xbje Privacy Policy
This Privacy Policy explains how xbje collects, processes, stores, and protects the personal data of players registered on Bangladesh's trusted online casino and sports betting platform. Your privacy is a core operational responsibility, not an afterthought.
Important Notice: By registering an account or using the xbje platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the xbje platform. For questions or requests regarding your personal data, contact us at [email protected].
SSL Encryption
All data transmitted between your device and the xbje platform is protected by SSL encryption, the same security standard used by major financial institutions operating in Bangladesh.
No Third-Party Advertising Sales
xbje does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely to operate and improve the platform and fulfil legal obligations.
Access and Correction Rights
You have the right to request access to the personal data xbje holds about you, and to request correction of any inaccurate information. Submit requests to [email protected].
Transparent Cookie Use
xbje uses cookies strictly for session management, security, analytics, and platform performance. This Policy provides full disclosure of all cookie categories in use on the platform.
Secure Data Storage
Personal and financial data held by xbje is stored on secured servers with access controls, audit logging, and encryption at rest. Access is restricted to authorised personnel only.
Defined Retention Periods
xbje retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Data no longer needed is securely deleted or anonymised.
Information We Collect
xbje collects personal data from you through several channels: directly via account registration and platform use, automatically through your device and browser when you interact with the platform, and from third-party service providers who assist in delivering the platform's services. The categories of personal data we collect are described below.
Registration and Identity Data
When you register an account on xbje, we collect your full legal name, date of birth, email address, and mobile phone number. This information is required to create and maintain your account, verify your identity and age, and comply with applicable legal obligations. Providing false, incomplete, or misleading registration data constitutes a breach of xbje's Terms & Conditions.
Financial and Payment Data
To process deposits and withdrawals, xbje collects details related to your chosen payment method. For mobile financial services such as bKash, Nagad, Rocket, and Upay, this includes the mobile number associated with your account and transaction reference identifiers. xbje does not store full payment credentials directly; payment transactions are processed through the respective service providers' secure systems. Transaction histories, deposit amounts in Bangladeshi Taka (BDT), and withdrawal records are retained as part of your account data.
Identity Verification Documents
Where required for age or identity verification, xbje may collect copies of government-issued identity documents including your National Identity Card (NID), passport, or driving licence. These documents are used exclusively for verification purposes and are handled with enhanced security controls. Verification documents are not shared with third parties except as required by law.
Usage and Behavioural Data
xbje automatically collects data about how you interact with the platform, including the pages and games you access, betting and wagering history, session durations, login timestamps, device type, operating system, browser type, IP address, and approximate geographic location derived from IP data. This data is used to operate the platform, prevent fraud, conduct responsible gaming monitoring, and improve user experience.
Communications Data
If you contact xbje's support team via email or any other supported channel, we retain records of that correspondence including the content of your messages, any attachments, and your contact details. This enables us to handle your enquiry effectively and maintain a record of support interactions for quality assurance purposes.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Account registration, verification request |
| Contact Data | Email address, mobile number | Account registration, support contact |
| Financial Data | bKash/Nagad number, transaction IDs, deposit/withdrawal history | Cashier transactions |
| Technical Data | IP address, device type, browser, OS | Automatic collection on platform access |
| Usage Data | Pages visited, games played, session time, bet history | Automatic collection during platform use |
| Communications Data | Support emails, chat transcripts | Direct contact with support team |
How We Use Your Data
xbje processes your personal data for specific, lawful purposes. We do not use your data for purposes incompatible with those described in this Policy without first seeking your consent or establishing another lawful basis for processing. The primary purposes for which xbje processes personal data are as follows:
- Account creation and management: To register your xbje account, verify your identity and age, and maintain your account in good standing throughout your use of the platform.
- Service delivery: To provide access to betting markets, live casino games, slots, virtual sports, keno, and all other features of the xbje platform as described in the Terms & Conditions.
- Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records in your account.
- Fraud prevention and security: To detect and investigate suspicious activity, unauthorised account access, financial fraud, collusion, and other conduct prohibited under xbje's Terms & Conditions.
- Responsible gaming compliance: To monitor player behaviour for indicators of problem gambling and to administer responsible gaming tools including deposit limits, time-out periods, and self-exclusion requests in accordance with xbje's Responsible Gaming Policy.
