xbazie Privacy Policy
At xbazie, protecting your personal data is a core responsibility — not an afterthought. This Privacy Policy explains precisely what information we collect when you use the xbazie platform, how that information is used, who it may be shared with, and what rights you hold over your own data. We encourage all players to read this document in full before creating an account.
Information We Collect 01
xbazie collects personal data from players through several channels during the course of their registration, account management, and ongoing use of the platform. We collect only the information that is necessary for the purposes described in this Privacy Policy. The categories of data we collect are described below.
Registration Data: When you create an account on xbazie, we collect your full legal name, date of birth, registered mobile phone number (Bangladesh network), email address, and a username of your choosing. This information is required to create and maintain your account and to verify your identity in accordance with our Know Your Customer (KYC) obligations.
Identity Verification Documents: As part of the KYC process — required before withdrawals are processed — we collect copies of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, or driving licence. We may also collect proof of address documentation such as a recent utility bill or bank statement in your name.
Financial Information: We collect information about the payment methods you use to deposit and withdraw funds on xbazie. For mobile financial services (bKash, Nagad, Rocket, Upay), this includes your registered mobile number. For card payments (Visa, Mastercard), we collect masked card details sufficient for transaction reference — xbazie does not store full card numbers or CVV codes on our servers.
Transaction Data: We maintain a detailed record of all financial transactions conducted through your xbazie account, including deposits, withdrawals, wagers placed, game results, bonuses credited, and promotional rewards. This data is retained for regulatory compliance and account integrity purposes.
Device and Technical Data: When you access xbazie via a web browser or mobile device, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, time zone setting, and session duration. This data is used to optimise platform performance and detect suspicious or fraudulent access patterns.
Behavioural Data: We collect data about how you interact with the xbazie platform, including pages visited, games played, betting patterns, features used, and navigation paths. This data helps us improve the platform experience, personalise content, and fulfil responsible gaming monitoring obligations.
Communications Data: If you contact xbazie customer support via email or live chat, we retain a record of those communications, including the content of your messages, the date and time of contact, and the resolution outcome. This data is used for service quality management and dispute resolution.
Principle of Data Minimisation: xbazie collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect sensitive data categories such as political opinions, religious beliefs, or biometric data unless legally required to do so for identity verification purposes.
Identity Verification
KYC verification using your Bangladesh NID, passport, or driving licence is required before your first withdrawal. Documents are handled with strict confidentiality.
Mobile Banking Data
For bKash, Nagad, Rocket, and Upay transactions, we collect only your registered mobile number for payment processing. Full PIN or wallet credentials are never stored.
Behavioural Analytics
Platform interaction data — including games played and session patterns — is analysed to improve your experience and fulfil our responsible gaming monitoring obligations.
How We Use Your Information 02
xbazie processes personal data collected from players for specific, lawful purposes. We do not use your data for any purpose that is incompatible with those described below. The primary legal bases on which we process personal data are: contractual necessity (processing required to deliver the services you have requested), legal obligation (processing required to comply with applicable laws and regulations), and legitimate interests (processing required for our own reasonable business purposes, balanced against your rights).
The following table summarises the key purposes for which xbazie processes your personal data:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, device data | Contractual necessity |
| Identity verification (KYC) | Identity documents, registration data | Legal obligation |
| Processing deposits and withdrawals | Financial information, transaction data | Contractual necessity |
| Fraud and AML monitoring | Transaction data, device data, behavioural data | Legal obligation / Legitimate interests |
| Responsible gaming monitoring | Behavioural data, transaction data | Legal obligation / Legitimate interests |
| Customer support | Communications data, account data | Contractual necessity |
| Platform improvement and analytics | Behavioural data, technical data | Legitimate interests |
| Marketing communications | Registration data, behavioural data | Consent (opt-in) |
| Dispute resolution | Transaction data, communications data | Legitimate interests / Legal obligation |
Marketing Communications: xbazie may send you promotional emails and SMS messages about new games, bonuses, seasonal offers (such as BPL cricket season promotions or Eid special offers), and platform updates. Marketing communications are sent only to players who have provided explicit opt-in consent at the time of registration or subsequently through their account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected].
Automated Decision-Making: xbazie uses automated systems to monitor for fraudulent activity, responsible gaming risk indicators, and AML compliance triggers. Where an automated process results in a restriction being applied to your account (such as a temporary freeze or enhanced verification request), you have the right to request human review of that decision by contacting our support team.
Lawful Processing Only
Every category of data processing at xbazie is grounded in a recognised legal basis — contractual necessity, legal obligation, legitimate interests, or your explicit consent.
Opt-Out of Marketing
Marketing messages are sent only with your consent. You may withdraw that consent at any time through your account settings or by emailing our support team.
