contacting our support team.
Minor or non-material amendments — such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or formatting updates — may be made without prior notice. The version currently published at xbjj.io/privacy-policy is always the authoritative version in effect.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way xbjj handles your personal data, please do not hesitate to get in touch with our team. We are committed to addressing all privacy-related enquiries promptly and transparently.
- Email: [email protected]
- Subject Line for Privacy Matters: "Privacy Request" or "Data Subject Request"
- Response Target: Within 72 hours for data subject rights requests; within 24 hours for general privacy enquiries
- Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
xbjj values the trust you place in us when you share your personal data, and we are committed to handling it with care, transparency, and respect for your privacy rights. Thank you for taking the time to read our Privacy Policy.
Further Assistance: If you feel your privacy rights have not been adequately addressed after contacting xbjj, you may also seek guidance from consumer protection organisations or legal advisors in Bangladesh. xbjj will always cooperate fully with any lawful inquiry into our data handling practices.
Your Privacy Is Protected at xbjj
Now that you understand how xbjj safeguards your personal data, explore everything our platform has to offer — from live cricket betting to premium slots — with complete confidence.