xbagee Privacy Policy

xbagee ("we", "us", "our") operates the online gaming and sports betting platform available at xbagee.biz. As the data controller for personal information collected through this platform, xbagee is committed to processing that information lawfully, fairly, and transparently in accordance with applicable data protection principles.

This Privacy Policy applies to all personal data collected from players and visitors based in Bangladesh and wherever else xbagee's services are accessed. It covers data collected through the xbagee website, mobile-optimised interface, customer support channels, and any other touchpoint through which you interact with xbagee.

This policy should be read in conjunction with xbagee's Terms & Conditions, which govern your overall relationship with the platform. Capitalised terms not defined in this policy carry the meaning assigned to them in the Terms & Conditions.

xbagee collects only the personal data that is necessary to provide our services, comply with legal obligations, and protect the integrity of the platform. The categories of personal data we collect are set out in the table below.

We do not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless explicitly required for responsible gaming purposes and with your informed consent.

xbagee collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting our support team via live chat or email, or participating in a promotion.
• Automated Technical Collection: Data collected automatically when you access and interact with the xbagee platform, including IP address, device identifiers, browser fingerprint, session duration, and clickstream data. This data is collected via server logs, cookies, and similar tracking technologies described in Section 9.
• Third-Party Payment Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we receive transaction confirmation data from those providers. We do not receive or store full card numbers or mobile banking PINs.
• Identity Verification Services: Where enhanced KYC checks are required, xbagee may use third-party identity verification partners who cross-reference the documents you submit against official databases. Results from these checks are shared with xbagee solely for compliance purposes.
• Game Providers: Third-party game studios (including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi) may share aggregated game session data with xbagee for purposes of account reconciliation and dispute resolution.

xbagee processes your personal data only for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those listed below:

• Account Management: Creating, maintaining, and administering your xbagee player account, including processing login requests, applying account settings, and managing your balance.
• Transaction Processing: Handling deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, and card networks in Bangladeshi Taka (৳), and maintaining accurate transaction records.
• Identity and Age Verification: Confirming that all registered players are at least 18 years of age and verifying the identity of players who request withdrawals above ৳5,000 or who trigger internal risk thresholds.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access. This includes monitoring transaction patterns and IP addresses associated with known risk indicators.
• Legal and Regulatory Compliance: Fulfilling obligations under applicable law, including responding to lawful requests from competent authorities and maintaining records required for anti-money-laundering (AML) compliance.
• Responsible Gaming: Monitoring player behaviour to identify patterns indicative of problem gambling and making responsible gaming tools (deposit limits, self-exclusion) available and effective.
• Customer Support: Responding to queries, complaints, and support requests submitted through live chat or email at [email protected].
• Platform Improvement: Analysing aggregated usage data to improve the design, performance, and content of the xbagee platform.
• Marketing Communications: Sending promotional messages about xbagee bonuses, tournaments, and new features — only where you have given explicit consent or where we have a legitimate interest basis for doing so. You may opt out of marketing communications at any time.

xbagee processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to operate your xbagee account, process deposits and withdrawals, and deliver the betting and casino services you have engaged us to provide.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering laws, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of xbagee's legitimate business interests, including fraud prevention, security monitoring, and platform analytics — provided those interests are not overridden by your rights and interests.
• Consent: Where consent is the legal basis (for example, for optional marketing communications or non-essential cookies), we will obtain your explicit, informed consent before processing. You may withdraw consent at any time without this affecting the lawfulness of processing carried out before withdrawal.

xbagee does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We share your data only in the following limited circumstances:

• Payment Processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to the extent required to process your deposit or withdrawal. Each payment provider operates under its own privacy policy and data protection obligations.
• Identity Verification Partners: Where enhanced KYC checks are required, your identity documents and personal details may be shared with our verified identity verification service partners for the sole purpose of confirming your identity and age.
• Game Providers: Your xbagee account identifier (not your full personal details) is shared with third-party game studios as necessary to facilitate game sessions, calculate payouts, and resolve disputes.
• Fraud and Security Services: Aggregated or pseudonymised data may be shared with third-party fraud detection platforms to identify and block suspicious activity patterns across the xbagee platform.
• Legal Authorities: xbagee will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a lawful order. We will notify affected players of such disclosures to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of xbagee's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

xbagee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active xbagee account is retained for the duration of the account's active status.
• Closed Account Data: Following the closure of an account — whether requested by the player or initiated by xbagee — personal data and transaction records are retained for a minimum of five (5) years to comply with anti-money-laundering record-keeping obligations.
• KYC Documents: Copies of identity verification documents are retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Support Communications: Live chat transcripts and email correspondence with the xbagee support team are retained for two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of your marketing consent or opt-out preferences are retained for as long as your account is active plus three (3) years thereafter.
• Technical Logs: Server logs and session data are retained for a maximum of twelve (12) months for security monitoring purposes, after which they are deleted or permanently anonymised.