Human Review Available
If an automated system places a restriction on your account, you may always request a human review of that decision by contacting xbazie customer support.
Data Sharing & Third Parties 03
xbazie does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with external parties only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.
Payment Service Providers: To process deposits and withdrawals, xbazie must share relevant transaction data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment channels. These providers receive only the minimum information required to execute the transaction and are bound by their own privacy and security obligations.
Game Content Providers: xbazie's casino and crash game content is supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session and game-round data for the purpose of game integrity verification and RNG audit compliance. They do not receive your personal registration details.
Identity Verification Services: xbazie works with third-party KYC and identity verification service providers who process identity document data on our behalf. These providers operate under strict data processing agreements and are required to handle your identity documents with the same standard of confidentiality as xbazie itself.
Fraud Prevention and AML Partners: xbazie may share data with specialist fraud detection and anti-money laundering analytics providers for the purpose of identifying and preventing financial crime. These providers process data under contractual obligations consistent with applicable data protection standards.
Legal and Regulatory Disclosure: xbazie may be required to disclose personal data to law enforcement agencies, regulatory authorities, or judicial bodies in response to a valid legal request, court order, or regulatory directive. In such cases, xbazie will disclose only the data specifically requested and will, where legally permitted, notify the affected account holder of the disclosure.
Business Transfers: In the event that xbazie undergoes a merger, acquisition, restructuring, or sale of assets, player personal data may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, affected players will be notified and the acquiring entity will be required to honour the commitments made in this Privacy Policy.
All third-party data processors engaged by xbazie are subject to written data processing agreements that impose obligations consistent with applicable data protection principles, including requirements around data minimisation, purpose limitation, security standards, and restrictions on onward transfer.
No Data Sales: xbazie does not and will not sell your personal data to any third party for advertising, marketing profiling, or any other commercial purpose. Data sharing is strictly limited to the service delivery and compliance purposes listed above.
Payment Processors
Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard only to execute your deposit and withdrawal requests. No additional data is disclosed.
Legal Compliance
xbazie may disclose data to law enforcement or regulatory bodies only in response to a valid legal request. Where permitted, we notify affected players of any such disclosure.
Binding Data Agreements
Every third-party processor handling xbazie player data is bound by a formal data processing agreement that enforces security, minimisation, and purpose-limitation standards.
Data Security Measures 05
xbazie implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following measures are maintained as part of our standard security infrastructure:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the xbazie platform is encrypted using industry-standard 256-bit SSL/TLS encryption. This applies to all connections, including the login page, account management, deposit and withdrawal flows, and customer support interfaces.
- Encrypted Data Storage: Sensitive personal data held in xbazie databases — including identity document details and financial information — is stored using encryption at rest. Encryption keys are managed separately from the encrypted data.
- Access Controls: Access to systems containing player personal data is restricted to authorised xbazie personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all internal systems access.
- Regular Security Audits: xbazie engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform infrastructure. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
- Intrusion Detection: Network-level intrusion detection and prevention systems monitor xbazie infrastructure continuously. Automated alerts notify the security team in real time when anomalous access patterns are detected.
- Data Breach Response: In the event of a confirmed personal data breach, xbazie will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. Affected players will receive guidance on protective steps they should take.
While xbazie takes all reasonable and technically feasible steps to secure your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their xbazie accounts, enable two-factor authentication where available, and contact us immediately at [email protected] if they suspect unauthorised access to their account.
Your Role in Security: Account security is a shared responsibility. xbazie secures the platform — you secure your credentials. Use a strong, unique password and never share your login details, OTPs, or payment PINs with anyone, including persons claiming to be xbazie staff.
256-bit SSL Encryption
Every connection to xbazie — including login, deposits, withdrawals, and account management — is protected by 256-bit SSL/TLS encryption at all times.
Penetration Testing
Independent security professionals conduct regular penetration tests and vulnerability assessments of xbazie's infrastructure to identify and address potential weaknesses before they can be exploited.
Breach Notification
In the event of a confirmed data breach, xbazie will notify affected players promptly and provide clear guidance on the protective steps they should take to secure their accounts.
Data Retention Policy 06
xbazie retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by xbazie:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML regulatory compliance |
| Identity verification documents | Duration of account + 5 years post-closure | KYC legal obligation |
| Transaction records | Duration of account + 7 years post-closure | Financial audit requirements |
| Betting and game history | Duration of account + 3 years post-closure | Dispute resolution, responsible gaming review |
| Customer support communications | 3 years from last interaction | Service quality and dispute records |
| Device and technical logs | 13 months rolling | Security monitoring and fraud detection |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.
