Legal

xabj Privacy Policy — How We Handle Your Data

Your privacy matters to xabj. This policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over your own data.

Last updated: January 2026. This policy supersedes all previous versions.

1. Introduction

xabj ("xabj", "we", "us", "our") operates the online gaming platform accessible at xabj.org. We are committed to protecting the personal information of all players and visitors who use our platform. This Privacy Policy sets out in clear terms what data xabj collects, the purposes for which it is processed, the legal grounds upon which processing takes place, and the rights available to you as a data subject.

By registering an account with xabj or by using any part of the xabj platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, please do not register an account or use the xabj platform.

This Privacy Policy applies to all users of the xabj platform, including players located in Bangladesh and any other jurisdiction from which the platform may be accessed. xabj does not knowingly collect personal data from persons under 21 years of age. If you are under 21, do not use the xabj platform or submit any personal information to us.

2. Information We Collect

xabj collects personal information that you provide to us directly, information generated by your use of the platform, and in some cases information obtained from third-party payment processors and identity verification services. The categories of personal data we collect are set out below.

Identity and Contact Information
Full name, date of birth, Bangladeshi mobile phone number, email address, and residential address. This information is collected during account registration and may be supplemented by identity verification documents such as a National ID card or passport if KYC verification is required.
Financial and Transaction Data
Records of all deposits and withdrawals made via bKash, Nagad, Rocket, Upay, or bank transfer, including transaction reference numbers, amounts, timestamps, and the mobile wallet or bank account identifiers associated with each transaction. xabj does not store full bank account credentials or mobile banking PINs.
Technical and Device Data
IP address, device type, operating system, browser type and version, device identifiers, screen resolution, time zone, and session duration. This data is collected automatically when you access the xabj platform and is used for security, fraud detection, and platform optimisation purposes.
Gaming and Betting Activity Data
Records of all games played, bets placed, bet amounts, outcomes, bonus claims, wagering history, and session activity logs. This data is necessary for the operation of the platform, resolution of disputes, detection of prohibited conduct, and fulfilment of responsible gaming obligations.

3. How We Use Your Information

xabj uses the personal information it collects for the following purposes: to create and manage your account; to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; to provide access to games and betting markets; to verify your identity and age in accordance with our 21+ policy; to detect, investigate, and prevent fraudulent activity, money laundering, and violations of our Terms and Conditions; and to provide customer support.

xabj also uses your data to send you communications relating to your account, including transaction confirmations, security alerts, and responses to your support requests. Where you have opted in to marketing communications, xabj may send you promotional information about bonuses, new games, and seasonal offers relevant to your location in Bangladesh. You may opt out of marketing communications at any time by contacting xabj support.

xabj uses gaming activity data to fulfil its responsible gaming obligations, including monitoring for patterns of play that may indicate problem gambling behaviour, applying deposit limits or session restrictions where requested by a player or required by xabj's responsible gaming policy, and responding to self-exclusion requests. xabj takes these obligations seriously and uses data analysis as a tool for player protection, not for commercial advantage.

xabj processes personal data only where there is a lawful basis for doing so. The legal bases upon which xabj relies when processing your personal data are as follows.

  • Contractual necessity — Processing your identity information, financial data, and gaming activity data is necessary to perform the contract between you and xabj, including creating your account, processing your transactions, and providing access to games and betting markets.
  • Legal obligation — xabj is required by applicable law to verify the identity of its players (KYC), maintain records of financial transactions for anti-money laundering purposes, and cooperate with law enforcement where required.
  • Legitimate interests — xabj processes technical and device data on the basis of its legitimate interests in maintaining platform security, detecting and preventing fraud, improving the performance of the platform, and conducting responsible gaming monitoring.
  • Consent — Where xabj sends marketing communications, it does so on the basis of your consent, which you may withdraw at any time. Withdrawing consent for marketing does not affect the lawfulness of any processing already carried out or processing for non-marketing purposes.

5. Sharing Your Information

xabj does not sell your personal data to third parties. xabj shares personal data only in the following limited circumstances: with payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners) to the extent necessary to process your transactions; with game providers (including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi) to the extent necessary to deliver game services; with identity verification and KYC service providers for the purpose of verifying your identity; and with law enforcement or regulatory authorities where required by applicable law.

All third parties with whom xabj shares personal data are contractually required to process that data only for the specified purpose and to maintain appropriate technical and organisational security measures. xabj does not permit third-party service providers to use your personal data for their own marketing purposes.

xabj will never sell, rent, or trade your personal data to any unaffiliated third party for their own use. Any sharing of data takes place only as described in this Privacy Policy and only to the extent strictly necessary for the identified purpose.

