Privacy Policy — How xbaji Protects Your Data

Introduction

This Privacy Policy ("Policy") describes how xbaji ("xbaji", "we", "us", "our") collects, uses, stores, and protects personal information provided by or collected from users ("you", "your") of the xbaji platform at https://xbaji.today. This Policy applies to all users, including visitors, registered account holders, and any individual who interacts with the xbaji platform in any capacity.

By registering an account or using the xbaji platform in any way, you confirm that you have read and understood this Privacy Policy, and you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should stop using the xbaji platform immediately. xbaji reserves the right to amend this Policy at any time. The most current version will always be available at https://xbaji.today/privacy-policy, and material changes will be communicated to registered users by email.

Information We Collect

xbaji collects personal information through several channels: directly from you when you register or use our services, automatically when you use our platform, and occasionally from third-party verification providers as part of our KYC process. The categories of data we collect are as follows.

• 1
  Registration DataWhen you create an xbaji account, we collect your full name, date of birth, residential address, email address, and mobile phone number. This information is required to create and maintain your account and is used to verify your identity during the KYC process.
• 2
  Identity Verification DocumentsAs part of our KYC obligations, we collect copies of government-issued identity documents (such as a National ID card or passport) and, where required, proof of address documentation. These documents are used solely for identity verification and age verification purposes and are stored securely in accordance with applicable data protection standards.
• 3
  Transaction and Payment DataWe record details of all deposits and withdrawals made through your xbaji account, including the payment method used (e.g. bKash, Nagad, Rocket, Upay, bank transfer), transaction amounts, transaction timestamps, and transaction reference identifiers. We do not store full payment card numbers. Payment processing is handled by your payment provider; xbaji receives only the transaction confirmation and metadata needed for account management.
• 4
  Betting and Gaming ActivityWe collect records of your betting and gaming activity on xbaji, including bets placed, odds accepted, game sessions played, outcomes, and account balance history. This data is used to operate the platform, resolve disputes, detect fraud, and comply with anti-money laundering obligations.
• 5
  Technical and Usage DataWhen you access xbaji, our systems automatically collect technical data including your IP address, device type and operating system, browser type and version, pages visited, session duration, and referring URL. This data is used for security monitoring, fraud detection, platform performance optimisation, and improving the user experience.

Legal Basis for Processing Your Data

xbaji processes your personal data on the following legal bases. Each processing activity is tied to one or more of these bases, and we do not process data where a valid legal basis does not exist.

Cookies and Tracking Technologies

xbaji uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. A cookie is a small text file placed on your device by a website you visit. The following categories of cookies are used on xbaji.

• 1
  Essential CookiesThese cookies are strictly necessary for the platform to function. They manage your login session, maintain your account authentication state, remember your language preferences, and enable secure transactions. Essential cookies cannot be disabled without preventing you from using the platform.
• 2
  Analytics CookiesAnalytics cookies help us understand how users interact with xbaji — which pages are most visited, where users drop off, and how navigation flows. This data is collected in aggregate and does not identify you personally. It is used exclusively to improve the platform.
• 3
  Security CookiesSecurity cookies help xbaji detect and prevent fraudulent activity, including bot traffic, credential stuffing attempts, and suspicious login patterns. They work silently in the background to keep your account and the platform safe.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the xbaji platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Your Privacy Rights

As a user of the xbaji platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our team at [email protected]. We will respond to all rights requests within 5 business days and aim to resolve them within 30 days.

• 1
  Right of AccessYou have the right to request a copy of all personal data that xbaji holds about you. We will provide this in a structured, commonly used format within 30 days of receiving your verified request.
• 2
  Right to RectificationIf any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most of your personal details directly through your account settings. For changes to KYC-verified data, contact our support team.
• 3
  Right to ErasureYou have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained to fulfil legal obligations and cannot be erased on request.
• 4
  Right to RestrictionYou have the right to request that xbaji restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interest and xbaji is considering your objection.
• 5
  Right to Data PortabilityWhere processing is based on consent or contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another organisation.
• 6
  Right to ObjectYou have the right to object to the processing of your personal data where that processing is based on legitimate interest. xbaji will cease processing your data following an objection unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Children's Privacy and Age Policy

xbaji is strictly an adult platform intended solely for persons aged 21 years or older. We do not knowingly collect or process personal data from individuals under the age of 21. Our registration process requires users to confirm their age, and our KYC verification process verifies age through government-issued identity documentation before any withdrawal is approved. If xbaji becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed.

Privacy Enquiries and Data Requests

For all privacy-related enquiries, data access or deletion requests, concerns about how your personal data is being used, or to report a suspected data breach, please contact the xbaji team in writing. We are committed to responding to all privacy communications promptly and transparently.

Please include 'Privacy Enquiry' or 'Data Rights Request' in the subject line of your email, along with your registered username and a clear description of your query. We aim to acknowledge all privacy requests within 2 business days and resolve them fully within 30 days.