xbej Privacy Policy

Data We Collect

xbej collects personal data from you in two primary ways: data you provide directly when registering or interacting with the platform, and data collected automatically through your use of the xbej website. Below is a full description of both categories.

Data you provide directly: When you create a registered xbej account, make a deposit or withdrawal, contact our support team, or otherwise interact with the xbej platform, you may provide us with the following categories of personal data:

• Identity data: Your full legal name, date of birth, gender, and a copy of your government-issued identification document (Bangladesh NID, passport, or driving licence).
• Contact data: Your email address, Bangladesh mobile phone number, and residential address including district and division.
• Financial data: Your preferred payment method details, including your bKash, Nagad, Rocket, or Upay account number, or your bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, or card details for Visa and Mastercard transactions. xbej does not store full card numbers — card payments are processed by PCI-DSS-compliant third-party payment processors.
• Account credentials: Your chosen username and a securely hashed version of your password. xbej never stores passwords in plain text.
• Communications data: Records of any messages, emails, or live chat conversations you have with the xbej support team, including timestamps and the content of your enquiries.
• KYC verification data: Uploaded copies of identity documents, proof of address documents, and source-of-funds documentation submitted during the KYC verification process.

Data collected automatically: When you visit xbej.net, our systems automatically record certain technical data about your device and browsing session, including:

• Device and browser data: Your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and language settings.
• Usage and behavioural data: Pages visited, time spent on each page, games played, wagers placed, session duration, deposit and withdrawal history, bonus redemption activity, and click-path data.
• Location data: General geographic location inferred from your IP address, used to apply region-specific terms and to comply with our obligations under applicable law. xbej does not collect precise GPS location data.
• Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 3 of this Privacy Policy.

How We Use Your Data

xbej uses the personal data we collect for specific, legitimate purposes only. We do not use your data for any purpose that is incompatible with the purposes described below, and we do not sell your personal data to third parties for their own marketing purposes under any circumstances.

The primary purposes for which xbej processes your personal data are as follows:

• Account management: To create, maintain, and administer your xbej account, verify your identity, process deposits and withdrawals, apply bonus credits, and ensure your account reflects an accurate history of your activity on the platform.
• Service delivery: To provide you with access to all xbej games including live cricket betting, slots, fishing games, and live casino tables; to process bets and settle winnings accurately; and to personalise your in-platform experience based on your preferences and play history.
• KYC and fraud prevention: To verify the identity of registered players in accordance with anti-money laundering (AML) obligations; to detect and prevent fraudulent account activity, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Legal and regulatory compliance: To comply with applicable laws, regulatory requirements, and court orders; to respond to lawful requests from law enforcement agencies in Bangladesh; and to maintain records required by applicable financial regulations.
• Responsible gaming: To monitor player activity for signs of problem gambling behaviour; to enforce self-exclusion requests, deposit limits, and cool-off periods; and to ensure that players on our self-exclusion list cannot access the platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and communicate important account-related information such as KYC requests, withdrawal status updates, and security alerts.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
• Platform improvement: To analyse aggregated, anonymised usage data for the purpose of improving the xbej platform, identifying and resolving technical issues, and optimising the user experience for players across Bangladesh.

Cookies & Tracking Technologies

xbej uses cookies and similar tracking technologies to operate the platform correctly, to remember your preferences, and to understand how players interact with different parts of the xbej website. This section explains what cookies we use and why.

What is a cookie? A cookie is a small text file that a website stores on your device (computer, smartphone, or tablet) when you visit it. Cookies allow the website to recognise your device on subsequent visits and to recall certain information about your session or preferences. Cookies do not give xbej direct access to your device and cannot be used to read files stored elsewhere on your device.

xbej uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the xbej platform to function. They enable core features such as maintaining your login session, loading your account balance, processing in-game actions, and keeping your session secure. You cannot opt out of strictly necessary cookies without significantly impairing your ability to use xbej.
• Functional cookies: These cookies allow the xbej platform to remember choices you make — such as your preferred language, display settings, and recently played games — to provide a more personalised experience. Disabling functional cookies may reduce the quality of your xbej experience.
• Analytics cookies: xbej uses analytics tools to collect aggregated, anonymised data about how players navigate the xbej website, which pages are most visited, and where technical errors occur. This data is used solely to improve the platform and is never used to identify individual players.
• Security cookies: These cookies help xbej detect and prevent fraudulent activity, including attempts to access accounts without authorisation, bot traffic, and credential-stuffing attacks. They are an important part of keeping your xbej account secure.

