xbazi Privacy Policy

Privacy at a Glance

Introduction

xbazi ("the Platform", "we", "us", "our") is committed to protecting the privacy of everyone who uses our online casino and sports betting services at https://xbazi.club. This Privacy Policy sets out in clear terms what personal data we collect from you, how we use it, who we share it with, how long we keep it, and what rights you hold in relation to your data.

This Privacy Policy applies to all players, visitors, and users who access the xbazi platform, regardless of the device or location from which they access it. By registering for an xbazi account or using any part of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described within it.

Information We Collect

xbazi collects personal data through three primary channels: information you provide directly when registering or transacting, information generated automatically through your use of the platform, and information received from trusted third-party partners. The categories of data we collect are as follows.

Information You Provide Directly

• Identity data: full name, date of birth, and National ID or passport number (collected for KYC verification purposes).
• Contact data: registered mobile number (Bangladeshi), and email address if provided during registration or account verification.
• Financial data: mobile wallet identifiers (bKash number, Nagad number, Rocket number) used for deposits and withdrawals. xbazi does not store full card numbers or banking credentials.
• Account credentials: username and hashed (encrypted) password. Plain-text passwords are never stored.

Information Generated by Your Use of the Platform

• Transaction data: deposit amounts, withdrawal amounts, bet history, game history, bonus claims, and balance movements — all timestamped in Bangladesh Standard Time (BST, UTC+6).
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and session duration. This data is used for security monitoring and platform optimisation.
• Usage data: pages visited, games played, features accessed, links clicked, and time spent on each section of the platform.

Information Received from Third Parties

• Identity verification data: results of KYC checks conducted by our identity verification partners, including document authenticity outcomes and watchlist screening results.
• Payment processor data: transaction confirmation references and payment status signals received from bKash, Nagad, Rocket, Upay, and card payment processors.
• Fraud and risk signals: data received from fraud prevention and anti-money-laundering screening services used to protect the platform and its players.

How We Use Your Information

xbazi uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent.

• Account management: creating and maintaining your xbazi player account, verifying your identity, and authenticating your login sessions.
• Transaction processing: processing deposits via bKash, Nagad, Rocket, and Upay, and processing withdrawal requests back to your registered payment method.
• Regulatory compliance: fulfilling Know Your Customer (KYC) obligations, anti-money-laundering (AML) screening, and any other applicable legal or regulatory requirements.
• Security and fraud prevention: monitoring account activity for signs of fraud, collusion, bonus abuse, or other prohibited conduct as defined in the xbazi Terms and Conditions.
• Platform improvement: analysing aggregated, anonymised usage data to understand how players interact with the platform and to develop new features and improve existing ones.
• Customer support: responding to enquiries, complaints, and support requests submitted by players via [email protected] or any other support channel.

xbazi does not use your personal data for profiling for direct marketing purposes, and we do not share your data with advertising networks. If you have opted into receiving promotional communications from xbazi, you may opt out at any time by contacting our support team.

Legal Basis for Processing

xbazi processes personal data only where a legitimate legal basis exists for doing so. The legal bases on which we rely are as follows.

• Contractual necessity: processing required to fulfil our obligations under the xbazi Terms and Conditions, including account management, transaction processing, and bonus administration.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC identity verification, AML screening, and responding to lawful requests from authorities.
• Legitimate interests: processing carried out for the purposes of fraud prevention, platform security, and improving the overall quality of the xbazi gaming experience, where these interests are not overridden by your rights.
• Consent: where processing is not covered by any of the above bases (for example, sending optional promotional communications), xbazi will obtain your explicit consent before processing, and you may withdraw that consent at any time.

Sharing Your Information

xbazi does not sell, rent, or trade your personal data. We share your information only with the following categories of third parties, and only to the extent strictly necessary for the purposes described in this Privacy Policy.

