x baazi Privacy Policy
At x baazi, the privacy and security of your personal data is a foundational commitment — not an afterthought. This Privacy Policy explains in plain, formal terms exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold as a player on our platform.
Scope of this Policy: This Privacy Policy applies to all personal data collected by x baazi through the website https://x-baazi.com, its mobile-optimised interface, and all associated services. By creating an account or continuing to use the platform, you acknowledge that you have read and understood this Policy. If you have any questions, contact us at [email protected].
All data transmitted between your browser or mobile device and the x baazi platform is protected with 256-bit SSL/TLS encryption. Payment credentials are never stored on x baazi servers in raw form — tokenisation and vault services are used for all financial data.
x baazi does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your personal data is used exclusively to operate the platform, comply with legal obligations, and improve your experience as a player.
You retain meaningful control over your personal data at all times. You may request access to the data we hold, ask us to correct inaccuracies, request deletion subject to legal retention obligations, or object to certain processing activities by contacting our support team.
x baazi operates on a data minimisation principle. We collect only the personal information strictly necessary to provide the requested service, verify identity, prevent fraud, and comply with anti-money laundering obligations. We do not collect data speculatively or beyond what is operationally justified.
Your personal data is not held indefinitely. x baazi applies defined retention schedules based on the category of data and the legal obligation that justified its collection. When data is no longer required, it is securely deleted or irreversibly anonymised.
x baazi is designed primarily for players based in Bangladesh. Our data practices take into account the needs and expectations of Bangladeshi players, including support for bKash, Nagad, and Rocket payment verification, and communications delivered exclusively in English.
Information We Collect
x baazi collects personal information through several channels: directly from you during registration, from your ongoing use of the platform, and in limited circumstances from trusted third-party verification partners. The following table sets out the categories of personal data we collect and the context in which each is gathered.
| Data Category | Specific Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, National Identity Card (NID) number, passport number, photograph | Account registration; KYC verification request |
| Contact Data | Email address, mobile phone number, residential address, district, division (e.g., Dhaka, Chittagong, Sylhet) | Account registration; profile updates |
| Financial Data | bKash / Nagad / Rocket account numbers, bank account details, deposit and withdrawal transaction records, balance history | Deposit/withdrawal processing; fraud detection |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session timestamps | Automatic collection via platform access |
| Usage Data | Pages visited, games played, wagers placed, session duration, betting patterns, bonus usage history | Automatic collection during platform use |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Customer support interactions |
| Verification Documents | Scanned NID, utility bill, bank statement, selfie with ID | KYC verification; source-of-funds requests |
x baazi does not knowingly collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by applicable law and with appropriate safeguards in place.
Minors — Strictly Prohibited: x baazi does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will delete it immediately and close the associated account. If you believe a minor has registered on the platform, please contact [email protected] immediately.
How We Use Your Information
x baazi uses the personal data we collect for the following specific, legitimate purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your consent or having a separate legal basis to do so.
- Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your relationship with the platform throughout your membership.
- Service delivery: To allow you to access casino games, place sports bets, make deposits, and request withdrawals. Without processing your identity and financial data, these core services cannot be provided.
- KYC and age verification: To confirm that you are aged 18 or above and that your identity is genuine, in accordance with our legal and regulatory obligations to prevent underage gambling and identity fraud.
- Payment processing: To process your deposit and withdrawal requests through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard) and to maintain accurate financial records.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, money laundering, and other prohibited activities that could harm players or the integrity of the platform.
- Responsible gaming enforcement: To monitor betting patterns and account activity for indicators of problem gambling, and to enforce responsible gaming tools including deposit limits, loss limits, cool-off periods, and self-exclusion orders.
- Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance through live chat and email channels.
- Legal compliance: To fulfil obligations under applicable law, including anti-money laundering (AML) obligations, record-keeping requirements, and responding to lawful requests from competent authorities.
- Platform improvement: To analyse aggregated, anonymised usage data to identify performance issues, improve game selection, optimise page layouts, and enhance the overall player experience.
- Promotional communications: Where you have opted in to marketing, to send you information about x baazi promotions, bonuses, new games, and seasonal offers by email or push notification. You may opt out at any time via your account settings or by contacting support.
