xbhajee Privacy Policy
At xbhajee, your privacy is treated as a core responsibility, not an afterthought. This Privacy Policy explains exactly what personal data we collect, how we use and protect it, who we may share it with, and what rights you hold over your own information.
Scope of This Policy: This Privacy Policy applies to all personal data collected by xbhajee through the xbhajee.net website, mobile-optimised interfaces, and any communication channels operated by xbhajee, including email and live chat support. By registering an account or continuing to use the xbhajee platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns about how your data is handled, please contact us at [email protected] at any time.
SSL Encryption
All data transmitted between your device and the xbhajee platform is protected by industry-standard SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted in transit.
Minimal Data Collection
xbhajee collects only the personal information that is strictly necessary to operate your account, process payments, and comply with anti-fraud and responsible gaming obligations. We do not collect data unnecessarily.
No Sale of Your Data
xbhajee does not sell, rent, or trade your personal data to third-party advertisers or marketing networks. Your information is used solely to operate and improve the xbhajee platform and to meet our legal obligations.
Your Rights Respected
You have clear rights over your personal data at xbhajee — including the right to access, correct, or request deletion of your information. We honour all valid data rights requests promptly and without charge.
Transparent Cookie Use
xbhajee uses cookies and similar technologies only for platform functionality, session security, and anonymised performance analytics. We do not use cross-site tracking cookies for third-party advertising.
Defined Retention Periods
Your data is not held indefinitely. xbhajee applies clear retention schedules to all categories of personal data, and information that is no longer required for its original purpose is securely deleted or anonymised.
Information We Collect
xbhajee collects personal data from players through several distinct channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party service providers where this is necessary to verify your identity or process your payments. The categories of information we collect are described below.
1.1 Registration and Account Information
When you create an xbhajee account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, email address, mobile phone number, and the payment method details you link to your account (such as your bKash or Nagad mobile wallet number). You may also optionally provide your residential city (for example, Dhaka, Chittagong, Sylhet, or Khulna) to help us personalise your experience.
1.2 Identity Verification (KYC) Data
To comply with anti-money-laundering and fraud prevention obligations, xbhajee may at certain points request identity verification documents from you. This may include a copy of your National Identity Card (NID), passport, or driving licence, and in some cases a recent utility bill or bank statement confirming your address. KYC documents are processed securely and stored only for as long as required by applicable legal obligations.
1.3 Transaction and Financial Data
Every deposit, withdrawal, bonus claim, and wager placed on xbhajee is recorded as part of your account transaction history. This includes the amount transacted, the payment method used, timestamps, reference numbers, and the outcome of each transaction. This data is necessary for accurate account management, dispute resolution, and regulatory compliance.
1.4 Technical and Usage Data
When you access the xbhajee platform, our servers automatically collect certain technical data about your connection and device. This includes your IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited within xbhajee.net, time spent on each page, and the dates and times of your visits. This data is used to maintain platform security, diagnose technical issues, and improve the overall user experience.
1.5 Communications Data
When you contact xbhajee through our support channels — whether by email to [email protected] or through any live chat interface — we retain a record of the communication, including the date, time, nature of your enquiry, and any personal details you include in your message. This data allows us to follow up on open issues, maintain quality assurance, and evidence the steps we have taken to resolve disputes.
1.6 Data We Do Not Collect
xbhajee does not collect your full payment card number (only masked card details are stored, processed via PCI-DSS compliant payment gateways). We do not collect biometric data, precise real-time geolocation, or any sensitive categories of personal data such as racial origin, religious beliefs, or health information — unless you voluntarily disclose such information in a support communication.
How We Use Your Information
xbhajee processes your personal data only for clearly defined purposes and only where we have a lawful basis for doing so. The table below summarises the primary purposes for which we use your data, the legal basis relied upon for each purpose, and whether the processing is mandatory for your use of the platform.
| Purpose | Legal Basis | Mandatory? |
|---|---|---|
| Creating and managing your xbhajee account | Performance of contract | Yes — account cannot function without this |
| Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard | Performance of contract | Yes — required for all financial transactions |
| Identity verification (KYC) and fraud prevention | Legal obligation / legitimate interests | Yes — required before withdrawals and at our discretion |
| Anti-money-laundering monitoring and reporting | Legal obligation | Yes — mandated by applicable law |
| Responsible gaming monitoring and self-exclusion management | Legal obligation / legitimate interests | Yes — core platform obligation |
| Delivering customer support and resolving disputes | Performance of contract / legitimate interests | Yes — required for support function |
| Sending service notifications (account activity, security alerts, payment confirmations) | Performance of contract | Yes — cannot be opted out of |
| Sending promotional communications about bonuses, BPL, IPL, and seasonal offers | Consent | No — you may opt out at any time |
| Platform analytics and improvement of user experience | Legitimate interests | No — anonymised data used where possible |
| Age verification to ensure only players aged 18+ access the platform | Legal obligation | Yes — mandated 18+ obligation |
2.1 Marketing Communications
Where you have provided your consent, xbhajee may contact you by email or in-platform notification about new games, promotions, seasonal bonus offers (such as Eid or Pohela Boishakh specials), cricket tournaments including BPL and T20 World Cup betting markets, and other platform news. You may withdraw your marketing consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect service-related communications, which will continue as necessary for your account.