6. Payment Data and Financial Information

All payment transactions on the xabj platform are processed through our payment partners' secure systems. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is authenticated and processed directly by the relevant payment provider using their own security infrastructure. xabj receives confirmation of the transaction outcome and the associated transaction reference, but does not receive or store your mobile banking PIN, one-time password (OTP), or the full credentials of your mobile wallet account.

For withdrawals, xabj requires you to provide the mobile wallet number or bank account details to which funds should be sent. This information is used solely to process the withdrawal and is stored securely within your account record. xabj verifies that withdrawal destinations match the payment methods on record for your account before processing any withdrawal request, as a measure to protect against unauthorised withdrawal attempts.

7. Cookies and Tracking Technologies

xabj uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. xabj uses session cookies (which expire when you close your browser) to keep you logged in during your gaming session, and persistent cookies (which remain on your device until they expire or are deleted) to remember your preferences and improve your experience on return visits.

xabj also uses analytical cookies to understand how players interact with the platform — for example, which pages are visited most frequently and how long players spend on each section. This data is processed in aggregate and is not used to identify individual players for marketing profiling purposes. You may control cookie settings through your browser's privacy settings, though disabling certain cookies may affect the functionality of the xabj platform.

8. Data Retention

xabj retains your personal data for as long as your account remains active and for a period after account closure as required by applicable law and our internal data retention policy. Financial transaction records and identity verification data are retained for a minimum of five years following account closure to comply with anti-money laundering and financial record-keeping obligations. Gaming activity logs are retained for a minimum of three years.

Where personal data is retained solely on the basis of a legal obligation, it is not used for any other purpose during the retention period. At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Data Security

xabj implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly to reflect changes in technology and the threat landscape. While xabj takes data security seriously, no method of electronic transmission or storage is completely secure, and xabj cannot guarantee absolute security of your data.

SSL Encryption
All data transmitted between your device and the xabj platform is protected using SSL (Secure Sockets Layer) encryption. This ensures that your personal information, account credentials, and transaction data cannot be intercepted by unauthorised parties during transmission. Look for the padlock icon in your browser address bar to confirm that your connection to xabj.org is encrypted.
Access Controls
Access to personal data within xabj is restricted to employees and contractors who have a legitimate need to access it for the purposes described in this Privacy Policy. All personnel with access to personal data are subject to confidentiality obligations. xabj conducts regular internal reviews of data access permissions to ensure that access remains proportionate to operational requirements.

10. Your Rights

As a user of the xabj platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact xabj customer support. xabj will respond to all data rights requests within a reasonable timeframe and will not charge a fee for handling your request unless the request is manifestly unfounded or excessive.

  • Right of access — You have the right to request a copy of the personal data that xabj holds about you, along with information about how it is being processed.
  • Right of rectification — You have the right to request that xabj correct any inaccurate or incomplete personal data held about you. xabj will action valid rectification requests promptly.
  • Right of erasure — In certain circumstances, you have the right to request that xabj delete your personal data. This right is subject to limitations where xabj is required to retain data to fulfil legal obligations or to defend legal claims.
  • Right to restrict processing — You have the right to request that xabj restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing on grounds of legitimate interests.
  • Right to data portability — Where processing is carried out on the basis of your consent or a contract, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

To exercise any of the above rights, please contact the xabj support team through live chat on the platform or via the email address displayed in the website footer. xabj may need to verify your identity before actioning any data rights request to ensure that personal data is not disclosed to an unauthorised person.

11. Children's Privacy

The xabj platform is strictly for persons aged 21 and above. xabj does not knowingly collect, solicit, or process personal data from persons under 21 years of age. If xabj becomes aware that personal data has been collected from a person under 21 without appropriate verification having been carried out, xabj will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to xabj, please contact our support team immediately so that we can take appropriate action.

12. Changes to This Privacy Policy

xabj reserves the right to update or amend this Privacy Policy at any time. When material changes are made, xabj will notify registered players via the platform or by email to the contact address on their account. The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of the xabj platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how xabj collects, uses, and protects your personal information. The date at the top of this page indicates when the policy was last updated. If you have any questions about changes to this Privacy Policy, please contact xabj support.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which xabj processes your personal data, please contact the xabj data support team. Our team is available 24 hours a day, seven days a week, via live chat on the platform or by email at the address displayed in the footer of this website.

xabj is committed to handling all privacy-related enquiries with care and discretion. All requests are acknowledged promptly and handled in accordance with our internal data protection procedures. Where a request requires additional verification of your identity, xabj will contact you to request the necessary documentation before proceeding.

Ready to Explore xabj?

Your data is protected every step of the way. Jump into our games, check out the FAQ for quick answers, or head to the xabj Casino to get started.

Visit xabj Casino Read Our FAQ