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that blocking certain categories of cookies may affect the functionality of the xbej platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Data Sharing & Third Parties

xbej does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: When you make a deposit or withdrawal on xbej, the relevant transaction data is shared with your chosen payment provider — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard — solely to process the transaction. These providers operate under their own privacy policies and data protection standards.
• KYC and identity verification providers: xbej may use third-party identity verification services to assist with KYC document review and fraud detection. Any such provider is contractually bound to process your data only for the purposes specified by xbej and to maintain appropriate security standards.
• Game software providers: To deliver casino and sports betting games on the xbej platform, technical session data (such as a player session token, bet amounts, and game results) is shared with licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data is used solely to operate the games and settle results correctly.
• IT and hosting providers: xbej uses third-party cloud infrastructure and hosting providers to operate its platform. These providers have access to server-level data as part of their service but are bound by strict data processing agreements that prohibit them from using xbej player data for any purpose other than providing hosting services.
• Law enforcement and regulatory bodies: xbej may disclose personal data to law enforcement agencies, regulatory authorities, or courts in Bangladesh where we are legally required to do so, or where disclosure is necessary to prevent or detect fraud, money laundering, or other criminal activity.
• Business transfers: In the event that xbej is involved in a merger, acquisition, or asset sale, registered player data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address prior to any such transfer, and you will retain the right to request deletion of your data before the transfer is completed.

Data Retention & Storage

xbej retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required or permitted by applicable law. The following retention periods apply to the main categories of personal data held by xbej:

After the applicable retention period has elapsed, xbej will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical analysis, as it can no longer be linked to any individual player.

All personal data held by xbej is stored on secure servers. xbej does not transfer personal data to servers located outside of its approved hosting infrastructure without implementing appropriate safeguards, including encrypted data transfers and contractual protections equivalent to applicable data protection standards.

Your Privacy Rights

As a registered xbej player, you hold a number of rights with respect to the personal data we hold about you. xbej is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request", along with sufficient information to verify your identity.

• Right of access: You have the right to request a copy of the personal data xbej holds about you. Upon receiving a verified request, xbej will provide a summary of your personal data in a readable format within 30 calendar days.
• Right to rectification: If you believe that any personal data xbej holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. Minor corrections (such as updating a phone number) can be made directly via your account settings; for more significant corrections, please contact our support team.
• Right to erasure: You may request that xbej delete your personal data. We will comply with such requests where there is no legitimate legal basis for continuing to hold the data — for example, where your account has been closed and the relevant retention period has elapsed. Please note that xbej is obligated to retain certain financial and KYC records for statutory periods even after account closure, and these cannot be erased on request.
• Right to restrict processing: You have the right to request that xbej limits the way it uses your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to data portability: Where technically feasible and where xbej processes your data on the basis of consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where xbej processes your personal data on the basis of your consent — most notably for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to your withdrawal. To opt out of marketing communications, contact [email protected].
• Right to lodge a complaint: If you believe that xbej has processed your personal data in a manner that does not comply with applicable data protection principles, you have the right to raise a complaint with xbej's data protection contact at [email protected]. We will investigate all complaints thoroughly and respond within 14 business days.

Data Security Measures

xbej takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. While no digital platform can guarantee absolute security, xbej maintains industry-standard safeguards that are reviewed and updated regularly.

The key security measures in place at xbej include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser and xbej.net is encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting xbej.net.
• Password hashing: Account passwords are stored in a one-way hashed format using modern cryptographic hashing algorithms. Even in the unlikely event of a data breach, stored password hashes cannot be reversed into plain-text passwords.
• Access controls: Access to databases containing personal data is strictly limited to authorised xbej personnel whose roles require it. All internal access is logged, monitored, and subject to regular access reviews.
• Two-factor authentication (2FA): xbej supports two-factor authentication for registered player accounts. Players are strongly encouraged to enable 2FA via their account security settings to add an additional layer of protection against unauthorised access.
• Fraud detection systems: xbej operates automated fraud monitoring systems that analyse account activity in real time for signs of suspicious behaviour, including unusual login locations, rapid sequential transactions, and credential-stuffing patterns.
• Regular security audits: xbej conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in its platform infrastructure.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of registered players, xbej will notify affected players via their registered email address without undue delay. The notification will describe the nature of the breach, the data affected, the likely consequences, and the measures taken or proposed to address the breach.

Policy Updates & Contact

xbej reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the xbej platform. When material changes are made to this Privacy Policy, we will notify registered players by posting a prominent notice on the xbej website and, where appropriate, by sending a notification to your registered email address.

The effective date shown at the top of this Privacy Policy indicates when the current version was last reviewed and updated. We encourage you to review this Privacy Policy periodically so that you remain informed about how xbej handles your personal data. Your continued use of the xbej platform following the publication of any changes constitutes your acknowledgment of those changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xbej handles your personal data, please contact our data protection team using the details below:

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Response time: xbej aims to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).
• Languages supported: English

This Privacy Policy was last reviewed and updated in January 2026. It applies to all registered players and visitors to xbej.net. For the full terms governing your use of the xbej platform, please also read our Terms & Conditions and Responsible Gaming policy. 18+ only. Please gamble responsibly.