Data Protection & Privacy
xajee Privacy Policy
Your privacy matters to us. This Privacy Policy explains in plain English exactly what personal information xajee collects from Bangladesh players, how we use it, who we share it with, and the rights you hold over your own data.
Our Commitments
Privacy at a Glance
These cards highlight the core principles guiding xajee's approach to your personal data. The full legal details appear in the sections below and are the operative provisions of this policy.
Minimal Data Collection
xajee collects only the personal data that is genuinely necessary for account management, identity verification, payment processing, and legal compliance. We do not gather data for its own sake.
SSL Encryption
All data exchanged between your browser or mobile device and the xajee platform is protected by industry-standard TLS/SSL encryption. Sensitive information such as payment details is never transmitted in plain text.
No Selling of Data
xajee does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data shared with third parties is limited strictly to what is required to deliver our services to you.
Your Rights Are Protected
You have the right to access, correct, and request deletion of your personal data held by xajee. We provide straightforward mechanisms for exercising these rights through our support team at any time.
Defined Retention Periods
xajee retains personal data only for as long as it is needed for the purpose it was collected, or as required by applicable financial and anti-money laundering regulations. When the retention period expires, data is securely deleted or anonymised.
Transparent Updates
Whenever xajee makes a material change to this Privacy Policy, registered players are notified by email at their registered address and a notice is posted on the platform, giving you the opportunity to review changes before they take effect.
By registering an account with xajee, making a deposit, or continuing to use xajee.net, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the xajee platform immediately.
1 Information We Collect
xajee collects personal data from you through several channels: directly when you register and use our platform, automatically when you interact with our website and applications, and from third-party sources when required for identity verification and payment processing. The categories of personal data we collect are described below.
Registration and Account Data
When you create a xajee account, we collect the following information:
- Full legal name as it appears on your national identity document
- Date of birth (to confirm you are aged 18 or above)
- Residential address, including division (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)
- Email address and mobile phone number registered in your name
- Username and encrypted account password
- National Identity Card (NID) number or passport number, provided during KYC verification
Financial and Transaction Data
To process deposits and withdrawals, and to comply with anti-money laundering (AML) obligations, we collect:
- Mobile banking account numbers linked to bKash, Nagad, Rocket, or Upay
- Bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other bank transfer methods
- Card number (last four digits only), card type (Visa or Mastercard), and billing address where applicable
- A full history of your deposits, withdrawals, wagers, bonuses, and account balance movements
- Transaction reference numbers generated by payment providers
Identity Verification (KYC) Documents
As part of our Know Your Customer programme, we may collect copies or scans of:
- National Identity Card (NID) — front and back
- Passport (data page)
- Proof of address documents such as utility bills, bank statements, or government correspondence dated within the past three months
- Selfie or live photograph for biometric matching, where required by our verification process
Usage and Technical Data
When you access xajee.net, our servers and analytics infrastructure automatically record:
- IP address and approximate geolocation derived from it
- Device type, operating system, and browser version
- Pages visited, sections accessed, time spent, and navigation paths within the platform
- Game sessions played, bet amounts, game outcomes, and in-session behaviour
- Referral URL (the website you arrived from, if any)
- Session timestamps, login times, and logout times
Communications Data
When you contact our support team via live chat or email at [email protected], we retain a record of the communication, including the content of messages, timestamps, and the resolution reached. This enables us to maintain service quality and resolve any follow-up queries efficiently.
Responsible Gaming Self-Declarations
If you voluntarily activate responsible gaming tools such as deposit limits, session time limits, cooling-off periods, or self-exclusion, we record these instructions and the dates on which they were set. This data is treated with the highest level of sensitivity and is used solely to enforce the restrictions you have requested.
2 How We Use Your Data
xajee uses the personal data we collect for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. Our primary purposes are as follows:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact details, login credentials |
| Age and identity verification (KYC) | Date of birth, NID/passport, selfie, proof of address |
| Processing deposits and withdrawals | Financial data, mobile banking details, card details |
| Fraud detection and AML monitoring | Transaction history, IP address, device data, usage patterns |
| Delivering and improving our gaming services | Usage data, game session data, device and browser data |
| Customer support | Communications data, account data, transaction data |
| Sending service notifications | Email address, mobile number |
| Sending promotional communications (with consent) | Email address, mobile number, game preferences |
| Responsible gaming enforcement | Responsible gaming declarations, game session data, transaction history |
| Legal and regulatory compliance | All categories as required by applicable law |
Marketing Communications
xajee may send you promotional emails or SMS messages about new games, tournaments, seasonal promotions (for example, BPL cricket season, Eid special offers, Pohela Boishakh bonuses), and exclusive player incentives, but only if you have given your explicit consent to receive such communications during registration or subsequently through your account preferences. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
Automated Decision-Making
xajee uses automated processes to detect fraudulent activity, identify duplicate accounts, and flag transactions that exceed internal risk thresholds for AML review. These automated systems do not make final decisions about your account independently — any account action arising from an automated flag is reviewed by a member of our compliance team before being implemented. If you believe an automated decision has affected your account unfairly, you may request human review by contacting [email protected].
