x bajji Privacy Policy

Data We Collect

x bajji collects personal data in three primary ways: information you provide directly during registration and account management, information generated automatically by your use of the platform, and information received from trusted third-party verification and payment service providers. The categories of data we collect are described in the table below.

x bajji does not knowingly collect personal data from individuals under 18 years of age. If we become aware that a registered account belongs to a player under 18, the account will be closed immediately and all associated data will be deleted or anonymised, subject to any overriding legal obligation to retain certain records.

How We Use Your Data

x bajji processes your personal data only where a lawful basis exists for doing so. The primary lawful bases on which x bajji relies are: performance of the contract between you and x bajji (operating your account and delivering the service), compliance with legal obligations (KYC, anti-money-laundering, age verification), legitimate interests of x bajji (fraud prevention, platform security, product improvement), and your explicit consent (marketing communications).

The specific purposes for which x bajji uses your personal data are as follows:

• Account Registration and Management: To create, maintain, and administer your player account, verify your identity and age, and communicate important account-related notices.
• Payment Processing: To process deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to execute withdrawal requests in BDT. Financial transaction data is shared with the relevant payment processor solely to complete the transaction.
• Regulatory Compliance: To fulfil KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations, including verification of identity documents and source-of-funds assessments where applicable.
• Responsible Gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, to enforce player-requested deposit and loss limits, and to implement self-exclusion requests. This processing is in the legitimate interests of player welfare.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and any other activity that poses a risk to the platform or other players.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve game selection, user interface design, payment flows, and overall platform performance.
• Marketing Communications: To send you promotional offers, bonus announcements, and seasonal promotions (such as BPL season offers, Eid promotions, and Pohela Boishakh specials) where you have given your consent to receive such communications. You may withdraw consent at any time.
• Legal Claims: To establish, exercise, or defend legal claims in the event of a dispute between you and x bajji.

x bajji does not use your personal data for automated decision-making that produces significant legal effects, except where such processing is required to fulfil a legal obligation (for example, automated screening against sanctions lists).

Data Sharing & Third Parties

x bajji does not sell your personal data. We share personal data with third parties only where necessary and only in the categories described below. All third-party recipients are contractually required to process your data securely and only for the purposes specified by x bajji.

Payment Service Providers: When you make a deposit or withdrawal, x bajji shares the minimum necessary financial data with the relevant payment processor — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank — to complete the transaction. Each provider operates under its own privacy policy and is independently responsible for the data it processes.

Identity Verification Partners: x bajji uses third-party KYC and identity verification services to confirm the identity and age of players. These providers process identity documents and verification data on our behalf under strict data processing agreements.

Game Content Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player identifier and session token for the purpose of delivering and recording game sessions. These providers do not receive your full identity data.

Fraud Prevention and Security: x bajji may share data with fraud detection services and, where required by law or court order, with law enforcement agencies or regulatory authorities. Such disclosures are made only to the extent strictly necessary.

Professional Advisors: In the context of a legal dispute or regulatory enquiry, x bajji may share relevant personal data with legal counsel, auditors, or other professional advisors bound by duties of confidentiality.

Cookies & Tracking

x bajji uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse site usage. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

The categories of cookies used by x bajji are as follows:

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in or using core platform features. x bajji does not use third-party advertising cookies or cross-site tracking technologies.

Data Security

x bajji implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, alteration, and disclosure. The security measures in place include the following:

• Encryption in Transit: All data transmitted between your device and x bajji servers is protected by TLS 1.2 or higher (256-bit SSL encryption). The padlock indicator in your browser confirms this protection is active during your session.
• Encryption at Rest: Sensitive personal data stored on x bajji servers — including identity documents submitted for KYC verification and financial account references — is encrypted at rest using AES-256 encryption.
• Password Security: Player account passwords are never stored in plain text. x bajji applies industry-standard one-way hashing with salt to all stored password credentials.
• Access Controls: Access to personal data within x bajji's internal systems is restricted to staff members who require it to perform their job function. All internal access is logged and subject to periodic audit.
• Incident Response: x bajji maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to your personal data, x bajji will notify affected players by email within a reasonable timeframe.
• Third-Party Security: x bajji conducts due diligence on all third-party processors to ensure they maintain data security standards consistent with this policy before sharing any personal data with them.

Data Retention

x bajji retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The retention periods applied to the main categories of personal data are as follows:

• Account and Identity Data: Retained for the duration of your active account relationship with x bajji, and for a minimum of five years following account closure. This retention period supports compliance with anti-money-laundering obligations and the resolution of any post-closure disputes.
• Financial Transaction Records: Retained for a minimum of seven years from the date of each transaction. This period reflects standard financial record-keeping requirements applicable to online payment processing.
• Gaming Activity Logs: Retained for a minimum of three years from the date of each recorded session. Gaming logs are used to resolve bet disputes, support responsible gaming monitoring, and fulfil audit obligations.
• Customer Support Correspondence: Retained for three years from the date of your most recent support interaction, or for the duration of any active dispute resolution process, whichever is longer.
• Marketing Consent Records: Retained for the duration of your account relationship plus two years following account closure, to demonstrate compliance with consent-based marketing obligations.
• Technical and Analytics Data: Anonymised analytics data may be retained indefinitely. Non-anonymised technical data (such as IP address logs) is retained for a maximum of 12 months.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically complex due to backup system architecture, data is isolated from active processing and scheduled for deletion at the next available backup rotation cycle.

Your Privacy Rights

As a player on x bajji, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" along with your registered account email address and a clear description of your request. x bajji will verify your identity before processing any rights request and will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data x bajji holds about you, together with information about how it is used, where it is stored, and with whom it has been shared.
• Right to Rectification: If any personal data x bajji holds about you is inaccurate or incomplete, you may request that it be corrected. Minor corrections to contact details can often be made directly through your account profile page.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Erasure requests are subject to overriding legal obligations to retain certain records.
• Right to Restriction of Processing: You may request that x bajji restrict its processing of your personal data while a rectification or objection request is being assessed, or where you contest the lawfulness of processing.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that x bajji provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where x bajji relies on legitimate interests as the lawful basis, including profiling for responsible gaming monitoring. x bajji will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Marketing Consent: Where your data is processed for marketing purposes on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Contact & Updates

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint about how x bajji has handled your personal data, please contact the x bajji privacy team using the details below.

Contact Method: Email only — plain text, no clickable link.
Address your email to: [email protected]
Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
Response time: x bajji aims to acknowledge all privacy enquiries within 48 hours (Bangladesh Standard Time, BST UTC+6) and to provide a substantive response within 30 calendar days.

Policy Updates: x bajji reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, applicable law, or industry best practice. When material changes are made, x bajji will notify registered players by email to their registered address at least 7 days before the changes take effect. The effective date at the top of this page will be updated accordingly. Continued use of x bajji following the effective date of a revised policy constitutes your acceptance of the updated terms.

Governing Language: This Privacy Policy is written and published in English. In the event of any ambiguity arising from translation or interpretation into another language, the English version of this policy shall be the authoritative version.

Scope: This Privacy Policy applies solely to data processed in connection with your use of the x bajji platform at x-bajji.com. It does not apply to third-party websites, payment provider portals, or game studio interfaces that may be accessible from x bajji. x bajji encourages you to review the privacy policies of any third-party services you use in connection with your x bajji account.