No Automated Decision-Making with Legal Effect: x baazi does not use fully automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated tools assist in fraud detection or responsible gaming monitoring, a human review step is included before any consequential account action is taken.
Legal Basis for Processing
x baazi processes personal data only where a valid legal basis exists. The following legal bases apply to the different processing activities carried out on the platform:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and service delivery | Performance of a contract — necessary to provide the services you have requested |
| KYC / identity and age verification | Legal obligation — required to comply with anti-money laundering and age-restriction obligations |
| Payment processing and financial records | Performance of a contract; legal obligation (financial record-keeping) |
| Fraud detection and security monitoring | Legitimate interests — protecting the platform and all players from financial crime and abuse |
| Responsible gaming monitoring and enforcement | Legitimate interests; legal obligation where applicable |
| Customer support communications | Performance of a contract; legitimate interests |
| Marketing and promotional communications | Consent — you may withdraw consent at any time without affecting lawfulness of prior processing |
| Platform analytics and performance improvement | Legitimate interests — using anonymised/aggregated data to improve services |
Where x baazi relies on legitimate interests as the legal basis for processing, we have conducted an internal balancing assessment to confirm that our interests do not override your fundamental privacy rights and freedoms. You may request a summary of this assessment by contacting [email protected].
Data Sharing and Third Parties
x baazi does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose.
- Payment processors: When you make a deposit or request a withdrawal, your financial transaction data is shared with the relevant payment service provider (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard) solely to process the transaction. x baazi does not control the data practices of these third-party payment processors and encourages you to review their own privacy policies.
- Identity verification partners: To fulfil KYC obligations, x baazi may share identity documents and personal details with accredited third-party identity verification service providers. These partners are bound by strict data processing agreements and may not use your data for any purpose other than the verification service.
- Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate game engines integrated into the x baazi platform. When you play a game, technical data (such as session identifiers and bet history relevant to that game session) may be shared with the relevant provider for the purpose of operating the game and resolving disputes. These providers do not receive your full identity profile.
- Legal and regulatory authorities: x baazi may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law or in response to a valid legal order. x baazi will notify you of such disclosures where legally permitted to do so.
- Corporate successors: In the event of a merger, acquisition, or sale of all or a material part of x baazi's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any change to the applicable privacy policy.
- Professional advisors: x baazi may share limited personal data with legal counsel, auditors, and other professional advisors under binding confidentiality obligations where necessary to operate the business lawfully.
Cross-Border Data Transfers: Some of x baazi's third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, x baazi ensures that appropriate safeguards are in place — such as contractual data processing agreements with standard data protection clauses — to ensure your data receives a level of protection comparable to that provided under applicable Bangladeshi data protection frameworks.
Cookies and Tracking Technologies
x baazi uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and collect anonymised analytics data. The following categories of cookies are used on the platform:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, CSRF protection. Required for the platform to function. | No — disabling these will prevent platform access |
| Functional | Remembering language preferences, display settings, and previously used payment methods for convenience. | Yes — but some features may be degraded |
| Analytics | Aggregated, anonymised data on page visits, session lengths, and navigation paths used to improve platform performance. | Yes — opt out via browser settings or account preferences |
| Responsible Gaming | Tracking session duration for on-screen timer alerts and enforcing cool-off period restrictions across browser sessions. | No — required for player protection compliance |
Most web browsers allow you to control cookies through browser settings. You can configure your browser to refuse all cookies, accept only first-party cookies, or alert you when a cookie is set. Note that disabling strictly necessary cookies will prevent you from logging in to or using the x baazi platform.
x baazi does not use advertising tracking pixels, retargeting cookies, or third-party ad network trackers. No behavioural advertising profile is built from your usage of the platform.