3 Legal Basis for Processing
xajee processes your personal data on the following legal bases, depending on the purpose for which the data is used:
- Performance of a contract: Processing your registration data, verifying your identity, and handling your financial transactions are all necessary for us to fulfil the contract we have with you as a registered player on the xajee platform.
- Legal obligation: We are required by applicable financial regulations, AML obligations, and our operational compliance framework to collect and retain certain categories of data — including KYC documents, transaction records, and account activity logs — for defined retention periods.
- Legitimate interests: We process usage data, device data, and fraud indicators to protect the security and integrity of the xajee platform, and to improve our services. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
- Consent: We rely on your consent as the legal basis for sending marketing and promotional communications. You may withdraw consent at any time without penalty.
Where xajee relies on consent as the legal basis for a specific processing activity, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing that took place lawfully before the withdrawal was made.
4 Data Sharing and Disclosure
xajee does not sell, rent, or trade your personal data to third parties for their own purposes. We share your personal data only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:
Payment Processing Partners
To process your deposits and withdrawals, we share the necessary payment details with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These partners receive only the transaction data required to complete the specific payment instruction and are contractually required to handle your data securely and in accordance with applicable standards.
Game Technology Providers
Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical identifiers (such as a session token or anonymised player ID) necessary to deliver game content and to record game outcomes. These providers do not receive your full name, contact details, or financial information.
Identity Verification Services
We use third-party KYC and identity verification service providers to assist in verifying the authenticity of identity documents and confirming that players meet the age and eligibility requirements. These providers process your identity documents and biometric data under strict data processing agreements and are not permitted to use your data for any purpose other than performing the verification service for xajee.
Fraud Prevention and AML Compliance
xajee may share data with third-party fraud prevention and AML screening services to detect and prevent financial crime. These services cross-reference transaction data and account identifiers against shared risk databases. They do not receive unnecessary personal details and are bound by confidentiality obligations.
Legal and Regulatory Disclosure
xajee may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction when required to do so by applicable law, a valid legal process, or a court order. We will notify you of such a disclosure where we are legally permitted to do so.
Business Transfers
In the event that xajee undergoes a merger, acquisition, restructuring, or sale of some or all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, xajee will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations that are at least as protective as this Privacy Policy before any transfer is completed, and we will notify affected players via their registered email addresses.
xajee will never share your personal data with unaffiliated third parties for advertising profiling, data broker activities, or any other commercial purpose that benefits the third party at the expense of your privacy.
5 Cookies and Tracking Technologies
xajee uses cookies and similar tracking technologies on xajee.net to ensure the platform functions correctly, to analyse platform performance, and to deliver a personalised experience to Bangladesh players. This section explains what cookies we use and what choices you have.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — for example, your language preference, login status, or the contents of a session — so that the next page load or your next visit can be quicker and more relevant.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core platform functions: login sessions, security tokens, game loading, payment flow integrity | Session / up to 24 hours |
| Performance / Analytics | Aggregate data on page traffic, load times, error rates, and popular game categories to improve platform performance | Up to 12 months |
| Functional | Remember your display preferences, notification settings, and responsible gaming tool configurations between sessions | Up to 6 months |
| Marketing / Targeting | Measure the effectiveness of promotional campaigns and tailor bonus offers where you have given consent for marketing communications | Up to 90 days |
Managing Your Cookie Preferences
Strictly necessary cookies cannot be disabled as they are essential to the operation of the xajee platform. For all other cookie categories, you may adjust your preferences by modifying the cookie settings in your web browser. The major browsers — Chrome, Firefox, Safari, Edge, and Opera — all provide accessible privacy settings where cookies can be managed or cleared. Note that disabling functional or performance cookies may affect the quality of your experience on the platform but will not prevent you from accessing core gaming and betting services.
Third-Party Analytics
xajee uses anonymised analytics data collected via cookies to understand aggregate usage patterns and improve the platform. The analytics data we collect does not identify you personally — it is aggregated across the entire player base. We do not use analytics cookies to build individual behavioural profiles for sale to third parties.
6 Data Retention
xajee retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML compliance and dispute resolution |
| KYC documents (NID, passport, proof of address) | 5 years after account closure | AML and regulatory compliance obligations |
| Transaction history (deposits, withdrawals, bets) | 5 years after each transaction | Financial record-keeping and AML regulations |
| Customer support communications | 3 years after the support ticket is closed | Quality assurance and dispute resolution |
| Game session logs | 2 years from session date | Integrity verification and dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Responsible gaming tool records | Duration of account + 5 years after closure | Player protection and regulatory obligations |
| Anonymised analytics data | Up to 36 months on a rolling basis | Platform performance analysis |
When the applicable retention period expires, xajee will securely delete or irreversibly anonymise your personal data so that it can no longer be linked back to you. If you request erasure of your data before the end of the applicable retention period and a legal obligation requires us to retain it, we will restrict processing of that data to only what is legally required and will inform you of the reason for the retention.