If you request deletion of your personal data before the end of the applicable retention period, xbazie will honour that request to the extent permitted by law. Where a legal or regulatory obligation requires us to retain specific data for a defined minimum period, we will explain this to you at the time of your request and delete the data as soon as the mandatory retention period expires.
Defined Retention Periods
xbazie applies clearly defined retention periods to each category of personal data. We do not retain data beyond what is necessary for legal compliance and service delivery.
Secure Data Deletion
When retention periods expire, data is securely deleted or irreversibly anonymised. Anonymised statistical data may be retained indefinitely as it no longer identifies any individual.
AML Compliance Retention
Transaction records and KYC documents are retained for a minimum of 5–7 years post-account closure in accordance with anti-money laundering regulatory requirements.
Your Data Rights 07
As a player on the xbazie platform, you hold a number of rights in relation to your personal data. xbazie is committed to respecting and facilitating the exercise of these rights in a timely and transparent manner. Your rights are described below:
- Right of Access: You have the right to request a copy of the personal data that xbazie holds about you. We will provide this information in a clear, structured format within 30 days of receiving your verified request.
- Right to Rectification: If any personal data held by xbazie is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings; for changes to identity documents or other sensitive records, please contact [email protected].
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. This right is subject to our legal and regulatory retention obligations as described in Section 06.
- Right to Restrict Processing: You have the right to request that xbazie restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed.
- Right to Data Portability: Where data is processed on the basis of your consent or on the basis of contractual necessity, you have the right to receive a copy of your personal data in a machine-readable format (such as CSV or JSON), suitable for transfer to another service provider.
- Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. Where you object, xbazie will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
- Rights Related to Automated Decision-Making: Where a significant decision affecting your account is made through automated means, you have the right to request human review of that decision, as described in Section 02.
To exercise any of the rights listed above, please submit a written request to [email protected]. We may ask you to verify your identity before processing the request. We aim to respond to all data rights requests within 30 days. If we are unable to fulfil your request within this period, we will notify you and provide a reason for the delay.
How to Submit a Request: Email your data rights request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". Include a brief description of the right you wish to exercise. We will acknowledge your request within 3 working days and respond in full within 30 days.
Access Your Data
Request a complete copy of all personal data xbazie holds about you at any time. We will provide it in a structured, readable format within 30 days of your verified request.
Correct Your Data
If any information xbazie holds about you is inaccurate or out of date, you have the right to request a correction. Some details can be updated directly through your account settings.
Request Erasure
You may request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations under AML and KYC regulations.
Updates to This Policy 08
xbazie reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this Policy, we will take reasonable steps to bring those changes to your attention.
Notification of Changes: Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — xbazie will notify registered players via their registered email address and/or via a prominent notice on the xbazie platform no less than 14 days before the change takes effect. For minor changes (such as typographical corrections or clarifications that do not alter the substance of the Policy), we may update the document without advance notice.
Effective Date: The effective date at the top of this Privacy Policy reflects the date on which the current version came into force. The version date will be updated each time the Policy is revised. We encourage players to review this page periodically to stay informed about how xbazie handles their personal data.
Continued Use Constitutes Acceptance: By continuing to use the xbazie platform after a revised Privacy Policy has come into effect, you are considered to have acknowledged and accepted the updated terms. If you do not agree with the revised Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].
Contacting Us About This Policy: If you have any questions, concerns, or feedback regarding this Privacy Policy or how xbazie handles your personal data, please reach out to our dedicated support team at [email protected]. We are committed to addressing all privacy-related enquiries promptly and transparently. Our support team operates during Bangladesh Standard Time (BST, UTC+6) business hours and aims to respond to all privacy enquiries within 2 working days.
This Privacy Policy was last reviewed and updated on 1 January 2026. xbazie is committed to maintaining this document as an accurate and up-to-date reflection of our data protection practices for all players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh.
Questions or Concerns? Contact our support team at [email protected] for any privacy-related enquiries. We aim to respond to all privacy questions within 2 working days during BST business hours.
Change Notifications
Material changes to this Privacy Policy will be communicated to your registered email address at least 14 days before taking effect, giving you time to review the updated terms.
Regular Reviews
xbazie reviews this Privacy Policy at least annually and whenever significant changes in data processing practices, technology, or applicable law require an update.
Privacy Enquiries
For any questions about how your data is handled, email [email protected]. Our team operates during BST business hours and responds to all privacy queries within 2 working days.
Questions About Your Privacy?
Our support team is here to help with any data-related questions. You can also explore our FAQ for quick answers, review our Terms & Conditions, or head to the xbazie Casino to start playing.
18+ For adults aged 18 and above only. Please gamble responsibly.