xbja's Privacy Policy
This policy clearly outlines how your personal information is collected, used, and protected.
Welcome to the xbja platform. This Privacy Policy ("Policy") is established by xbja ("we", "our") and describes how we collect, process, store, and protect the personal information of users of our platform. By using our website or services, you are considered to have accepted the terms of this Policy.
We believe that protecting user privacy is a fundamental responsibility. That is why xbja always informs you transparently — what information is being collected, why it is being collected, and how it is being used. If this Policy changes, we will notify you through a notice on the platform.
This policy has been recently updated. If you have any questions or concerns, please contact us at [email protected].
Types of Information Collected
When registering and using services on the xbja platform, we may collect the following types of personal information:
1.1 Identity Information
- Full name
- Date of birth (for age verification purposes — only users aged 21 or above may use the platform)
- National ID or passport number (for identity verification where applicable)
- Photo or scanned copy of ID document (during KYC verification)
1.2 Contact Information
- Email address
- Mobile number
1.3 Financial Information
- bKash, Nagad, Rocket, Upay or bank account numbers (for processing deposits and withdrawals)
- Transaction history and amounts
1.4 Technical Information
- IP address
- Browser and device type
- Cookie and session data
- Platform activity logs
1.5 Gaming Activity Information
- Betting history, win and loss records
- Preferred game types and session duration
- Bonus usage history
Methods of Data Collection
xbja collects information in the following ways:
2.1 Information Provided Directly
When you create an account, log in, make a deposit or withdrawal, contact the support team, or fill out any form — you voluntarily provide us with information.
2.2 Automatic Collection
Certain information about your device and browsing activity is collected automatically through our servers and tracking technologies. This information is used to improve the security and performance of the platform.
2.3 Information Received from Third Parties
In some cases, information may be received through third-party verification services for the purpose of identity verification or fraud prevention.
Purpose of Data Use
The information we collect is used for the following purposes:
- Creating, verifying, and managing accounts
- Processing deposit and withdrawal transactions (via bKash, Nagad, Rocket, Upay, or bank transfer)
- Providing bonuses, promotions, and VIP benefits
- Providing customer support and resolving complaints
- Preventing fraud, money laundering, and illegal activity
- Improving user experience and personalizing the platform
- Complying with legal and regulatory obligations
- Ensuring responsible gaming and intervening when necessary
- Sending important service-related notifications
xbja never sells your information to third parties or uses it for advertising purposes.
Data Sharing and Disclosure
We do not generally share your personal information with third parties. However, information may be disclosed in the following limited circumstances:
4.1 Service Provider Partners
Only the necessary information is shared with selected technology partners for payment processing, technical infrastructure, and KYC verification, and they operate under strict confidentiality agreements.
4.2 Legal Obligations
Information may be disclosed in response to a valid order or directive from a court, government authority, or law enforcement agency.
4.3 Fraud Prevention
Information may be shared with relevant authorities in the investigation of illegal activity, money laundering, or fraud.
4.4 Business Restructuring
In the event of a company merger, acquisition, or asset transfer, user information may be transferred to the new entity. We will notify users before such changes take place.
Data Protection and Security
xbja gives the highest priority to protecting your information. We implement the following security measures:
- SSL Encryption: All data transmissions on our platform are encrypted using SSL/TLS technology.
- Data Encryption: Stored sensitive information is kept secure using industry-standard encryption algorithms.
- Access Controls: Only authorized personnel may access user information when necessary.
- Firewall and Penetration Testing: Regular security audits and penetration testing are conducted.
- Two-Factor Authentication: An option is provided to add an extra layer of security to your account.
- Transaction Monitoring: Suspicious transactions are automatically flagged and investigated.
However, no data transmission over the internet can be guaranteed to be completely secure. We strive to ensure the highest level of protection, but users are also responsible for keeping their passwords and login credentials secure.
Cookies and Tracking Technologies
The xbja platform uses cookies and similar tracking technologies. These technologies are used for the following purposes:
6.1 Essential Cookies
These cookies are essential for the core functionality of the platform — such as maintaining login sessions, managing security tokens, and saving cart or preference data.
6.2 Functional Cookies
These cookies help remember your language preferences, layout settings, and personalized experience information.
6.3 Analytical Cookies
These cookies are used to analyze platform usage statistics and improve the experience. Collected data is kept anonymous.
You can disable cookies by changing your browser settings. However, disabling essential cookies may cause some features of the platform to not work properly.
Data Retention Period
xbja does not retain your information longer than necessary. The following factors are considered when determining how long information is kept:
- All information is retained for as long as the account remains active.
- Even after an account is closed or deleted, certain information may be retained for a defined period for legal, regulatory, or dispute resolution purposes.
- Financial transaction records may be retained for an extended period in accordance with legal obligations.
- Information from inactive accounts is automatically deleted after a set period, unless there is a legal requirement to retain it.
User Rights
As a user of the xbja platform, you have the following rights:
8.1 Right to Access Information
You may request a copy of the information we hold about you at any time.
8.2 Right to Correct Information
You have the right to request correction of any inaccurate or incomplete personal information.
8.3 Right to Delete Information
In certain circumstances, you may request the deletion of your personal information. However, it may not be possible to delete all information due to legal obligations.
8.4 Right to Object to Processing
You have the right to object to the processing of your information for specific reasons. In particular, you may opt out of marketing communications at any time.
8.5 Right to Data Portability
In some cases, you may request to receive your information in a structured, commonly used format.
To exercise these rights or to make any information-related request, contact us at [email protected].
Protection of Minors
The xbja platform is intended only for users aged 21 or above. We do not knowingly collect information from anyone under the age of 21. If we become aware, or are informed by a guardian, that a minor's information has been collected by mistake, that information will be deleted immediately and the associated account will be closed.
If guardians have any concerns, please contact us at [email protected].
International Data Transfers
In some circumstances, your information may be processed or stored on servers outside Bangladesh. In such cases, xbja ensures that the necessary data protection measures are maintained. Countries to which data may be transferred will have agreements or safeguards in place that are consistent with applicable data protection laws.
Third-Party Links and Services
The xbja platform uses third-party payment services (bKash, Nagad, Rocket, Upay, and bank transfer). These services have their own privacy policies, and data sharing with them is governed by the respective service provider's privacy policy. xbja is not responsible for their data protection practices, but works only with trusted and established payment partners.
Changes to the Policy
xbja reserves the right to update this Privacy Policy from time to time. If any significant changes are made, we will inform you by posting a notice on the platform or by sending a message to your registered email address.
Continued use of the platform after any changes will be considered acceptance of the updated policy. We therefore recommend reviewing this page on a regular basis.
Contact and Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy, please contact us:
Available 24/7 — support is available in both Bengali and English
We will confirm receipt of your request and endeavour to provide a resolution as soon as possible. xbja is committed to your privacy and always maintains the highest standards in protecting your information.