Privacy Policy

Introduction

xbije ("we", "us", "our", or "the Platform") operates https://xbije.io, an English-language online betting and gaming platform serving players in Bangladesh. We are committed to respecting the privacy of every individual who interacts with our platform, and we take seriously our responsibility to handle personal data with care, transparency and integrity.

This Privacy Policy applies to all personal data collected through the xbije website, mobile browser interface, and any associated customer support communications. It sets out clearly what personal data we collect, the purposes for which we collect and process it, the legal bases we rely upon, how long we retain it, who we share it with, and the rights available to you as a data subject.

This Privacy Policy should be read alongside the xbije Terms & Conditions, which govern the overall contractual relationship between you and xbije. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall take precedence.

We encourage all xbije players — particularly those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi and other cities across Bangladesh — to read this policy in full before registering an account or using any xbije service.

Data Controller

For the purposes of this Privacy Policy, xbije is the data controller — the entity that determines the purposes and means by which your personal data is processed. xbije is responsible for ensuring that personal data collected through the platform is handled in accordance with the principles set out in this policy.

All data-related enquiries, access requests, correction requests and deletion requests should be directed to the xbije data team via the support email address: [email protected]. Please include "Privacy Request" in the subject line of your message to ensure prompt routing to the appropriate team.

xbije processes data primarily in connection with the operation of a betting and gaming platform for Bangladeshi players, using payment infrastructure that includes mobile financial services (bKash, Nagad, Rocket, Upay) and bank transfer channels (Dutch-Bangla Bank, City Bank, BRAC Bank). The processing of financial transaction data is integral to the operation of the platform and is performed under the lawful bases described in Section 5 of this policy.

Data We Collect

xbije collects the following categories of personal data in the course of operating the platform:

xbije does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or medical information. We do not request or store credit card or debit card numbers — all payment transactions are conducted via mobile financial service providers or bank transfer, not through card-based payment gateways.

How We Collect Data

xbije collects personal data through the following methods:

• Direct Provision: Data you provide directly when registering an account, completing identity verification, making a deposit or withdrawal, setting responsible gaming limits, or contacting xbije support.
• Automated Technical Collection: Data collected automatically when you access the xbije platform, including IP address, device identifiers, session timing data and browsing behaviour within the platform. This data is collected via server logs and first-party session cookies.
• Payment Provider Data: Transactional confirmation data received from mobile financial service providers (bKash, Nagad, Rocket, Upay) and bank partners when a deposit or withdrawal is processed. xbije receives only the data necessary to confirm the transaction — full mobile financial account credentials are not transmitted to xbije.
• Game Provider Data: Game session outcome and technical data passed from third-party game studios (including Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt and Spribe) via secure API connections, used to settle bets and maintain game history records.
• Identity Verification Partners: Where additional KYC verification is required, xbije may use a third-party identity verification service. The data shared with such a service is limited to the documents and information necessary to complete the verification.

xbije does not purchase personal data from data brokers, does not obtain personal data from social media platforms, and does not use third-party advertising networks that track your behaviour outside of the xbije platform.

Legal Basis for Processing

xbije processes personal data only where a lawful basis exists for doing so. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and xbije — specifically, to operate your account, accept and settle bets, process deposits and withdrawals, and provide customer support. Without this processing, xbije cannot fulfil its contractual obligations to you.
• Legal Obligation: Processing required to comply with applicable legal obligations, including identity verification (KYC), anti-money laundering (AML) checks, and the retention of transaction records for the period required by applicable law.
• Legitimate Interests: Processing carried out for xbije's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection and prevention, platform security monitoring, responsible gaming enforcement, and platform analytics to improve user experience.
• Consent: Where xbije relies on your consent as the lawful basis for processing (for example, for sending promotional communications), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.

How We Use Your Data

xbije uses the personal data it collects for the following specific purposes:

• Account Management: Creating and maintaining your xbije account, verifying your identity at registration, processing OTP authentication, and managing account settings including responsible gaming limits.
• Transaction Processing: Processing BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported banking channels; maintaining an accurate record of your transaction and balance history.
• Bet and Game Settlement: Recording, settling and auditing sports bets, live casino game rounds, slot sessions, bingo games and fishing game sessions. Maintaining a complete and accurate game history for each player.
• Identity Verification (KYC): Verifying that you meet the 21+ age requirement and that the payment account used for deposits is registered in your name, as required by responsible gaming and anti-fraud obligations.
• Fraud Prevention and Security: Detecting and investigating suspicious account activity, preventing money laundering, identifying bonus abuse, and protecting the platform from automated or bot-based access.
• Responsible Gaming: Monitoring gaming behaviour to identify patterns that may indicate problem gambling; enforcing deposit limits, loss limits and self-exclusion requests submitted by players; ensuring that the 21+ age restriction is observed.
• Customer Support: Responding to support requests, resolving account issues, processing complaints, and maintaining a record of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve the overall user experience for Bangladeshi players.
• Promotional Communications: Sending notifications about relevant promotions, bonus offers, cricket betting markets (BPL, IPL, T20 World Cup), and platform updates — only where you have consented to receive such communications or where xbije has a legitimate interest in doing so.

xbije does not use your personal data for automated profiling that produces legally significant effects on you without human review. Responsible gaming monitoring is conducted with human oversight, and any account action resulting from monitoring is reviewed by xbije's responsible gaming team before being implemented.