7 Your Privacy Rights
As a player on the xajee platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at with the subject line "Privacy Rights Request" and your registered email address. We will respond within 30 days of receiving a valid request.
- Right of access: You may request a copy of all personal data we hold about you, together with an explanation of how it is being processed and why.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
- Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where there is no other lawful basis for continued processing. Note that certain data must be retained to meet our legal obligations and cannot be deleted on request alone.
- Right to restrict processing: You may ask us to suspend or limit processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
- Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
- Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling. You also have an absolute right to object to processing of your data for direct marketing purposes, which we will action immediately upon receipt.
- Right to withdraw consent: Where we rely on consent as the legal basis for processing, you may withdraw that consent at any time by updating your communication preferences in account settings or by contacting our support team.
Exercising your privacy rights will not result in any penalty to your xajee account. However, some rights are subject to exemptions where xajee is required by law to retain data — for example, transaction records required for AML compliance. Where an exemption applies, xajee will explain the reason clearly in our response to your request.
8 Data Security
xajee takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:
- TLS/SSL encryption: All data transmitted between your device and xajee.net is encrypted using Transport Layer Security (TLS), ensuring that information cannot be intercepted during transit.
- Password hashing: Account passwords are stored using industry-standard one-way hashing algorithms. xajee never stores passwords in plain text and our staff cannot retrieve your password — only reset it with your verified consent.
- Access controls: Access to personal data within xajee's internal systems is restricted to personnel who require it for their specific job function, and all access is logged and subject to periodic review.
- KYC document security: Identity documents submitted for verification are stored in an encrypted, access-controlled document management system separate from the main account database, with additional access restrictions applied beyond those governing general account data.
- Intrusion detection: xajee operates continuous monitoring and intrusion detection systems on our platform infrastructure to identify and respond to anomalous activity in real time.
- Security audits: Our platform and data handling processes are subject to periodic internal security reviews to identify and remediate potential vulnerabilities.
Data Breach Response
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, xajee will notify affected players without undue delay and will take immediate steps to contain the breach, assess its scope, and implement remediation measures. We will provide clear and practical guidance on any steps you should take to protect yourself following a breach notification.
Your Role in Security
While xajee implements robust security measures on our side, the security of your account also depends on the strength and confidentiality of your own login credentials. Please use a strong, unique password for your xajee account and do not share it with anyone. xajee will never contact you by any channel to request your full password. If you believe your account has been compromised, contact us immediately at [email protected].
9 Third-Party Services and Links
The xajee platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these providers deliver content within the xajee platform environment, they operate under their own privacy policies and data processing practices. xajee enters into data processing agreements with all game providers to ensure appropriate data handling standards are maintained.
Payment Provider Privacy
Payment transactions involving bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners are processed in part on the infrastructure of those respective providers. Each payment provider is governed by its own privacy policy and data practices. xajee recommends reviewing the privacy policies of your chosen payment provider to understand how they handle your transaction data on their end.
No Unaffiliated External Links
xajee does not include links to unaffiliated external websites within the xajee platform. All navigation within xajee.net remains within the platform. Should xajee ever introduce informational links to third-party resources (for example, responsible gaming support organisations), this Privacy Policy will be updated to reflect those additions and to clarify that xajee has no control over the data practices of external sites.
10 Policy Updates and Contact
Changes to This Privacy Policy
xajee reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or the services we offer. When material changes are made — for example, a new category of data being collected, a new third-party data processor being engaged, or a change in the legal basis for a processing activity — xajee will notify registered players by email to their registered address and post a notice on the xajee platform homepage in advance of the changes taking effect.
The "Effective date" and version number at the top of this page will always reflect the date on which the current version came into force. We encourage you to review this Privacy Policy periodically to stay informed about how xajee protects your personal data. Your continued use of the platform after the effective date of any revised policy constitutes acceptance of the changes.
Contact and Privacy Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to make a complaint about how xajee has handled your personal data, please contact us using the following details:
- Email: — use the subject line "Privacy Enquiry" or "Privacy Rights Request"
- Live Chat: Available 24/7 directly within the xajee platform — ask to be connected to the Privacy or Compliance team
- Response time: xajee targets a substantive first response to privacy enquiries within 5 business days, measured in Bangladesh Standard Time (UTC+6)
For questions related to responsible gaming and player protection tools, please visit our Responsible Gaming page. For the full terms governing your use of the xajee platform, please review the Terms & Conditions.
This Privacy Policy applies exclusively to data collected and processed by xajee in connection with the operation of xajee.net and its associated services. It does not apply to data collected by third-party game providers, payment processors, or any other third party whose services are accessed via the xajee platform — please consult their respective privacy policies for information about their data practices.
Explore xajee
Your Data Is Safe — Now Let's Play
Now that you know exactly how xajee protects your privacy, explore our full range of games, live cricket betting, and exclusive promotions built for Bangladesh players.