Xbajae Privacy Policy — Your information is safe with us

Xbajae (xbajae.app) is a trusted online gaming and Sports Betting platform in Bangladesh. Our Privacy Policy ("Policy") explains what information we collect about you when you use Xbajae, how that information is used, and the steps we take to keep it safe.

This Privacy Policy applies to the Xbajae website, mobile version, and all related services. By accessing the platform or creating an account, you are considered to have accepted this Privacy Policy.

We believe transparency is the foundation of trust. This policy is written in plain language so you can clearly understand what we do with your data. If you have any questions, don't hesitate to reach out to our support team.

Xbajae collects certain essential information to provide you with the best experience. We only gather what is genuinely needed to deliver our services — collecting unnecessary data goes against our policy.

Xbajae uses the information it collects for specific, limited purposes only. No data is ever used for unrelated activities. Below is a detailed breakdown of what each type of information is used for.

Xbajae does not sell, rent, or otherwise transfer your personal data to third parties. However, limited sharing may be necessary in the circumstances outlined below.

• Payment Processors: To process deposits and withdrawals, the necessary transaction data is shared with bKash, Nagad, and Rocket, each of which operates under its own privacy policy.
• Technology Service Provider: Necessary data may be shared with game software providers or cloud hosting services, all of whom are bound by contractual confidentiality obligations.
• Law Enforcement: We may be legally required to share information with government authorities in accordance with Bangladesh law or by court order.
• Fraud Prevention: In cases involving serious fraud or criminal activity, limited information may be shared with other licensed operators as part of an investigation.

Xbajae uses several types of cookies on its website. Cookies are small text files stored in your browser that help improve your experience.

• Essential Cookies: Used to maintain your login session and ensure platform security. Without these, the platform will not function properly.
• Performance Cookies: Used to monitor page load speed, track errors, and measure site performance. No personal information is included.
• Functionality Cookies: Used to remember your preferred language, theme, and settings, making your experience smoother and more personalized.
• Analytics Cookies: To understand site usage patterns and improve content — fully anonymized.

Xbajae does not store your data indefinitely. Each data type has a defined retention period, determined by legal requirements and business needs.

• Account Information: For the duration the account remains active. Retained for 5 years after account closure for legal compliance.
• Transaction Data: 7 years from the date of the last transaction, in compliance with Bangladesh financial regulations.
• KYC Documents: Up to 5 years after account closure.
• Gaming Logs: Up to 3 years (for dispute resolution purposes).
• Communication History: Up to 2 years from the date of last contact.

Once the defined retention period has passed, your data is securely deleted or irreversibly anonymized.

Xbajae believes you should have full control over your own data. We therefore guarantee the following rights.

Xbajae strictly prohibits anyone under 18 from using the platform. We do not knowingly collect personal information from minors.

• Age verification is mandatory at registration. Accounts will not be activated until a date of birth is confirmed.
• In suspicious cases, users may be asked to verify their age with a government-issued ID.
• Any account identified as belonging to a minor is immediately suspended and all associated data is securely deleted.
• If parents have any concerns, they can reach us at support@xbajae.app.

Xbajae applies industry-leading security measures to protect your data. Our technical team monitors the platform around the clock.

• SSL/TLS Encryption: All data transmitted between your browser and our servers is protected with 256-bit SSL encryption.
• Two-Factor Authentication (2FA): Extra login security via SMS or an authenticator app.
• Firewall & DDoS Protection: Enterprise-grade firewalls and DDoS mitigation are in place to protect our servers.
• Regular Security Audits: Regular penetration testing and audits are conducted by third-party cybersecurity experts.
• Data Backup: Your data is backed up across multiple secure servers to prevent any loss.
• Staff Training: Employees who have access to user data are strictly trained in confidentiality and bound by contractual obligations.

Xbajae may update this Privacy Policy as needed. We will notify you of any changes in a timely manner.

• For minor updates, the "Last Updated" date at the top of the page will be revised accordingly.
• For significant changes, advance notice will be sent to your registered email — at least 7 days prior.
• Continued use of the platform after any changes constitutes your acceptance of the updated policy.
• Previous versions of this policy are archived and available upon request.

If you have any questions, feedback, or complaints about this Privacy Policy, please get in touch. Our dedicated privacy team will review your matter with care.

• Email: support@xbajae.app
• Live Chat: Click the chat icon in the bottom-right corner of the platform.
• Help Center: Help Center Submit a ticket from the page.

We typically respond within 48 hours. Complex privacy requests may take up to 30 business days.