2.2 Automated Decision-Making
xbhajee uses automated systems to flag accounts for fraud review, bonus abuse detection, and responsible gaming interventions. Where an automated process results in a restriction on your account, you have the right to request human review of that decision by contacting our support team at [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 10 business days.
Sharing and Disclosure of Data
xbhajee does not sell or rent your personal data to any third party. However, in order to operate the platform and meet our legal obligations, we do share certain data with carefully selected third-party service providers and, where legally required, with authorities. The circumstances in which we share your data are described below.
3.1 Payment Processing Partners
To process your bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard transactions, xbhajee shares the minimum necessary financial and identity data with the relevant payment service providers. These providers operate under their own privacy policies and are contractually bound to process your data only for the purpose of completing your transaction and preventing fraud.
3.2 Game Content Providers
Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Hacksaw Gaming may receive a pseudonymised player identifier and session token when you launch their games within the xbhajee platform. This is technically necessary for game session initialisation and game history logging. These providers do not receive your full name, contact details, or payment information.
3.3 Identity Verification Providers
xbhajee works with third-party KYC and identity verification service providers to assist with the verification of National ID Cards, passports, and other documents you submit. These providers are contractually bound to process your data only for identity verification purposes and to delete or return documents once the verification is complete.
3.4 Legal and Regulatory Disclosure
xbhajee may be required by law, court order, or regulatory instruction to disclose certain personal data to competent authorities. In such cases, xbhajee will disclose only the minimum data required to comply with the legal obligation. Where permitted by law, xbhajee will notify the affected player that such a disclosure has been made.
3.5 Business Transfers
In the event that xbhajee undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, player data may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, xbhajee will provide reasonable advance notice on the platform and the successor entity will be bound by this Privacy Policy with respect to all existing player data.
No Third-Party Advertising: xbhajee does not share your personal data with advertising networks, social media platforms, or any third party for the purpose of targeted advertising or behavioural profiling. Any analytics data shared externally is aggregated and anonymised so that no individual player can be identified from it.
Cookies and Tracking Technologies
xbhajee uses cookies and similar client-side technologies to make the platform function correctly, keep your session secure, and understand how players interact with the site. This section explains the types of cookies we use and how you can manage them.
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session authentication, CSRF protection, login state, shopping basket / bet slip state. Without these cookies the platform cannot function. | No — these are essential |
| Functional | Remembering your preferred language setting, currency display, and notification preferences across sessions. | Yes — disabling limits personalisation |
| Analytics | Anonymised page-view counts, session duration, funnel analysis, and error tracking used to improve platform performance. No individual player is identifiable from this data. | Yes — opt out via cookie settings |
| Security | Fraud detection signals, device fingerprinting for account protection, and bot/scraper detection. These cookies protect both xbhajee and our players from malicious activity. | No — required for security |
4.1 Managing Your Cookie Preferences
You can manage non-essential cookies through your browser's settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are set. Please note that disabling strictly necessary or security cookies will impair your ability to log in and use the xbhajee platform. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.
4.2 Local Storage and Session Storage
In addition to cookies, xbhajee may use browser local storage and session storage to hold temporary state data such as your active bet slip, cached game lobby data, and UI preferences. This data is stored on your device only and is not transmitted to xbhajee servers independently of your normal browsing session. Local storage data persists until you clear your browser's site data; session storage data is cleared when you close your browser tab.
Data Retention and Storage
xbhajee retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, or to resolve disputes and enforce our agreements. The retention periods set out below apply unless a longer period is required by applicable law.
| Data Category | Retention Period |
|---|---|
| Account registration data (name, email, date of birth) | Duration of active account + 5 years after closure |
| KYC / identity verification documents | 5 years from date of verification or account closure, whichever is later |
| Transaction records (deposits, withdrawals, bets) | 7 years from the date of each transaction |
| Customer support communications | 3 years from the date the support ticket was closed |
| Technical / server log data (IP addresses, access logs) | 12 months on a rolling basis |
| Analytics data (anonymised) | 26 months on a rolling basis |
| Marketing consent records | Until consent is withdrawn + 3 years evidential retention |
| Self-exclusion records | Permanent — to prevent re-registration during exclusion period |
5.1 Data Storage Location
xbhajee stores player data on secure servers operated by reputable cloud infrastructure providers. All servers used to store personal data of Bangladesh-based players are located in jurisdictions that provide an adequate level of data protection. Data is encrypted both in transit (using TLS) and at rest (using AES-256 or equivalent).