- Legal and regulatory compliance: To fulfil xbje's obligations under applicable law, including anti-money laundering (AML) and know-your-customer (KYC) requirements, and to respond to lawful requests from competent authorities.
- Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions.
- Platform improvement: To analyse aggregated usage data, identify technical issues, and improve the performance, features, and user experience of the xbje platform.
- Marketing communications: To send you information about promotions, bonuses, and platform updates relevant to your interests, where you have not opted out of such communications. You may opt out of marketing emails at any time by contacting [email protected].
xbje does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated tools are used for fraud detection or responsible gaming monitoring, flagged cases are reviewed by a member of xbje's compliance team before any account action is taken.
Data Sharing and Disclosure
xbje does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, xbje shares personal data with carefully selected categories of third parties where necessary to operate the platform, comply with legal obligations, or protect the security of the platform and its users. All third parties who receive personal data from xbje are required to handle that data securely and in accordance with applicable data protection requirements.
Payment Service Providers
To process your deposits and withdrawals, xbje shares necessary transaction data with the relevant mobile financial service provider — such as bKash, Nagad, Rocket, or Upay — and with any intermediary payment processing partners involved in the transaction. The data shared is limited to what is strictly necessary to complete the transaction and generate a verifiable transaction record.
Game Content Providers
xbje's gaming content is provided by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you access a game provided by one of these studios, session data and game interaction data may be shared with the relevant provider to the extent necessary to deliver and certify the game experience. Game providers operate under their own data security certifications and do not receive personally identifiable information beyond what is required for game session management.
Identity Verification Services
For age and identity verification purposes, xbje may use third-party verification services that process identity document data on our behalf. These services operate under strict contractual data processing obligations and are prohibited from retaining or using verification data for any purpose other than the verification request made by xbje.
Legal and Regulatory Disclosure
xbje may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other competent authorities where required to do so by applicable law or pursuant to a lawful order. xbje will, where legally permissible, notify you of any such disclosure request before complying. Where such notification is prohibited, xbje will fulfil its legal obligations without prior notice.
No Commercial Sale of Data: xbje strictly prohibits the sale, licensing, or commercial transfer of player personal data to advertisers, data brokers, or any third party for commercial purposes. Your data is used solely to operate the xbje platform and fulfil our legal obligations.
Cookies and Tracking Technologies
xbje uses cookies and similar tracking technologies on its platform to support essential platform functionality, maintain session security, analyse platform performance, and deliver a consistent user experience. A cookie is a small text file stored on your device by your browser when you visit the xbje platform. Cookies do not contain executable code and cannot access files or data on your device beyond what the xbje platform itself has stored.
Categories of Cookies Used by xbje
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session authentication, CSRF protection, account security, login state management | No — required for platform function |
| Functional | Remembering user preferences such as language settings and display options | Yes — disabling may affect experience |
| Analytics | Aggregated usage statistics, page performance monitoring, error tracking. Data is anonymised before analysis. | Yes — opt out via browser settings |
| Security and Fraud Detection | Device fingerprinting for fraud prevention, bot detection, and account security monitoring | No — required for platform integrity |
Managing Cookies
You may control or delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling strictly necessary or security cookies may prevent you from logging into your xbje account or accessing core platform features. Disabling analytics or functional cookies will not prevent you from using the platform but may affect personalisation features.
xbje does not use cookies to serve third-party advertising, and no advertising network cookies are set by the xbje platform. The cookies in use on xbje are first-party operational and analytics cookies only.
Data Security Measures
xbje implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. These measures are reviewed and updated on a regular basis in line with industry best practices for online gaming platforms operating in the Bangladesh market.
Technical Security Controls
- SSL/TLS Encryption: All data in transit between your device and xbje's servers is encrypted using industry-standard SSL/TLS protocols, the same technology used by major financial institutions.
- Encryption at Rest: Sensitive personal and financial data stored in xbje's databases is encrypted at rest using strong encryption standards, ensuring data remains protected even in the event of a physical storage compromise.
- Access Controls: Access to personal data held by xbje is restricted on a strictly need-to-know basis. Staff members are granted access only to the data necessary to perform their specific duties, and all access events are logged and subject to audit.
