xbji Privacy Policy — How We Handle Your Personal Data

1. Introduction

xbji ("we", "us", "our") operates the online casino and sports betting platform at xbji.club. This Privacy Policy explains how xbji collects, uses, stores, shares, and protects personal data relating to users ("you") of the xbji platform, including visitors who browse the site without registering an account. This Policy forms part of xbji's broader Terms and Conditions and should be read alongside them.

By registering an account on xbji, making a deposit, or continuing to use the xbji platform after this Privacy Policy has been published, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not use the xbji platform.

2. Information We Collect

xbji collects three categories of personal data: information you provide directly when registering or using the platform; transaction and activity data generated by your use of the platform; and technical data collected automatically when you access the site.

2.1 Information You Provide Directly

When you register an account or interact with xbji support, you may provide the following personal data:

• Your full name and date of birth (required for age verification and KYC compliance).
• Your registered mobile phone number (used as your primary account identifier and for deposit/withdrawal via bKash, Nagad, or Rocket).
• A copy of your national identity card or other government-issued identification document, where requested for KYC verification.
• Any information you voluntarily share with xbji support in correspondence, such as details of a transaction query or a responsible gaming request.

2.2 Transaction and Activity Data

When you use the xbji platform, we automatically record data related to your account activity, including:

• Deposit and withdrawal transactions: amounts, timestamps, mobile payment provider used (bKash, Nagad, Rocket, or Upay), and transaction reference numbers.
• Betting and gaming activity: game sessions played, bet amounts, outcomes, bonus claims, wagering requirement progress, and account balance history.
• Account actions: login timestamps, password change events, responsible gaming tool activations (deposit limits, self-exclusion requests), and support ticket history.

2.3 Technical Data Collected Automatically

When you access xbji.club, our servers and analytics systems automatically collect certain technical information, including:

• Your IP address and approximate geolocation (country/city level), used for fraud detection and regulatory compliance.
• Device and browser information: device model, operating system version, browser type and version, screen resolution, and mobile network operator.
• Session data: pages visited, time spent on each page, links clicked, and referring URL — used to improve the xbji platform experience for Bangladesh mobile users.

3. How We Use Your Information

xbji uses the personal data it collects for the following purposes. We process your data only to the extent necessary for each purpose:

• Account management: to create, maintain, verify, and secure your xbji account, including age verification (21+) and KYC identity checks.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to reconcile transactions; and to investigate and resolve payment disputes.
• Fraud prevention and security: to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the xbji Terms and Conditions.
• Platform improvement: to analyse how Bangladesh players use xbji so we can improve the platform's performance, game selection, payment flow, and mobile experience.
• Responsible gaming compliance: to monitor betting patterns that may indicate problem gambling behaviour, and to apply responsible gaming tools (deposit limits, self-exclusion) where requested or required.
• Legal and regulatory compliance: to meet record-keeping, identity verification, and anti-money laundering obligations under applicable law, and to respond to valid requests from law enforcement or regulatory authorities.

Our Privacy Commitments to You

These six principles summarise how xbji treats your personal data as a Bangladesh platform.

4. Legal Basis for Processing

xbji processes your personal data on the following legal bases:

• Contractual necessity: processing required to provide the services described in the xbji Terms and Conditions — including account creation, payment processing, and game operation.
• Legal obligation: processing required to comply with applicable anti-money laundering laws, KYC regulations, age verification requirements, and valid orders from competent authorities.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and technical improvement of the xbji platform — where these interests are not overridden by your privacy rights.
• Consent: where you have specifically consented to a particular use of your data (such as receiving promotional communications), we process that data on the basis of your consent, which you may withdraw at any time.

5. Sharing of Personal Data

xbji does not sell your personal data. xbji shares your data only in the following limited circumstances:

5.1 Payment Processors

To process your deposits and withdrawals, xbji shares necessary transaction data with the mobile payment providers you select — bKash, Nagad, Rocket, or Upay. This sharing is limited to the data required to complete the transaction (mobile number, transaction amount, and reference number). xbji does not share your gaming history, balance, or account details with these providers.

5.2 Game Providers and Technology Partners

xbji uses third-party game studios (including but not limited to Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) to provide game content. These studios receive only the data necessary to operate their games within the xbji platform — typically a session token and player balance data — and are contractually prohibited from using this data for any purpose other than game operation. No personally identifiable registration data (name, mobile number, ID documents) is shared with game studios.

5.3 Legal and Regulatory Disclosure

xbji may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in response to a valid legal order, court order, or regulatory requirement. In such cases xbji will share only the minimum data required to comply with the legal obligation and will notify the affected user where permitted by law to do so.