Data Retention
x baazi retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of active account + 5 years after closure | AML record-keeping and legal compliance |
| Financial transaction records | 7 years from transaction date | Financial regulatory obligations |
| KYC verification documents | 5 years from account closure | Anti-money laundering legal obligation |
| Customer support records | 3 years from last interaction | Dispute resolution and quality assurance |
| Analytics data (anonymised) | Up to 26 months from collection | Platform performance analysis |
| Self-exclusion records | Indefinite (for re-registration prevention) | Player protection and responsible gaming compliance |
| Marketing consent records | Duration of consent + 3 years | Proof of consent for compliance purposes |
When the applicable retention period expires, personal data is securely deleted from all x baazi systems or irreversibly anonymised such that it can no longer be associated with any individual. Anonymised, aggregated data may be retained beyond these periods for statistical and analytical purposes without restriction.
Self-Exclusion Records Are Permanent: If you have self-excluded from the x baazi platform, a record of your self-exclusion is retained indefinitely to prevent future re-registration during the exclusion period. This is a player protection measure and is not subject to deletion requests. All other personal data associated with a closed self-excluded account is handled in accordance with the standard retention schedule above.
Your Privacy Rights
As a player on the x baazi platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, contact our support team via live chat or by emailing [email protected]. We will respond to all verified requests within 30 days.
You may request a copy of the personal data x baazi holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update basic profile information directly via your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations (e.g., AML record-keeping).
You may request that we restrict processing of your data in certain circumstances — for example, while accuracy is being contested or while an objection is being considered.
Where processing is based on consent or contract and carried out by automated means, you may request that we provide your data in a machine-readable format for transfer to another service.
You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. We will assess your objection and respond with our decision and rationale.
To submit a privacy rights request, please email [email protected] with the subject line "Privacy Rights Request" and include your registered account email address and a brief description of your request. We may request proof of identity before processing the request to ensure we do not disclose data to an unauthorised party.
Response Timeframe: x baazi will acknowledge all privacy rights requests within 5 business days (BST) and provide a full substantive response within 30 calendar days. In cases of particular complexity, we may extend this period by a further 30 days and will notify you of the extension and the reason for it within the initial 30-day window.
Data Security Measures
x baazi implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:
- Transport layer encryption: All communications between your device and the x baazi platform are encrypted using TLS 1.2 or higher, with HSTS headers enforced to prevent protocol downgrade attacks.
- Data at rest encryption: Sensitive personal data stored in x baazi databases — including identity records, financial transaction data, and KYC documents — is encrypted at rest using AES-256 encryption.
- Access controls: Internal access to personal data is strictly limited to x baazi personnel with a demonstrated operational need. Role-based access controls (RBAC) are enforced, and all access events are logged and monitored.
- Payment data tokenisation: x baazi does not store raw payment credentials. All payment details are handled via tokenisation, meaning only a non-sensitive reference token — not the underlying account number or card detail — is retained on x baazi systems.
- Penetration testing and vulnerability management: x baazi conducts periodic security assessments including penetration testing and vulnerability scanning to identify and remediate security weaknesses before they can be exploited.
- Incident response: x baazi maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, x baazi will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.
- Staff training: All x baazi personnel with access to personal data receive regular data protection and information security training as a condition of their access privileges.
While x baazi applies industry-standard security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their x baazi account, enable any available two-factor authentication options, and report any suspicious account activity to support immediately.
Amendments and Contact
Changes to this Privacy Policy: x baazi reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated via a notice on the x baazi homepage and/or by email to the address registered on your account. The effective date at the top of this page will be updated accordingly. Continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
Governing language: This Privacy Policy is written in English. In the event of any inconsistency between this English-language version and any translated version, the English version shall prevail.
Complaints: If you believe that x baazi has not handled your personal data in accordance with this Policy, you are encouraged to contact us in the first instance so we can investigate and resolve your concern. Contact the support team via live chat or at [email protected]. We take all data protection complaints seriously and commit to a substantive response within 30 days.
Contact for privacy matters: For any privacy-specific enquiries — including rights requests, data processing questions, or concerns about this Policy — please email [email protected] with the subject line "Privacy Enquiry". Our support team is available 24 hours a day, 365 days a year, with a target live-chat response time of under 2 minutes (BST).
Your Privacy Is Our Priority
Have questions about how x baazi handles your data? Browse our FAQ for quick answers, review our Responsible Gaming page, or head to the x baazi Casino to start playing in a secure, fair-play certified environment.