Privacy Policy — xbajkk

1 Information We Collect

When you register for an account, deposit funds, place bets, or otherwise interact with the xbajkk platform, we collect personal data in the following categories. All collection is conducted on a lawful basis, as described in Section 2 of this policy.

1.1 Registration and Identity Data

When you create a xbajkk account, we ask you to provide your full legal name, date of birth, email address, and a valid Bangladeshi mobile number. This information is required to establish your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

To process withdrawals or fulfil regulatory requirements, xbajkk may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, along with proof of address documents such as a utility bill or bank statement issued within the past three months.

1.3 Financial and Payment Data

We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (for example, bKash account numbers, Nagad numbers, bank account references), and transaction timestamps. Full payment credentials such as card numbers are processed directly by our payment partners and are not stored on xbajkk servers.

1.4 Gameplay and Betting Activity

We record your betting and gaming history, including wagers placed, games played, win/loss outcomes, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud prevention.

1.5 Technical and Device Data

When you access xbajkk, our systems automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, referring URLs, and pages visited within the platform. This data is used for security, fraud detection, and platform optimisation.

1.6 Communications Data

If you contact xbajkk support via email or any other channel, we retain records of that correspondence including your name, contact details, the content of your messages, and any attachments. This allows us to provide consistent, high-quality customer service and to maintain an accurate record of interactions.

2 How We Use Your Data

xbajkk uses the personal data we collect for the specific purposes listed below. For each purpose, we rely on one or more lawful bases: performance of a contract with you, compliance with a legal obligation, protection of legitimate interests, or your explicit consent where required.

Purpose	Data Used	Lawful Basis
Account creation and management	Registration data, identity documents	Contract performance
Identity verification (KYC)	Identity documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial and payment data	Contract performance
Fraud prevention and AML monitoring	Transaction data, device data, IP address	Legal obligation, legitimate interests
Responsible gaming monitoring	Gameplay history, session data	Legal obligation, legitimate interests
Customer support	Communications data, account data	Contract performance, legitimate interests
Platform analytics and improvement	Technical data, usage patterns	Legitimate interests
Promotional communications	Email address, mobile number	Consent (opt-in required)

xbajkk will not use your personal data for any purpose that is incompatible with the purposes listed above without first seeking your consent or establishing a separate lawful basis. We do not use personal data for automated decision-making that produces significant legal or similarly significant effects on you without providing a means to contest that decision.

3 Cookies & Tracking Technologies

xbajkk uses cookies and similar tracking technologies (including local storage objects and session tokens) to deliver, maintain, and improve our platform. A cookie is a small text file placed on your device when you visit xbajkk. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that store your language and region preferences. These cookies cannot be disabled without materially affecting platform functionality.
• Analytics cookies: We use anonymised analytics data to understand how players navigate xbajkk, which pages and games are most popular, and where technical issues arise. This data is aggregated and cannot be used to identify individual players.
• Fraud-prevention cookies: These cookies help xbajkk identify unusual or suspicious activity patterns, including multiple account creation attempts from the same device and patterns consistent with bot activity.
• Preference cookies: These store your platform settings such as display preferences, notification choices, and game interface options so that you do not need to reconfigure them each time you visit.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in or using key account features. For instructions on managing cookies in your specific browser, refer to your browser provider's help documentation.

4 Data Sharing & Disclosure

xbajkk does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment processors and mobile financial service providers: To process your deposits and withdrawals, xbajkk shares transaction data with payment partners including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. These partners are independently regulated and maintain their own privacy and security standards.
• Identity verification service providers: To fulfil our KYC obligations, xbajkk may share identity document data with specialist identity verification providers. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification.
• Game software providers: Certain game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for the purpose of fair-play auditing and technical support. No personally identifiable information is shared with game providers beyond what is strictly required.
• Fraud prevention and security partners: To protect the integrity of the platform and its players, xbajkk may share data with fraud detection services and cybersecurity providers who help identify and prevent unauthorised access, money laundering, and other illicit activity.
• Legal and regulatory authorities: xbajkk will disclose personal data to law enforcement agencies, regulators, or other government bodies where required to do so by applicable law, court order, or in response to a lawful request. We will notify affected players of such disclosures where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of xbajkk's business, personal data held by xbajkk may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.

All third parties with whom xbajkk shares personal data are required to implement appropriate technical and organisational security measures and to use that data solely for the purpose for which it was disclosed.

5 Data Security

xbajkk takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

• Transport encryption: All data transmitted between your device and xbajkk is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Data-at-rest encryption: Sensitive personal data stored in xbajkk databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff who handle personal data receive regular privacy and security training.
• Two-factor authentication (2FA): xbajkk supports 2FA for player accounts to provide an additional layer of protection against unauthorised login attempts.
• Penetration testing: xbajkk's systems undergo regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Incident response: xbajkk maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.

6 Data Retention

xbajkk retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account and for a period of five years following voluntary account closure, to support any legal claims or regulatory inquiries that may arise.
• Transaction records: Financial transaction records are retained for a minimum of seven years from the date of the transaction in accordance with anti-money laundering regulations and standard financial record-keeping requirements.
• Identity verification documents: KYC documents are retained for five years following the end of the business relationship or such longer period as required by applicable law.
• Customer support communications: Correspondence with the xbajkk support team is retained for three years from the date of the most recent interaction, to ensure continuity of service and to support dispute resolution.
• Gameplay and betting history: Wagering records are retained for five years to fulfil our responsible gaming obligations and to support any disputes or audits.
• Marketing consent records: Records of your marketing consent (opt-in/opt-out history) are retained for the duration of your account plus three years, to demonstrate compliance with consent requirements.

Once data is no longer required, it is securely deleted from xbajkk's systems or anonymised so that it can no longer be attributed to any individual. Anonymised data may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

7 Your Privacy Rights

As a player on the xbajkk platform, you hold a number of rights in relation to your personal data. xbajkk is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of the personal data xbajkk holds about you. We will provide this in a clear, readable format. Requests are processed free of charge unless they are manifestly unfounded or excessive.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain details directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that xbajkk delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that this right is subject to overriding legal obligations — for example, we cannot erase financial transaction records that we are legally required to retain.
• Right to restrict processing: In certain circumstances, you may request that xbajkk restrict the processing of your personal data — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: Where xbajkk processes your data on the basis of your consent or a contract with you, you may request that we provide your data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You have the right to object to xbajkk processing your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be able to demonstrate compelling grounds that override your objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

8 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how xbajkk handles your personal data, please contact our support team using the details below. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 30 days.

Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 30 days of receipt

If you are not satisfied with xbajkk's response to your complaint or privacy rights request, you may escalate the matter to the relevant data protection authority in your jurisdiction. xbajkk takes all privacy complaints seriously and will work with you in good faith to reach a resolution.

xbajkk reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via email or an on-platform notification at least 14 days before the changes take effect. The effective date at the top of this policy will be updated accordingly.

This Privacy Policy was last updated on 1 January 2026. For the most current version, visit xbajkk.net/privacy-policy.