Privacy Policy — How xbjl Collects, Uses & Protects Your Data

This Privacy Policy ("Policy") applies to all personal data processed by xbjl ("we", "us", "our") in connection with the online casino and sports betting platform operated at xbjl.app, including all associated pages, mobile-optimised experiences, and customer support channels. By accessing or using xbjl, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle personal data, please discontinue use of our platform and contact our support team to arrange account closure.

We take our data-protection responsibilities seriously. All personal information collected by xbjl is processed for specific, legitimate purposes and is handled with appropriate technical and organisational security measures in place throughout. We do not sell personal data to third parties for their own marketing purposes.

1. Information We Collect

1.1 Registration and Account Data

When you create an xbjl account, we collect the personal information you provide directly, including:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify you are 18 years of age or older);
• Residential address within Bangladesh (including division, district, and postal code);
• Mobile number registered with your preferred payment service (bKash, Nagad, Rocket, or Upay);
• Email address used for account communications;
• Username and encrypted password credentials.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) and anti-money-laundering obligations, we may request copies of:

• National Identity Card (NID) issued by the Bangladesh Election Commission;
• Valid passport or driving licence where NID is unavailable;
• Recent utility bill or bank statement as proof of address (issued within the previous 90 days);
• A selfie or live photograph taken at the time of submission for facial-match verification.

Identity verification documents are processed securely and are used solely for the purpose of confirming your identity and age. They are not used for marketing purposes.

1.3 Financial Transaction Data

When you make deposits or withdrawals through xbjl, we record transaction-level data including the payment method used (such as bKash, Nagad, or Visa), the transaction amount in Bangladeshi Taka (BDT), the date and time of each transaction in Bangladesh Standard Time (BST, UTC+6), and the transaction reference numbers provided by your payment provider. We do not store full card numbers or mobile banking PINs — these credentials are handled exclusively by the respective payment processor.

1.4 Gameplay and Betting Activity Data

xbjl automatically records all gaming and betting activity associated with your account. This includes game sessions, bet amounts, wagering history, win and loss records, bonus utilisation, and participation in promotions. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement. It is retained for the periods described in Section 5 of this Policy.

1.5 Technical and Device Data

When you access xbjl via any device or browser, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it;
• Device type, operating system version, and browser type and version;
• Session timestamps, page views, navigation paths, and click events;
• Referral source (how you arrived at xbjl.app);
• Crash reports and performance diagnostics.

This technical data is used to maintain platform security, detect suspicious access patterns, improve our services, and ensure compatibility across the range of devices used by our Bangladesh-based players.

1.6 Customer Support Communications

When you contact xbjl's customer support team via live chat or email, we retain a record of that communication, including the content of messages, timestamps, and any attachments you provide. These records are used to resolve your query, train support staff, and maintain a history of account-related interactions. Support records are subject to the retention periods set out in Section 5.

2. How We Use Your Data

xbjl processes personal data only for the specific purposes listed below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your consent or establishing another lawful basis.

Purpose	Lawful Basis
Creating and managing your xbjl account	Contract performance
Processing deposits and withdrawals in BDT	Contract performance
Verifying your identity and age (KYC)	Legal obligation
Preventing fraud, money laundering, and match-fixing	Legal obligation / Legitimate interest
Delivering customer support	Contract performance
Sending account-related transactional notifications	Contract performance
Sending promotional offers and bonus communications (opt-in)	Consent
Monitoring responsible gaming indicators and applying safeguards	Legal obligation / Legitimate interest
Improving platform functionality and user experience	Legitimate interest
Complying with applicable laws and regulatory requirements	Legal obligation

Where we rely on your consent as the lawful basis — for example, to send you promotional messages about xbjl bonuses or new game launches — you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting our support team.

3. Data Sharing & Disclosure

3.1 Service Providers and Technology Partners

xbjl shares personal data with a limited set of trusted third-party service providers who process data on our behalf in order to deliver the xbjl platform. These include game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe), payment processing partners (including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladesh commercial banks), cloud hosting and infrastructure providers, identity verification services, and customer support software platforms. All third-party service providers are contractually required to process personal data only on our documented instructions and to maintain security standards equivalent to those applied by xbjl.

3.2 Legal and Regulatory Disclosure

xbjl may disclose personal data to law enforcement agencies, government authorities, financial regulators, or fraud-prevention bodies where we are legally required to do so, where disclosure is necessary to protect the legal rights of xbjl or our users, or where we have a good-faith belief that disclosure is required to prevent imminent harm, fraud, or unlawful activity. We will notify affected users of any disclosure request where we are lawfully permitted to do so.

