Privacy Policy — How xabj Collects, Uses, and Protects Your Data

1. Who We Are

xabj is an online casino and sports betting platform operating at https://xabj.io, serving players primarily in Bangladesh. Throughout this Privacy Policy, "xabj", "we", "us", and "our" refer to the operators of the xabj platform. "You" and "your" refer to any individual who accesses, registers on, or otherwise interacts with the xabj platform.

xabj acts as the data controller with respect to the personal information it collects from players. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to handle your data in accordance with our instructions and applicable data protection standards.

For all privacy-related enquiries or to exercise your data rights, you may contact us at: [email protected]

2. Personal Data We Collect

Depending on how you use the xabj platform, we may collect and process the following categories of personal data:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, district, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT)

2.2 KYC Verification Documents

• National Identity Card (NID) number and scanned copy
• Passport (where provided as an alternative identity document)
• Proof of address documents (utility bill, bank statement)
• Selfie photograph for liveness verification
• Source of funds documentation (where requested during enhanced due diligence)

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (bKash account number, Nagad number, Rocket number, Upay number, bank account details, card number last four digits)
• Transaction amounts in BDT
• Transaction timestamps and reference numbers

2.4 Gaming & Betting Activity Data

• Game session records (games played, bet amounts, results, timestamps)
• Sports betting records (markets selected, odds, stakes, outcomes)
• Bonus and promotion activity
• Account balance history
• Responsible gaming tool usage (deposit limit settings, self-exclusion requests)

2.5 Technical & Device Data

• IP address at the time of login and registration
• Device type, operating system, and browser version
• Mobile device identifiers (where applicable)
• Session duration and navigation data within the platform
• Cookie identifiers and similar tracking technologies

2.6 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Survey and feedback responses
• Marketing preference settings and email/SMS communication history

3. How We Collect Your Data

xabj collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically: When you browse or use the xabj platform, we automatically collect technical and device data through cookies, server logs, and similar tracking technologies.
• From third parties: We may receive data from identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and affiliated banking partners), and fraud prevention services where this is necessary to verify your identity or process your transactions.

4. How We Use Your Personal Data

xabj uses the personal data we collect for the following purposes:

Purpose	Description
Account management	Creating, maintaining, and securing your xabj account, including processing login requests and account updates.
Identity verification (KYC)	Verifying your identity and age (21+) in compliance with anti-money-laundering obligations and to prevent underage gambling.
Payment processing	Processing deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard).
Platform operation	Delivering casino games, sports betting markets, fishing games, slot games, and all other xabj platform features.
Fraud prevention & security	Detecting and preventing fraudulent activity, bonus abuse, money laundering, and unauthorised account access.
Responsible gaming	Monitoring gambling patterns to identify potential problem gambling behaviour and administering self-exclusion or deposit limit requests.
Customer support	Responding to your enquiries, resolving disputes, and maintaining records of support interactions.
Marketing & promotions	Sending you relevant promotional offers, bonus notifications, and platform updates where you have consented to receive marketing communications.
Legal compliance	Fulfilling obligations under applicable laws, including financial crime prevention regulations, and responding to lawful requests from authorities.
Platform improvement	Analysing aggregated usage data to improve the performance, content, and user experience of the xabj platform.

5. Legal Basis for Processing

xabj processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and xabj — including account registration, KYC verification, payment processing, and game delivery.
• Legal obligation: Processing required to comply with anti-money-laundering laws, financial regulations, and other applicable legal obligations.
• Legitimate interests: Processing undertaken for xabj's legitimate business interests, including fraud prevention, platform security, and platform improvement — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given consent, specifically for marketing communications. You may withdraw your consent at any time by adjusting your communication preferences in your account settings or by contacting support.

6. Sharing Your Personal Data

xabj does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

6.1 Service Providers

We share data with trusted third-party providers who assist in operating the xabj platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their associated banking partners), identity verification and KYC service providers, fraud detection and anti-money-laundering screening services, cloud hosting and infrastructure providers, and customer support software providers. All such providers are contractually bound to process your data only as instructed by xabj and to apply appropriate security measures.

6.2 Game Content Providers

Certain technical data (such as session tokens and game round identifiers) may be shared with third-party game studios — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — solely to deliver game content to you. These providers do not receive your identity documents or payment method details.

