xbeje Privacy Policy

1. Data Controller Information

For the purposes of this Privacy Policy, xbeje (referred to as "xbeje ", "we", "us", "our") is the data controller responsible for the personal information collected through the xbeje website at https://xbeje.com and its associated services.

As data controller, xbeje determines the purposes for which and the means by which your personal data is processed. xbeje is responsible for ensuring that data processing activities carried out on the platform comply with applicable data protection principles and the obligations set out in this Policy.

For all privacy-related enquiries, data subject requests, or concerns about how xbeje handles your personal information, you may contact us at:

• Email: [email protected] (plain text only — do not send sensitive documents via unencrypted email)
• Platform: Via the in-platform support chat available to registered users

xbeje aims to respond to all privacy-related enquiries within 10 business days of receipt. Complex requests — such as subject access requests requiring extensive data retrieval — may take up to 30 days, in which case we will acknowledge your request and provide an estimated completion date.

2. Information We Collect

xbeje collects personal data through several channels: directly from you when you register or use the platform, automatically through technical systems as you interact with the website, and in limited cases from third-party verification partners. The categories of data collected are described below.

2.1 Registration & Identity Data

When you create an xbeje account, we collect the following information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (required for age verification — xbeje is an 18+ platform)
• Email address and mobile phone number
• Chosen username and hashed password (passwords are never stored in plain text)
• Residential address in Bangladesh (district, city, or area)

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) programme, xbeje may request copies of:

• National Identity Card (NID) or passport
• Proof of address (utility bill, bank statement, or similar document dated within 90 days)
• Selfie or live photograph for biometric matching purposes
• Documentation supporting the source of funds for large transactions

KYC documents are processed and stored securely. They are used exclusively for identity verification, age confirmation, fraud prevention, and compliance with anti-money laundering obligations. They are not used for marketing purposes.

2.3 Financial & Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard, we record:

• Payment method type and masked identifier (e.g., last four digits of a card, or mobile number used for bKash/Nagad)
• Transaction amounts in Bangladeshi Taka (৳)
• Transaction timestamps and reference numbers
• Deposit and withdrawal history associated with your account

xbeje does not store full card numbers or bKash/Nagad PINs. Payment credentials are handled directly by the relevant payment processor under their own security protocols.

2.4 Gameplay & Betting Data

We record your activity on the platform including:

• Games played, bet amounts, game results, and session durations
• Sports betting markets selected, odds accepted, and settlement outcomes
• Bonus claims, wagering progress, and promotional participation history
• Responsible gaming tool activations (deposit limits, self-exclusion requests, cool-off periods)

2.5 Technical & Usage Data

As you browse and use xbeje, our systems automatically collect:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, time spent on pages, and navigation paths
• Referring URL (the page that linked you to xbeje)
• Error logs and performance data used for platform stability monitoring

3. Legal Basis for Processing

xbeje processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

3.1 Contractual Necessity

The majority of processing xbeje carries out is necessary to perform the contract between you and xbeje — that is, to operate your account, process deposits and withdrawals, deliver game sessions, settle bets, and provide customer support. Without this processing, xbeje cannot provide its services to you.

3.2 Legal Obligation

Certain processing activities are required by law, including KYC identity verification, age verification, anti-money laundering (AML) checks, and the retention of financial records. xbeje must carry out these activities regardless of your consent in order to comply with applicable legal obligations. Refusing to provide required KYC documentation may result in restricted access to withdrawal functionality.

3.3 Legitimate Interests

xbeje relies on legitimate interests as a legal basis for processing activities such as fraud detection, platform security monitoring, responsible gaming risk identification, internal analytics for product improvement, and enforcing our Terms and Conditions. In each case, xbeje has assessed that its legitimate interests are not overridden by your privacy interests or fundamental rights.

3.4 Consent

Where xbeje processes data based on your consent — for example, sending you marketing communications about promotions, new games, or seasonal offers — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. You can manage your marketing preferences through your account settings or by contacting [email protected].