6. Payment Data and Mobile Money Security

xbji handles payment data with the highest level of care. Specifically: xbji never stores your bKash, Nagad, Rocket, or Upay PIN or password on its servers; xbji does not have access to your mobile money account credentials; all payment requests originate from your mobile money app and are confirmed by you using your own mobile device and authentication method. xbji records only the result of a completed transaction (success/failure, amount, reference number) for accounting and dispute resolution purposes.

If you notice an unauthorised transaction on your xbji account, you must contact xbji support immediately at [email protected] and also notify your mobile money provider directly. xbji will cooperate fully in any investigation of an unauthorised transaction and will freeze the affected account pending investigation where appropriate.

7. Data Retention

xbji retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our internal record-keeping obligations. Specifically: account registration data and KYC documents are retained for a minimum of 5 years following account closure; transaction records are retained for a minimum of 5 years from the date of the transaction; support correspondence is retained for 2 years from the date of the last interaction. These retention periods may be extended where required by a valid legal hold or ongoing investigation.

When retention periods expire and there is no legal basis to continue holding your data, xbji will securely delete or anonymise the relevant data in accordance with its data destruction procedures. Anonymised or aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

8. Cookies and Tracking Technologies

xbji.club uses cookies and similar tracking technologies to operate the platform, remember your session, and improve your experience. The types of cookies used include:

• Essential cookies: necessary for the platform to function — including session authentication tokens that keep you logged in during your visit. These cannot be disabled without breaking platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how users navigate xbji.club, which pages are most visited, and where users encounter difficulties — helping xbji improve platform performance for Bangladesh mobile users.
• Fraud-detection cookies: short-lived identifiers used to detect suspicious activity such as automated bot access, credential stuffing, or multiple account creation from a single device.

Most mobile browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling essential cookies will prevent you from logging in to xbji. Disabling analytics or fraud-detection cookies may degrade the platform's ability to protect your account. xbji does not use third-party advertising or retargeting cookies.

9. Your Data Rights

As an xbji user, you have the following rights in relation to your personal data. To exercise any of these rights, contact xbji at [email protected] with your registered mobile number and a description of your request:

• Right of access: you may request a copy of all personal data xbji holds about you. xbji will respond within 30 days of receiving a valid, verified request.
• Right to rectification: if any personal data xbji holds about you is inaccurate or incomplete, you may request that it be corrected. Account details (such as your registered name or mobile number) can also be updated by contacting support.
• Right to erasure: you may request deletion of your personal data where xbji no longer has a legal basis to retain it. Note that certain data (such as transaction records) must be retained for legal compliance periods even after account closure.
• Right to restrict processing: in certain circumstances (for example, where you contest the accuracy of data xbji holds), you may request that xbji restrict processing of your data while the matter is resolved.
• Right to withdraw consent: where xbji processes your data on the basis of your consent (for example, for promotional communications), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

xbji will acknowledge all data rights requests within 5 working days and will complete valid requests within 30 days. xbji reserves the right to request verification of your identity before processing a data rights request, to ensure that personal data is not disclosed to an unauthorised third party.

10. Data Security Measures

xbji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, or destruction. These measures include: SSL/TLS encryption for all data transmitted between your device and xbji.club; access controls that restrict platform staff access to personal data on a need-to-know basis; secure, encrypted storage of account credentials (passwords are hashed and salted — they are never stored in plain text); regular security testing and vulnerability assessments of the xbji platform; and audit logging of all administrative access to personal data.

While xbji takes all reasonable precautions to secure your personal data, no internet-based platform can guarantee absolute security. You also have a responsibility to protect your own account by using a strong password and keeping your login credentials confidential. If you believe your xbji account has been compromised, contact [email protected] immediately.

11. Children and Minors

xbji is strictly a 21+ platform. xbji does not knowingly collect personal data from persons under the age of 21. If xbji becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted to the extent permitted by law, and any funds deposited will be handled in accordance with xbji's underage account policy. If you are a parent or guardian and believe a minor has registered on xbji, please contact [email protected] immediately with full details so the matter can be investigated and resolved promptly.

12. Changes to This Privacy Policy

xbji reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will take reasonable steps to notify registered users — for example, by displaying a notice on the platform at your next login. The "Last Updated" date at the top of this page indicates when the current version was published.

13. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern related to your xbji account, please contact xbji in writing at the address below. xbji aims to acknowledge all privacy enquiries within 5 working days.

Email (plain text — not a clickable link): [email protected]

Please include your registered mobile number and a clear description of your request in all privacy-related correspondence so we can locate your account and respond accurately.