Data Sharing & Third Parties

xbije does not sell, rent or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank and BRAC Bank receive transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Identity Verification Partners: Where KYC verification is required, xbije may share identity documents and personal details with a third-party verification service solely to confirm your identity and age. The verification partner is contractually bound to use this data only for the stated verification purpose.
• Game Content Providers: Third-party game studios (Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, Spribe) receive a player session token and stake/return data via secure API in order to operate game rounds. Full personal identity data is not shared with game studios.
• IT and Infrastructure Providers: Hosting, server management and platform infrastructure providers who process data on xbije's behalf under strict data processing agreements that prohibit use of the data for any purpose other than providing the contracted service.
• Legal and Regulatory Authorities: Where xbije is required by applicable law or by a lawful request from a competent authority to disclose personal data, we will do so. xbije will, where permitted by law, notify the affected player of such a disclosure request.

All third-party service providers engaged by xbije who process personal data on our behalf are required to implement appropriate technical and organisational security measures and are prohibited from using your data for their own independent purposes.

Cookies & Similar Technologies

xbije uses cookies and similar session-tracking technologies to operate the platform effectively and to understand how players use the site. The following types of cookies are used:

xbije does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage cookie settings through your browser preferences. Please note that disabling essential session cookies will prevent you from logging in to your xbije account and using core platform features.

Data Retention

xbije retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory and audit obligations. The general retention periods applied by xbije are as follows:

• Account Data (identity and contact information): Retained for the duration of your active xbije account, plus a minimum of 5 years following account closure. This retention period supports compliance with anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Betting and Game History: Retained for a minimum of 3 years from the date of the bet or game session, to support dispute resolution and audit requirements.
• KYC and Verification Documents: Retained for a minimum of 5 years from the date of verification, as required to demonstrate compliance with age verification and identity confirmation obligations.
• Customer Support Records: Retained for 3 years from the date of the last support interaction, to support quality assurance and dispute resolution.
• Technical and Log Data: Typically retained for 12 months in an identifiable form, then aggregated or anonymised for longer-term analytics purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where you request early deletion of your data, xbije will action this request subject to any overriding legal retention obligations — for example, financial transaction records that are required to be retained by law cannot be deleted early on request.

Your Rights

As an xbije player whose personal data is processed by xbije, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact xbije at [email protected] with the subject line "Privacy Request — [Right Type]".

• Right of Access: You have the right to request a copy of the personal data xbije holds about you, together with information about how it is processed. xbije will respond to access requests within a reasonable period, typically within 30 days of receipt.
• Right to Rectification: If any personal data xbije holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details (such as your registered mobile number) directly from within your xbije account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been unlawfully processed. Erasure requests are subject to legal retention obligations as described in Section 9.
• Right to Restriction: You have the right to request that xbije restricts the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of xbije's legitimate interests. xbije will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
• Right to Withdraw Consent: Where xbije relies on your consent as the lawful basis for processing (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Data Security

xbije implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the xbije servers is encrypted using industry-standard SSL/TLS protocols. The padlock symbol in your browser confirms that your connection to xbije is encrypted.
• Access Controls: Access to personal data within xbije's systems is restricted on a need-to-know basis. Staff and contractors who access personal data are subject to confidentiality obligations and receive data protection training appropriate to their role.
• OTP Authentication: Account login and sensitive account changes (including withdrawal requests) require one-time password (OTP) verification to the mobile number registered on your account, providing an additional layer of identity confirmation.
• Fraud Monitoring: xbije operates continuous automated monitoring systems to detect unusual account activity, potential account takeover attempts, and suspicious transaction patterns. Alerts are reviewed by xbije's security team.
• Regular Security Reviews: xbije conducts periodic reviews of its security practices and platform infrastructure to identify and address vulnerabilities. Findings are actioned promptly in accordance with xbije's internal security protocols.

While xbije takes data security seriously and employs the measures described above, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your xbije login credentials and for ensuring that your device is protected against malware and other security threats. If you suspect that your account has been compromised, contact xbije support immediately at [email protected].

Children & Underage Players

xbije is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. xbije's registration process includes age verification steps, and identity verification (KYC) may be requested at any stage to confirm that a player meets the 21+ age requirement.

If xbije discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the associated account will be immediately suspended, all funds held in the account will be reviewed, and the personal data of the underage individual will be securely deleted as quickly as practicable, subject to any legal retention obligations relating to the account activity.

Third-Party Links

The xbije platform may, from time to time, display references to third-party services — for example, game studios whose titles are available on the platform (Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, Spribe) or payment providers (bKash, Nagad, Rocket, Upay). xbije does not control the privacy practices of these third parties and is not responsible for the content or privacy policies of any external services.

This Privacy Policy applies solely to data collected by xbije through the xbije platform. When you interact with third-party payment providers (for example, completing a bKash deposit via the bKash interface), the collection and use of your data by that provider is governed by its own privacy policy. xbije encourages you to review the privacy policies of any third-party service you use in connection with xbije transactions.

Changes to This Privacy Policy

xbije reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When material changes are made, the effective date shown at the top of this page will be updated accordingly.

Where changes are significant, xbije may notify registered players via the mobile number or email address held on their account. However, xbije is not obligated to provide advance individual notice of all policy updates. It is your responsibility to review this Privacy Policy periodically to stay informed of how your data is being handled.

Your continued use of the xbije platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, your options are to exercise your data rights as described in Section 10 or to close your account by contacting [email protected].

Contact

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how xbije has handled your personal data, please contact the xbije data team. Support is available in English, 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).

Email (plain text, not clickable): [email protected]

Please include "Privacy Request" in the subject line of your message, along with your registered mobile number and a clear description of your query or request. xbije aims to respond to all privacy-related enquiries within 30 days of receipt.

For questions about responsible gaming, deposit limits or self-exclusion, please visit the Responsible Gaming page. For general platform questions, visit the FAQ page.