4. How We Use Your Data

xbeje uses the personal data it collects for the following specific purposes:

4.1 Account Management & Service Delivery

We use your registration data to create and maintain your account, authenticate your identity when you log in, process your bets and game sessions, credit winnings, and manage your account balance. This processing is fundamental to the operation of the xbeje platform and cannot be opted out of while you hold an active account.

4.2 Payment Processing

Financial data is used to process deposits from bKash, Nagad, Rocket, Upay, and card networks, and to execute withdrawal requests to your registered payment method. We may share transaction details with payment processors and banking partners strictly to the extent required to complete your requested transaction.

4.3 Identity Verification & Fraud Prevention

KYC documents and financial records are used to verify that you are who you claim to be, that you meet the 18+ age requirement, and that your account activity does not indicate money laundering, identity fraud, or multi-accounting. xbeje may use automated screening tools as part of this process, supplemented by manual review where necessary.

4.4 Responsible Gaming Compliance

Gameplay and betting data is used by xbeje's responsible gaming system to identify patterns that may indicate problem gambling behaviour — such as extended session durations, rapid bet escalation, or attempts to circumvent a self-exclusion. Where such patterns are detected, xbeje may proactively contact the account holder or apply protective measures as described in the Responsible Gaming Policy.

4.5 Customer Support

When you contact xbeje's support team, we use your account data, transaction history, and communication records to understand and resolve your query. Support interactions are logged for quality assurance and training purposes and retained for a period consistent with the retention schedule in Section 7.

4.6 Platform Analytics & Improvement

Aggregated and anonymised usage data helps xbeje understand how players navigate the platform, which games and markets are most popular, and where the user experience can be improved. This analysis does not result in decisions that individually affect you and is conducted on anonymised datasets wherever possible.

4.7 Marketing Communications

If you have consented to receive marketing communications, xbeje may use your contact details and gameplay preferences to send you information about promotions, bonus offers, new game releases, and seasonal events relevant to players in Bangladesh (such as BPL season offers or Eid promotions). You may withdraw consent for marketing communications at any time by updating your account preferences or contacting [email protected].

5. Data Sharing & Third Parties

xbeje does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.1 Payment Processors

To process your deposits and withdrawals, xbeje shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, SureCash, and card network processors (Visa, Mastercard). Each payment processor operates under its own privacy policy and security standards. xbeje is not responsible for the data-handling practices of payment processors once data has been transmitted to them for transaction execution.

5.2 Game Content Providers

xbeje integrates games supplied by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account identifier and gameplay session data in order to deliver their games and generate real-time results. Personal identification details (such as your full name or NID) are not shared with game studios.

5.3 Identity Verification Partners

xbeje may use third-party KYC and AML screening services to assist with identity verification and fraud detection. These partners process your KYC documentation under strict data-processing agreements and are prohibited from using your data for any purpose other than the verification service contracted by xbeje.

5.4 Legal & Regulatory Disclosure

xbeje may disclose personal data to law enforcement authorities, regulatory bodies, or other government agencies where required by applicable law, court order, or lawful investigative request. Where permitted by law, xbeje will attempt to notify you of such a disclosure request before complying, unless doing so would compromise an investigation or is prohibited by the terms of the request.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of xbeje's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and any material change to the applicable privacy terms at the email address registered to your account, with a reasonable period to review the change before it takes effect.

6. Cookies & Tracking Technologies

xbeje uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how the site is used. This section explains what types of cookies we use and how you can manage them.

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during a game session, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure your requests are served by a stable server node. No personal information beyond a session identifier is stored in strictly necessary cookies.

6.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred language display, your last-visited game lobby section, or your responsible gaming dashboard settings. Disabling functional cookies will not prevent you from using the platform, but may result in a less personalised experience and require you to reconfigure preferences on each visit.

6.3 Analytics Cookies

xbeje uses analytics tools to understand platform usage patterns. Analytics cookies collect aggregated, anonymised data about pages visited, session length, and feature engagement. This data is used to improve platform performance and user experience. Analytics cookies do not collect personally identifiable information and do not track your activity across other websites.

6.4 Managing Cookies

You can control and delete cookies through your browser settings. Instructions for managing cookies in popular browsers are available in the browser's help documentation. Please be aware that disabling certain categories of cookies may impair the functionality of the xbeje platform, particularly session-related features. xbeje does not currently respond to browser-level "Do Not Track" signals, as there is no agreed industry standard for how such signals should be interpreted.

