xbagee Privacy Policy
At xbagee, protecting your personal data is a core responsibility. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and how you can exercise your rights as a player on our Bangladesh platform.
This Privacy Policy ("Policy") describes how xbagee ("xbagee", "we", "us", "our"), the operator of the online casino and sports betting platform at xbagee.bio, collects, processes, stores, shares, and protects personal data relating to players, registered users, and visitors ("you", "your") who access or use the xbagee platform.
This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an account or using any part of the xbagee platform, you confirm that you have read this Policy and consent to the collection and processing of your personal data as described herein.
Our Privacy Principles
1. Information We Collect
xbagee collects personal data in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information received from trusted third-party partners. The categories of data we collect are set out below.
- Registration data: Full name, date of birth, email address, mobile number, and residential address provided when creating your xbagee account.
- Identity verification documents: Copies of government-issued identification (such as a National Identity Card or passport) and proof of address documents submitted to fulfil our Know Your Customer (KYC) obligations.
- Payment information: Mobile money account references (bKash, Nagad, Rocket, Upay), bank account details, and transaction records required to process deposits and withdrawals in Bangladeshi Taka (BDT).
- Communications data: Messages, emails, live chat transcripts, and any other correspondence you send to our customer support team at [email protected].
- Responsible gaming preferences: Deposit limits, loss limits, session time limits, and self-exclusion requests that you configure through your account settings.
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
- Usage and behavioural data: Pages visited, games played, bet amounts, session duration, click patterns, and navigation paths through the platform.
- Location data: General geographic location inferred from your IP address, used to verify that you are accessing the platform from a permitted jurisdiction.
- Cookie and tracking data: Information collected via cookies, pixel tags, and similar technologies as described in Section 6 of this Policy.
- Payment processors: Transaction status, payment reference numbers, and fraud screening signals from bKash, Nagad, Rocket, Upay, and bank partners.
- Identity verification providers: Results of automated KYC and age-verification checks conducted by our third-party verification partners.
- Fraud prevention services: Risk scores and device fingerprint data from anti-fraud and responsible gaming screening tools.
2. How We Use Your Information
xbagee processes your personal data only for the specific, legitimate purposes listed below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected.
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your player account | Contractual necessity |
| Verifying your identity and age (21+) | Legal obligation / contractual necessity |
| Processing deposits and withdrawals in BDT | Contractual necessity |
| Detecting and preventing fraud, money laundering, and abuse | Legal obligation / legitimate interest |
| Enforcing responsible gaming limits and self-exclusion | Legal obligation / legitimate interest |
| Providing customer support and resolving disputes | Contractual necessity |
| Sending transactional and account notifications | Contractual necessity |
| Sending promotional offers (where opted-in) | Consent |
| Improving platform performance and game offerings | Legitimate interest |
| Complying with applicable laws and regulatory requests | Legal obligation |
3. Sharing Your Information
xbagee does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle your data securely and in accordance with applicable data protection standards.
To process deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the minimum data required to execute the transaction and are bound by their own published privacy policies and applicable financial regulations.
To verify your identity, confirm your age, and screen for fraudulent activity, we may share identification document data and risk-related information with third-party KYC and anti-fraud service providers. These providers act as data processors under contract with xbagee and are not permitted to use your data for their own independent purposes.
Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier in order to load and operate their games within the xbagee platform. These providers do not receive your full name, payment details, or contact information unless a dispute resolution process specifically requires it.
xbagee may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are required to do so by applicable law, court order, or lawful regulatory demand. In such cases, we will disclose only the minimum information required and will notify you of the disclosure to the extent permitted by law.
In the event that xbagee undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity before your data is transferred.
4. Cookies and Tracking Technologies
xbagee uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, detect fraud, and analyse how players use the site. A cookie is a small text file placed on your device when you visit a website. Below is a summary of the types of cookies we use:
These cookies are strictly necessary for the platform to function. They enable core features such as your login session, account balance display, bet placement, and security checks. The platform cannot operate correctly if these cookies are disabled. No consent is required for essential cookies.
These cookies collect anonymised data about how visitors use the xbagee platform â for example, which pages are visited most frequently, how long players spend in a game session, and where technical errors occur. This data helps us improve the platform experience. We use aggregated, non-personally-identifiable data for this purpose.
Functional cookies remember choices you have made â such as your preferred language, notification settings, and display preferences â so that you do not need to re-enter them on each visit. These cookies are set based on actions you take on the platform and improve your overall experience.
You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and receive a warning before a cookie is stored. Please note that disabling essential cookies may prevent you from accessing certain features of the xbagee platform, including your player account and the betting interface.
5. Data Retention
xbagee retains personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain your active account, and to comply with our legal and regulatory obligations. The following general retention periods apply:
- Account data: Retained for the duration of your account and for a minimum of five years following account closure, to fulfil anti-money laundering and fraud prevention obligations.
- Transaction records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping requirements.
- Identity verification documents: Retained for the duration of your account and for five years following account closure.
- Customer support communications: Retained for up to three years from the date of the last communication, to support dispute resolution.
- Marketing consent records: Retained for as long as you remain an active player or until you withdraw consent, whichever is earlier.
- Technical and usage logs: Typically retained for up to 12 months, unless required for longer by an active investigation or legal proceeding.
When personal data is no longer required, xbagee will delete it securely or anonymise it so that it can no longer be associated with you as an individual.
6. Your Data Rights
As a player on the xbagee platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.
- Right of access: You may request a copy of all personal data that xbagee holds about you, including how it is being used and with whom it has been shared.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
- Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to limitations where we are required by law to retain the data (for example, for anti-money laundering compliance).
- Right to restrict processing: You may ask us to temporarily suspend the processing of your personal data while a correction request or objection is being considered.
- Right to data portability: Where technically feasible, you may request a copy of the personal data you have provided to xbagee in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where xbagee relies on your consent as the lawful basis for processing (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
- Right to object: You may object to the processing of your personal data where xbagee relies on legitimate interest as its lawful basis, subject to our demonstrating compelling legitimate grounds that override your interests.
7. Data Security
xbagee implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption on all data transmissions between your device and xbagee servers.
- Encrypted storage of sensitive data, including payment references and identity document copies.
- Role-based access controls ensuring that only authorised xbagee personnel can access personal data, and only to the extent required by their role.
- Regular security audits and penetration testing of the platform infrastructure.
- Automated monitoring for suspicious login activity, unusual transaction patterns, and potential data breaches.
While xbagee takes all reasonable precautions to protect your data, no security system is completely impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, xbagee will notify you without undue delay and will take all necessary steps to contain and mitigate the breach.
8. Age Restriction and Minors
The xbagee platform is strictly for players aged 21 years and above. xbagee does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use any service offered by xbagee. If xbagee discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.
If you are a parent or guardian and believe that a minor has provided personal data to xbagee or has accessed the platform without authorisation, please contact us at [email protected] so that we can take prompt corrective action.
9. Changes to This Privacy Policy
xbagee reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform operations, or applicable laws. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email. Your continued use of the xbagee platform following the publication of a revised Policy constitutes your acceptance of the updated terms.
We encourage you to review this Policy periodically to stay informed about how xbagee is protecting your personal data. If you have any questions about a particular change, please contact us at [email protected] before continuing to use the platform.
Know Your Rights. Play with Confidence.
Your privacy matters to us. Explore the xbagee platform knowing your data is protected â or visit our FAQ and Responsible Gaming pages for more guidance.
Visit the FAQ Explore xbagee Casino Responsible Gaming Policy