3.3 Business Transfers

In the event that xbjl undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by xbjl may form part of the transferred assets. In such circumstances, we will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations consistent with this Policy, and we will provide affected users with advance notice where feasible.

3.4 No Sale of Personal Data

xbjl does not sell, rent, or trade personal data to any third party for that party's own marketing or commercial purposes. Anonymised and aggregated statistical data (which cannot be used to identify any individual) may be used for industry benchmarking and platform analytics purposes.

4. Cookies & Tracking

4.1 What Cookies We Use

xbjl uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform reliably, remember your session, and understand how users interact with our pages. The main categories of cookies we use are:

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in to your xbjl account and security cookies that help detect suspicious activity. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences, such as your last-visited game category (cricket betting, slots, or live casino) and your language and display settings.
• Analytics cookies: Help us understand how players navigate xbjl — which pages are visited most, where users drop off, and how long sessions typically last. This data is aggregated and does not identify individual users.
• Marketing cookies: Used only where you have provided consent, to deliver relevant promotional content about xbjl bonuses and new game launches. You may opt out of marketing cookies at any time.

4.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is stored. Please note that disabling essential cookies will impair your ability to use the xbjl platform, including the ability to log in and maintain an active session. Detailed browser-specific cookie management instructions are available through your browser provider's help documentation.

5. Data Retention

xbjl retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce our agreements. The following general retention periods apply:

• Account registration and KYC data: Retained for the lifetime of the account and for a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping obligations applicable in Bangladesh.
• Gameplay and betting history: Retained for 3 years from the date of each session or bet, unless a longer retention period is required for ongoing dispute resolution.
• Customer support communications: Retained for 2 years from the date the support ticket was closed.
• Technical and device logs: Retained for 12 months from collection, after which they are deleted or anonymised.
• Marketing consent records: Retained for as long as you hold an active xbjl account, or until you withdraw consent, whichever is earlier.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

6. Data Security

xbjl implements a layered approach to information security, combining technical controls, operational processes, and staff training to protect the personal data of our Bangladesh-based players. Key security measures include:

• 256-bit SSL/TLS encryption across all pages and API endpoints on xbjl.app, ensuring that data transmitted between your device and our servers is protected from interception;
• Password hashing using industry-standard one-way hashing algorithms — we never store your password in plain text;
• Access controls that limit access to personal data to authorised xbjl personnel on a strict need-to-know basis;
• Regular security assessments including vulnerability scanning and penetration testing conducted by independent third-party specialists;
• Fraud detection systems that monitor account activity for anomalous patterns associated with account takeover, identity theft, and financial crime;
• Secure data centre infrastructure with physical access controls, redundant storage, and geographically distributed backups.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xbjl will notify affected users as promptly as practicable and will take all reasonable steps to contain and remediate the incident.

7. Your Privacy Rights

As a user of the xbjl platform, you hold a number of rights with respect to the personal data we process about you. These rights are described below. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all valid requests within a reasonable timeframe and in any event no later than 30 days from receipt of the request.

• Right of Access: You may request a copy of the personal data that xbjl holds about you, along with information about how that data is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain details directly through your xbjl account settings.
• Right to Erasure: In certain circumstances, you may request that xbjl delete personal data we hold about you. Note that this right is subject to limitations where retention is required for legal compliance or to establish, exercise, or defend legal claims.
• Right to Restrict Processing: You may request that xbjl limit the processing of your personal data in certain situations, for example where you contest the accuracy of the data or have objected to its processing.
• Right to Object: Where xbjl processes your data on the basis of legitimate interests, you have the right to object to that processing. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: Where processing is carried out by automated means on the basis of contract or consent, you may request that xbjl provide your personal data in a structured, machine-readable format.

Please note that exercising certain rights — such as erasure — may affect your ability to continue using the xbjl platform. For example, if we are unable to retain the minimum data required to verify your identity and maintain your account, we may need to close your account as a result of the erasure request.

8. Contact & Complaints

If you have any questions, concerns, or complaints about how xbjl handles your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please reach out to us using the details below. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]
Live Chat: Available directly within the xbjl platform after login.
Response time: We aim to acknowledge all data-related requests within 3 business days and to resolve them fully within 30 calendar days.

xbjl takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you are entitled to escalate the matter to the relevant data protection authority in your jurisdiction. We are committed to working transparently with regulatory bodies and to resolving all legitimate complaints in good faith.

xbjl reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify active account holders via the email address registered to their account and will update the "Last updated" date at the top of this page. Continued use of the xbjl platform following notification of a change to this Policy constitutes your acceptance of the revised terms.

This Privacy Policy was last reviewed and updated on 1 January 2026 and applies to all xbjl accounts active as of that date.