7. Data Retention

xbeje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by xbeje:

Once a retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with an individual. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or court order, it will be retained until the matter is resolved and then deleted promptly.

Players who request account closure should be aware that xbeje is not able to immediately delete all personal data upon closure. Retention obligations under applicable law — particularly AML and financial record-keeping requirements — mean that certain data categories will be held for the periods shown in the table above even after an account is closed.

8. Your Rights & Choices

xbeje respects your rights over your personal data. The following rights are available to you in relation to the personal data xbeje holds about you. To exercise any of these rights, contact [email protected] with a clear description of your request and sufficient information to allow us to identify your account.

8.1 Right of Access

You have the right to request a copy of the personal data xbeje holds about you, along with information about how it is used, who it is shared with, and how long it is retained. We will provide this information within 30 days of receiving your request. For large or complex requests, we may request a brief extension and will notify you accordingly.

8.2 Right to Rectification

If any personal data xbeje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections — such as a name change following a legal name change — may require supporting documentation before the update can be applied.

8.3 Right to Erasure

In certain circumstances, you may request that xbeje delete personal data it holds about you. This right is not absolute — xbeje is not obliged to delete data where retention is required by law (for example, financial transaction records subject to AML obligations) or where the data is needed to defend a legal claim. Where erasure is not possible, xbeje will explain why and describe any applicable restrictions.

8.4 Right to Restrict Processing

You may request that xbeje temporarily restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while you are considering whether to object to processing based on legitimate interests. Restricted data will continue to be stored but not actively processed.

8.5 Right to Object

Where xbeje processes your data on the basis of legitimate interests, you have the right to object to that processing. xbeje will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

8.6 Right to Withdraw Marketing Consent

If xbeje sends you marketing communications on the basis of your consent, you may withdraw that consent at any time by updating your communication preferences in your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect other processing activities that rely on a different legal basis.

9. Data Security

xbeje implements a layered security architecture designed to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Encryption in transit: All communications between your device and xbeje's servers are encrypted using TLS 1.2 or higher, providing 256-bit SSL protection. This applies to all pages of the platform, including login, deposit, and withdrawal flows.
• Encryption at rest: Sensitive personal data stored in xbeje's databases — including identity documents and payment information — is encrypted using AES-256 encryption.
• Access controls: Internal access to personal data is governed by role-based access controls. Only personnel with a verified need to access specific categories of data are authorised to do so. All access is logged and audited.
• Password security: User passwords are never stored in plain text. xbeje applies industry-standard one-way hashing with salt to all stored passwords, meaning that even in the event of a data breach, your password cannot be retrieved from stored data.
• Network security: xbeje's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing carried out by independent security specialists.
• Incident response: xbeje maintains a data breach response plan. In the event of a security incident affecting your personal data, xbeje will notify affected users at their registered email address without undue delay and will describe the nature of the incident, the data affected, and the steps taken to mitigate harm.

Despite these measures, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong, unique password, not sharing your credentials, and notifying xbeje immediately if you suspect unauthorised access to your account.

10. Updates to This Policy

xbeje reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made to this Policy, xbeje will notify registered users via the email address on file and will post the updated Policy on this page with a revised effective date.

Material changes include, but are not limited to: new categories of personal data being collected, new purposes for which existing data is used, new third-party sharing arrangements, and significant changes to retention periods or user rights. Minor clarifications or corrections to language that do not alter the substance of the Policy may be made without individual notification.

Your continued use of the xbeje platform after the revised Policy has been posted and any required notice period has elapsed constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you should stop using the platform and may request account closure in accordance with the Terms and Conditions.

We recommend bookmarking this page and checking it periodically. The current version of this Privacy Policy is always the version published at https://xbeje.com/privacy-policy. This Policy was last updated and became effective on 1 January 2026.

For any questions about this Privacy Policy or xbeje's data-handling practices, please contact us at [email protected]. We are committed to handling your data responsibly and to answering your questions clearly.