- Firewall and Intrusion Detection: xbje's infrastructure is protected by enterprise-grade firewall systems and intrusion detection mechanisms that continuously monitor for unusual or unauthorised network activity.
- Secure Password Storage: Account passwords are stored using cryptographic hashing with salting. xbje staff cannot view or retrieve your password in plaintext under any circumstances.
Organisational Security Measures
All xbje staff and contractors who handle personal data are subject to confidentiality obligations and receive training on data protection responsibilities. Third-party service providers who process data on xbje's behalf are assessed for security compliance before engagement and are bound by contractual data processing agreements that require them to maintain appropriate security standards.
Reporting a Security Concern
If you believe your xbje account has been compromised, or if you discover a potential security vulnerability on the platform, please contact us immediately at [email protected]. xbje takes all security reports seriously and will investigate promptly. Do not attempt to exploit any discovered vulnerability — responsible disclosure enables us to protect all players on the platform.
Data Retention
xbje retains personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, or contractual obligations. The specific retention periods applied to each category of personal data are summarised below.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years after closure | Legal compliance, AML/KYC obligations, dispute resolution |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping and regulatory compliance |
| Identity Verification Documents | 5 years from verification date or account closure | KYC compliance and anti-fraud obligations |
| Betting and Gaming History | 5 years from the date of each wager | Dispute resolution, responsible gaming monitoring, compliance |
| Support Communications | 3 years from last interaction | Quality assurance, dispute resolution |
| Technical and Usage Data | 13 months on a rolling basis | Platform analytics, fraud detection, security monitoring |
Upon expiry of the applicable retention period, personal data is either securely deleted from xbje's systems or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical analysis and platform improvement purposes. Data that is subject to an ongoing legal dispute, regulatory investigation, or law enforcement hold will be retained until that matter is fully resolved, regardless of the standard retention period.
Your Privacy Rights
As a player on the xbje platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your xbje account. xbje will acknowledge your request within five (5) Bangladesh Standard Time (BST, UTC+6) business days and aim to resolve it within thirty (30) calendar days.
- Right of Access: You have the right to request a copy of the personal data xbje holds about you, along with information about how that data is being used and with whom it has been shared.
- Right to Rectification: If you believe that personal data xbje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your xbje account settings.
- Right to Erasure: In certain circumstances, you may request that xbje delete your personal data. This right is subject to limitations where xbje is required to retain data to fulfil legal obligations, resolve disputes, or comply with regulatory requirements. Erasure requests that conflict with these obligations will be partially fulfilled to the extent that they do not breach applicable law.
- Right to Restriction of Processing: In certain circumstances, you may request that xbje restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
- Right to Object to Marketing: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, xbje will cease marketing communications to you promptly.
- Right to Data Portability: Where technically feasible and where xbje processes your data on the basis of your consent or the performance of a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
Identity Verification for Rights Requests: To protect your privacy and prevent unauthorised access to your data, xbje may require you to verify your identity before processing any data rights request. This is a security measure, not an obstacle — it ensures that only you can access or amend your own personal data.
Policy Updates and Contact
xbje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we provide. When material changes are made to this Policy, we will notify registered players by posting a notice on the xbje platform and, where appropriate, by sending a notification to the email address associated with your account. The updated Privacy Policy will take effect from the date it is published on the platform.
We encourage you to review this Privacy Policy periodically to stay informed about how xbje handles your personal data. The effective date at the top of this document indicates when the current version was last reviewed and published.
Contact for Privacy Matters
All privacy-related enquiries, data rights requests, and concerns regarding xbje's data handling practices should be directed to the xbje support team. We are committed to handling all privacy matters with care, confidentiality, and in full compliance with our obligations.
Contact: [email protected]
Platform: xbje.net
Response target: 5 BST business days for acknowledgement; 30 calendar days for resolution.
For matters related to responsible gaming, self-exclusion, or account restrictions, please visit the xbje Responsible Gaming page or contact support directly. For a full understanding of your rights and obligations as a player, please also review the Terms & Conditions.
Questions About Your Data on xbje?
Our support team is ready to assist with any privacy enquiry. Explore the platform, review our FAQ, or head to Responsible Gaming to manage your account settings.