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment networks receive the minimum data required to process your deposit or withdrawal transaction securely.
• Identity verification providers: our KYC partners receive identity documents and personal details solely for the purpose of verifying your eligibility to use the platform.
• Fraud and AML screening services: anonymised risk signals and necessary account data are shared with our fraud prevention and anti-money-laundering screening partners to protect the platform and all its players.
• Regulatory and law enforcement authorities: xbazi will disclose personal data to competent authorities where required to do so by applicable law, court order, or binding regulatory direction, without prior notice to the affected player where prohibited by law.

Cookies and Tracking Technologies

xbazi uses cookies and similar tracking technologies to ensure the platform functions correctly, to protect session security, and to understand how players use the platform so we can improve it. We do not use third-party advertising or retargeting cookies.

Types of Cookies We Use

• Essential cookies: required for the platform to function. These include session authentication tokens, anti-CSRF tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
• Analytical cookies: used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where players encounter friction. This data is used solely to improve the platform.
• Preference cookies: used to remember your language preference and certain display settings so that your experience is consistent across sessions.

Most modern browsers allow you to control or delete cookies through your browser settings. Please note that disabling essential cookies will affect the functionality of the xbazi platform and may prevent you from accessing certain features, including logging in and making transactions.

Data Retention

xbazi retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows.

• Active account data: retained for the full duration of your account's active status plus a period of 5 years following permanent account closure, in line with standard AML record-keeping obligations.
• KYC documents: retained for a minimum of 5 years from the date of verification, or longer if required by applicable law or ongoing regulatory proceedings.
• Transaction records: retained for a minimum of 5 years from the transaction date, in line with standard financial record-keeping requirements.

When data is no longer required for any legitimate purpose, xbazi will securely delete or anonymise it. Where anonymisation is not technically feasible, the data will be securely archived and access-restricted until it can be deleted.

Data Security

xbazi takes the security of your personal data seriously and applies a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Key security measures include the following.

• SSL/TLS encryption on all platform sessions, ensuring data transmitted between your device and the xbazi servers cannot be intercepted in transit.
• Encrypted storage of sensitive data fields including hashed passwords, identity document references, and financial identifiers.
• Access controls restricting personal data access to authorised xbazi personnel only, on a need-to-know basis. All data access by staff is logged and audited.
• Regular security reviews and vulnerability assessments of the xbazi platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

Your Privacy Rights

As a player on the xbazi platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within a reasonable timeframe.

• Right of access: you may request a copy of all personal data xbazi holds about you, along with information on how that data is used and with whom it has been shared.
• Right of rectification: you may request correction of any inaccurate or incomplete personal data held about you. Where possible, xbazi will action corrections promptly.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to object: you may object to processing of your personal data where that processing is based on legitimate interests, including profiling for any purpose other than those strictly required to operate your account.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

xbazi will not discriminate against any player for exercising their privacy rights. We may need to verify your identity before actioning a data request to ensure we do not disclose personal data to an unauthorised third party.

Children's Privacy

The xbazi platform is strictly intended for adults aged 21 years and above. xbazi does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

Third-Party Links and Services

The xbazi platform may reference or display the names of third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) and payment partners (such as bKash and Nagad). xbazi does not control the privacy practices of these third parties and is not responsible for their data handling. Any interaction you have directly with a third-party service is governed by that party's own privacy policy.

xbazi is not responsible for the content or privacy practices of any external websites or services that may be referenced in user communications or support materials. We encourage all players to review the privacy policies of any third-party service they interact with.

Changes to This Privacy Policy

xbazi reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the effective date shown at the top of this page and, where reasonably practicable, notify registered players via their registered contact details before the changes take effect.

Your continued use of the xbazi platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with any changes to this Privacy Policy, you must stop using the platform and may request account closure by contacting [email protected].

Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or need to submit a data access, correction, or deletion request, please contact the xbazi support team. All privacy-related requests should be submitted in writing so that we can provide a documented response and maintain an accurate record of your request.

Email (plain text — not a link): [email protected]