xbajff Privacy Policy

This Privacy Policy ("Policy") describes how xbajff ("we", "us", or "our") collects, uses, stores, shares, and protects personal information submitted by users ("you") of the xbajff website and associated services (the "Platform"). The Platform is operated for users located in Bangladesh and other permitted South Asian jurisdictions.

By registering an account on xbajff, making a deposit, placing a bet, or otherwise using the Platform in any way, you acknowledge that you have read and understood this Policy and you consent to the data practices described herein. If you do not agree to this Policy, you must not use the xbajff Platform.

This Policy is incorporated by reference into the xbajff Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions on matters relating to data privacy, this Policy shall prevail. We reserve the right to update this Policy at any time; the date of the most recent revision is shown in the badge above. Continued use of the Platform after changes are posted constitutes acceptance of the revised Policy.

xbajff collects personal information through several channels. The categories of data we collect include, but are not limited to, the following:

• Registration data: Full name, date of birth, country of residence, email address, and mobile phone number provided when you create a xbajff account.
• Identity verification documents: Government-issued photo identification (such as a National ID card or passport) and proof-of-address documents submitted during our Know Your Customer (KYC) process.
• Financial data: Your bKash, Nagad, Rocket, or Upay mobile wallet number; transaction history including deposit amounts, withdrawal requests, and bonus credits. We do not store full payment credentials — only the identifiers required to process transactions.
• Gameplay data: Bets placed, games played, win and loss records, session duration, and wagering history across all xbajff products including sports betting, live casino, slots, and card games.
• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and unique device identifiers collected automatically when you access the Platform.
• Communications data: Records of any messages exchanged with our customer support team, including email threads, live chat transcripts, and support ticket content.
• Preferences and behavioural data: Cookies, session tokens, and tracking data used to remember your preferences, maintain your login session, and personalise your experience on the Platform.

xbajff uses the personal information we collect for the following purposes:

• Account management: To create, maintain, and administer your xbajff account, including processing deposits and withdrawals via bKash, Nagad, Rocket, and other approved payment channels.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and to comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Service delivery: To provide sports betting, live casino, slot games, card games, and all other xbajff products and features to you as a registered user.
• Responsible gaming: To monitor gambling patterns, enforce deposit and loss limits, action self-exclusion requests, and flag accounts that may display signs of problem gambling in accordance with our Responsible Gaming Policy.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other unlawful activity on the Platform.
• Personalisation: To tailor game recommendations, promotional offers, and content to your preferences and betting history, where you have not opted out of personalised communications.
• Legal compliance: To meet our obligations under applicable law and to respond to lawful requests from regulatory bodies or law enforcement authorities.
• Platform improvement: To analyse aggregated usage data, diagnose technical problems, and develop new features and products.

xbajff will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or as otherwise required by law.

xbajff does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your information with the following categories of trusted partners strictly to operate the Platform and fulfil our legal obligations:

• Payment processors: Mobile financial service providers such as bKash, Nagad, Rocket, and Upay receive only the minimum data required to execute your deposit or withdrawal transaction.
• Game content providers: Game studios and platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for technical integration purposes. They do not receive your full identity profile.
• Technology and infrastructure partners: Cloud hosting, cybersecurity, and technical support vendors who process data on our behalf under strict data processing agreements that prohibit them from using your data for any independent purpose.
• Regulatory and law enforcement authorities: Where we are legally required to disclose information — for example, in response to a court order, subpoena, or formal request from a competent authority — we will comply while taking reasonable steps to inform you where permitted by law.
• Responsible gaming organisations: In serious cases of identified problem gambling, we may share limited information with recognised support organisations solely to facilitate access to help services.

Any third party receiving your data is required to handle it in accordance with applicable privacy law and is not permitted to use it for purposes beyond those explicitly agreed with xbajff.

xbajff retains your personal data for as long as your account remains active and for a reasonable period thereafter as required by law or legitimate business need. Specifically:

• Account and identity data is retained for a minimum of five years following account closure to meet anti-money laundering record-keeping requirements.
• Transaction records are retained for the period required by applicable financial regulations, which is typically five to seven years.
• Customer support communications are retained for three years following the resolution of the relevant query or dispute.
• Cookies and session data expire according to the individual cookie's lifetime, which ranges from session-only (deleted when you close your browser) to a maximum of twelve months for preference cookies.

When data is no longer required for any legitimate purpose, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

Cookies are small text files placed on your device when you visit the xbajff Platform. They help us recognise you between visits, maintain your login session, and understand how you use the Platform so we can keep improving it. xbajff uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. You cannot opt out of these without losing access to the Platform.
• Preference cookies: Store your display and language preferences so you do not have to reconfigure them on each visit. These persist for up to twelve months.
• Analytics cookies: Collect anonymised data about how users navigate the Platform to help us improve content layout, page load performance, and feature discoverability. No personally identifiable information is included in analytics reports.

You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use key Platform features. We do not use third-party advertising cookies or cross-site tracking technologies.

xbajff takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data in transit between your device and our servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls that restrict which xbajff staff members can view sensitive personal or financial data.
• Regular security assessments and penetration testing of Platform infrastructure.
• Automated monitoring systems that detect and alert on unusual access patterns or potential data breaches in real time.

While we take every reasonable precaution, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, xbajff will notify affected users in a timely manner and take all appropriate remediation steps.

You also play an important role in keeping your account secure. Never share your xbajff password with anyone, use a strong and unique password, and contact our support team immediately if you suspect unauthorised activity on your account.

The xbajff Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a minor has provided us with personal data, we will delete that data immediately and close the associated account. If you believe a minor has registered on xbajff, please contact our support team at once. xbajff uses age verification checks during registration and may request documentary proof of age at any time.

xbajff may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will make reasonable efforts to notify registered users via their registered email address or by displaying a prominent notice on the Platform. The revised Policy will be effective from the date shown in the "Last Updated" badge at the top of this page. We encourage you to review this Policy periodically to stay informed about how xbajff protects your information.