When personal data is no longer required for any of the purposes listed above, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

xbagee employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

• Transport Encryption: All data transmitted between your device and the xbagee platform is protected by 256-bit SSL (TLS) encryption. The padlock icon in your browser confirms that your connection to xbagee is encrypted.
• Data-at-Rest Encryption: Sensitive personal data stored on xbagee's servers — including identity documents and financial data — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within xbagee's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job functions. All access events are logged and regularly audited.
• Password Security: Player account passwords are stored in hashed form using a one-way cryptographic hashing algorithm. xbagee staff cannot retrieve your plain-text password; if you lose access to your account, a password reset process is available.
• Penetration Testing: xbagee's platform undergoes regular security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: xbagee maintains a documented data breach response plan. In the unlikely event of a security incident that poses a risk to your personal data, xbagee will notify affected players promptly and take immediate steps to contain and remediate the breach.

xbagee uses cookies and similar tracking technologies to operate the platform, remember your preferences, and collect analytical data about how the site is used. The following types of cookies are used:

Strictly necessary cookies are deployed without requiring your consent as they are essential for the platform to function. Analytical and functional cookies are set only where you have provided consent via the cookie preferences panel available on the xbagee platform.

You may manage or withdraw your cookie consent at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the xbagee platform.

As a player registered with xbagee, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact xbagee's support team using the details in Section 14.

• Right of Access: You have the right to request a copy of the personal data xbagee holds about you. We will provide this information within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held in your xbagee account. You may update basic account information directly via your account settings; for identity data corrections, please contact support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing. This right is subject to legal retention obligations described in Section 7.
• Right to Restrict Processing: You have the right to request that xbagee restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though xbagee may be entitled to continue processing where it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

xbagee will respond to all data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reason for it.

xbagee's services are strictly intended for adults aged 18 years and above. xbagee does not knowingly collect, process, or retain personal data belonging to individuals under the age of 18.

All new player registrations are subject to age verification checks. Where xbagee has reasonable grounds to believe that an account is held by a minor, the account will be suspended immediately, all gameplay will be voided, and any deposits will be returned to the originating payment method after investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account with xbagee, please contact us immediately at [email protected] so that we can take swift action to close the account and delete the associated data.

The xbagee platform integrates with a number of third-party service providers to deliver its full range of features. Each of these providers operates independently and maintains its own privacy practices. xbagee is not responsible for the privacy policies or data handling practices of third-party providers.

• Game Studios: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi provide the casino and live dealer games available on xbagee. These providers process game session data in accordance with their own privacy and data protection policies.
• Payment Networks: bKash, Nagad, Rocket, Upay, Visa, and Mastercard process payment transactions initiated through the xbagee cashier. Each provider is subject to its own regulatory framework and privacy obligations.
• Analytics Providers: xbagee may use third-party analytics tools to collect aggregated, anonymised data about platform usage. No personally identifiable information is shared with analytics providers without your consent.
• Customer Support Infrastructure: Our live chat and ticketing system may be powered by a third-party customer support platform. Support communications are processed in accordance with that provider's data processing agreement with xbagee.

We encourage you to review the privacy policies of the third-party services you interact with through the xbagee platform if you have specific questions about how those providers handle your data.

xbagee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the xbagee platform. The effective date displayed at the top of this page will be updated whenever a new version is published.

Where changes to the Privacy Policy are material — meaning they significantly affect how we use your personal data or the rights available to you — xbagee will provide reasonable advance notice via the platform, by email to your registered address, or by a prominent notice on the xbagee homepage.

Your continued use of the xbagee platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree to any amendment, you should discontinue use of the platform and contact support to request account closure.

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data xbagee holds about you, please reach out to our support team via the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly within the xbagee platform.
• Response Time: xbagee aims to respond to all privacy-related enquiries within 48 hours. Data rights requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.
• Support Hours: All hours, Bangladesh Standard Time (UTC+6).

Please include your registered email address and account username in any privacy-related correspondence so that we can verify your identity and process your request efficiently.