6.3 Legal & Regulatory Authorities

xabj may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or government request. We will only disclose the minimum amount of data necessary to satisfy any such requirement.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of xabj's business assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, xabj will ensure that the acquiring entity is bound by privacy obligations at least as protective as those described in this Privacy Policy.

7. International Data Transfers

Some of xabj's service providers may process personal data outside Bangladesh. Where such transfers occur, xabj takes steps to ensure that adequate data protection safeguards are in place, including contractual clauses that require the recipient to protect the data to a standard equivalent to the protections described in this Privacy Policy.

By registering an account with xabj, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh for the purposes described in this Privacy Policy.

8. Data Retention

xabj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and KYC documents: Retained for a minimum of 5 years following account closure, in compliance with anti-money-laundering and financial crime prevention requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support records: Retained for 3 years following resolution of the relevant support interaction.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it is deleted or anonymised within 30 days.
• Technical and device data: Retained for up to 13 months from the date of collection, unless a longer retention period is required for fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9. Cookies & Tracking Technologies

xabj uses cookies and similar technologies (including web beacons, pixel tags, and local storage) on the xabj platform. Cookies are small text files placed on your device that help the platform function correctly and enable us to understand how you use our services.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and display preferences) to improve your experience on return visits.
• Analytics cookies: Help us understand how players navigate the xabj platform, which games are most popular, and where technical issues may occur. Data collected by analytics cookies is aggregated and anonymised.
• Marketing cookies: Used to deliver promotional content and personalised offers that are relevant to your activity on xabj. These are only set with your consent.

9.2 Managing Cookies

You may manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the xabj platform from functioning correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

10. Your Data Rights

As an individual whose personal data is processed by xabj, you have the following rights:

• Right of access: You may request a copy of the personal data xabj holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to xabj's legal retention obligations.
• Right to restriction of processing: You may request that xabj restricts the processing of your data in certain circumstances, such as while a dispute over data accuracy is being resolved.
• Right to data portability: You may request that xabj provides your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object to xabj's processing of your personal data where that processing is based on legitimate interests. You may also object at any time to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact the xabj support team. We will respond to all data rights requests within 30 days of receipt. In some cases — for example, where your request is particularly complex or you have submitted multiple requests — we may require an additional period to respond. We will notify you if this is the case.

11. Children and Minors

The xabj platform is strictly for adults aged 21 and above. xabj does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data to xabj, we will immediately suspend that account, delete the associated personal data, and return any deposited funds in accordance with our standard procedures.

If you believe that a minor has registered an account on xabj, please contact our support team immediately at [email protected] so that we can take prompt action.

12. Security Measures

xabj implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the xabj platform
• Encrypted storage of sensitive data including passwords (hashed with bcrypt), KYC documents, and payment method details
• Strict internal access controls — personal data is accessible only to xabj personnel who have a legitimate need to process it
• Regular security audits and penetration testing of the xabj platform infrastructure
• Multi-factor authentication requirements for internal system access by xabj staff
• Automated monitoring systems for suspicious login activity and account access anomalies

While xabj takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security against all potential threats. We encourage you to use a strong, unique password for your xabj account and to contact our support team immediately if you suspect any unauthorised access to your account.

13. Third-Party Links

The xabj platform may contain references to third-party services, such as payment providers (bKash, Nagad, Rocket, Upay). When you interact with a third-party service, you leave the xabj platform environment and the relevant third party's own privacy policy applies to any data you provide to them. xabj is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before providing any personal information.

14. Amendments to This Privacy Policy

xabj reserves the right to update or amend this Privacy Policy at any time. The effective date at the top of this document will be updated to reflect any revision. Where changes are material — for example, where we change the types of data we collect, introduce new processing purposes, or alter our data sharing practices — we will notify registered players by email and/or by displaying a prominent notice on the xabj platform.

Your continued use of the xabj platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revision, you should cease using the platform and may request account closure by contacting our support team.

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how xabj has handled your personal data, please contact our support team:

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6) and aims to respond to all privacy-related enquiries within 24 hours.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection or consumer protection authority in your jurisdiction.

For information about your rights as a player beyond data privacy — including responsible gaming tools, deposit limits, and self-exclusion — please visit our Responsible Gaming page. For general questions about your account and the xabj platform, visit our FAQ page.