5.2 Secure Deletion
When a data retention period expires or a valid erasure request is honoured (see Your Privacy Rights below), xbhajee applies secure deletion procedures to ensure that the data cannot be recovered from storage media. Backup copies are purged within 30 days of the scheduled deletion of the primary record.
Security Measures We Apply
Protecting your personal and financial data is one of xbhajee's highest operational priorities. We implement a layered set of technical and organisational security measures designed to prevent unauthorised access, accidental loss, alteration, or disclosure of your data.
- TLS/SSL Encryption in Transit: All communication between your browser or device and xbhajee.net is encrypted using TLS 1.2 or higher, preventing interception by third parties.
- Encryption at Rest: Sensitive data fields in our databases — including payment identifiers and KYC document references — are stored using AES-256 encryption.
- Access Control: Access to personal data within xbhajee's internal systems is restricted on a strict need-to-know basis. Staff with access to player data undergo regular security awareness training.
- Two-Factor Authentication: Administrative access to xbhajee's backend systems requires multi-factor authentication. Players are encouraged to use strong, unique passwords for their accounts.
- Intrusion Detection: xbhajee operates automated intrusion detection and anomaly monitoring systems that flag unusual access patterns, brute-force attempts, and suspicious account behaviour in real time.
- Regular Security Audits: The xbhajee platform undergoes periodic security assessments and vulnerability scanning by qualified security professionals.
- Payment Security: xbhajee does not store full payment card numbers. Card payments are processed via PCI-DSS compliant payment gateways; only a masked card reference is retained in our system.
- Data Breach Response: In the event of a confirmed personal data breach affecting player data, xbhajee will take immediate containment action and notify affected players without undue delay as required by applicable law.
While xbhajee applies robust security measures, no internet-based platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password, not sharing your login credentials with anyone, and contacting [email protected] immediately if you suspect unauthorised access to your account.
Your Privacy Rights
As a player on the xbhajee platform, you hold a set of meaningful rights over your personal data. xbhajee respects and facilitates these rights. To exercise any of the rights described below, contact us at [email protected] with the subject line "Privacy Rights Request" and we will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.
Right of Access
You may request a copy of all personal data xbhajee holds about you, along with information about how it is used and with whom it is shared.
Right to Rectification
If any personal data xbhajee holds about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
Right to Restrict Processing
You may ask xbhajee to temporarily restrict the processing of your data while a dispute about its accuracy or lawfulness is under review.
Right to Data Portability
Where processing is based on your consent or a contract, you may request that your data be provided to you in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, and to all direct marketing communications.
Right to Withdraw Consent
Where processing relies on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right Against Automated Decisions
Where a significant decision about your account is made solely by automated means, you have the right to request human review of that decision.
7.1 Minors and Age Verification
18+ Only: The xbhajee platform is strictly for adults aged 18 and above. xbhajee does not knowingly collect personal data from persons under 18. If we become aware that a player under 18 has registered an account, we will immediately close the account and securely delete all associated personal data. If you are a parent or guardian and believe that a minor may have accessed xbhajee, please contact us at [email protected] immediately.
7.2 Complaints
If you believe that xbhajee has handled your personal data in a manner that does not comply with applicable privacy law, you have the right to lodge a complaint. We encourage you to contact xbhajee first at [email protected] so that we have the opportunity to resolve your concern directly. We treat all privacy complaints seriously and will respond with a full investigation outcome within 30 calendar days.
Changes to This Privacy Policy
xbhajee reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or the features and services available on the platform. The "Last Updated" date at the top of this page will be revised whenever a meaningful change is made.
Where a material change is made to this Privacy Policy — for example, a new category of data being collected, a new type of third-party sharing, or a significant change in retention periods — xbhajee will provide advance notice on the platform homepage and, where appropriate, by email to registered players. Continued use of the xbhajee platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.
If you disagree with any change to this Privacy Policy, you may close your account by contacting [email protected] at any time. Account closure does not affect xbhajee's right to retain data for as long as required by our legal retention obligations as described in Section 5.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data , please contact the xbhajee support team at [email protected]. Our support team is available 24/7 and will be happy to assist you in plain English.
The current version of this Privacy Policy is version 1.0, effective 1 January 2026. All previous versions of the xbhajee Privacy Policy are superseded by this document. If you require a copy of a previous version for reference purposes, please contact [email protected] and we will do our best to assist.
Your Privacy Is Safe at xbhajee
Now that you understand how xbhajee protects your personal data, you can enjoy Bangladesh's favourite online casino and sports betting platform with complete confidence. Explore our games, check out the latest cricket markets, or log in to your account today.