Xbajae Privacy Policy — how we keep your information safe

Xbajae is an online Sports Betting and gaming platform. This privacy policy explains what data is collected from users of the xbajae.best website and mobile app, how that data is used, and how it is kept secure.

By using xbajae's services, you are considered to have read and accepted this Privacy Policy. We want you to make an informed decision before using our platform.

In this policy, "we", "xbajae", or "platform" refers to xbajae.best and its operating entity. "You" or "user" refers to anyone who visits or uses the xbajae website or app.

Xbajae only collects information that is necessary to provide our services. We do not gather data beyond what is needed.

Important to note: xbajae never collects your mobile banking PIN or password. Only your mobile number is required to process transactions.

Xbajae uses the data it collects solely for the purposes listed below. It is not used for any other purpose.

• Account Management: Verifying registration, authenticating logins, and maintaining account security.
• Payment Processing: Processing deposits and withdrawals, and maintaining transaction records.
• Service Improvement: Analyzing feature usage to improve and optimize the platform.
• Customer support: Reviewing past history to resolve issues and provide faster, more effective support.
• Security: Detecting and preventing fraud, money laundering, and other illegal activities.
• Legal Obligations: Maintaining records necessary to comply with applicable laws.
• Relevant Communications: Sending you new offers, payment updates, or important notices — but only with your consent.

Xbajae does not share your data with third parties — with a few limited exceptions that are necessary to provide our services.

• Payment Providers: Only the minimum information required to process transactions is shared with bKash, Nagad, and Rocket. Each of these providers has its own privacy policy.
• Technology Infrastructure: Cloud server and hosting providers may store your data, but they operate under strict agreements and follow xbajae's instructions.
• Legal authorities: xbajae may be legally required to share information with relevant authorities as part of a court order or lawful investigation.
• KYC Verification Provider: An accredited verification service may be used for identity confirmation.

Outside of these exceptions, xbajae does not transfer your personal information to any party for commercial purposes.

Xbajae uses cookies to enhance the user experience on its website. Cookies are small text files stored in your browser.

You can disable cookies at any time from your browser settings. However, disabling essential cookies may prevent login and certain features from working properly.

Xbajae uses industry-standard technology to keep your data secure. Our security framework operates on multiple layers:

• TLS/SSL Encryption: All data transfers are secured with 256-bit encryption.
• Password Hashing: Your password is never stored in plain text — it is hashed using the bcrypt algorithm.
• Two-Factor Verification: OTP verification is required for sensitive activities.
• IP Monitoring: Automatic alerts are triggered when unusual login patterns are detected.
• Firewall & DDoS protection: Server-level intrusion prevention measures.
• Regular Security Audits: Regular security audits are conducted by independent third-party specialists.

Xbajae believes you should have control over your own data. You have the following rights:

Xbajae strictly enforces a policy to keep anyone under 18 off the platform. We do not knowingly collect or store data from minors.

• An age verification process is in place at registration.
• In cases of doubt, you may be asked to provide ID to verify your age.
• If an account belonging to a minor is identified, it will be immediately closed and any balance will be returned without deduction.
• If you suspect someone underage is using an account, please notify us at support@xbajae.best.

Xbajae does not retain data longer than necessary. Retention periods vary depending on the type of data:

• Account Information: For as long as your account remains active. Following account closure, data may be retained for up to 5 years for legal compliance purposes.
• Transaction records: Minimum 5 years — required under anti-money laundering legislation.
• Communication History: Support chat and email records are retained for up to 2 years.
• Log files: Up to 12 months, after which it is automatically deleted.
• Cookies: Session cookies are deleted when the browser is closed. Persistent cookies last up to 1 year.

After the designated retention period, data is securely deleted or anonymised so that individuals can no longer be identified.

Xbajae may update this Privacy Policy when necessary. If changes are made:

• The "Last Updated" date at the top of this page will be changed.
• You will be separately notified at your registered email address for any significant changes.
• Major updates will also be sent as app notifications.

Continued use of xbajae following any changes to this policy will be considered acceptance of the updated terms. Please check this page regularly.

For any questions, complaints, or requests regarding this privacy policy, please contact us through the following:

You can also get initial privacy-related answers via live chat. However, for formal requests such as data deletion or export, it's best to send an email.