xbagie Privacy Policy

1 Introduction

xbagie is Bangladesh's leading online casino and sports betting platform, accessible at xbagie.net. We are committed to protecting the personal data of every player who registers and interacts with our platform. This Privacy Policy sets out in clear, plain English exactly what personal information xbagie collects about you, the purposes for which that information is used, the circumstances in which it may be shared, and the rights and choices available to you with respect to your own data.

This Policy applies to all personal data collected through xbagie.net, including data submitted during account registration, data generated through your use of the sportsbook and casino products, data collected during the identity verification (KYC) process, and data gathered automatically through your device and browser when you visit our platform.

This Privacy Policy should be read in conjunction with xbagie's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference. By accepting this Privacy Policy, you also confirm your acceptance of those documents.

2 Data Controller

For the purposes of this Privacy Policy, xbagie acts as the data controller in respect of all personal data collected and processed through the xbagie.net platform. As data controller, xbagie determines the purposes for which, and the means by which, your personal data is processed.

If you have any questions, concerns, or requests relating to the way in which xbagie processes your personal data, you may contact our Data Privacy team directly using the contact details provided in Section 14 of this Policy. We are committed to responding to all data-related enquiries within a reasonable timeframe and, in respect of formal data subject rights requests, within 30 calendar days of receipt.

3 Information We Collect

3.1 Registration Data

When you create an xbagie account, we collect the following personal information that you provide directly:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (to verify that you meet the 18+ age requirement).
• Residential address, including district, division, and postal code within Bangladesh.
• Mobile phone number registered in Bangladesh (used for account verification and communications).
• Email address (used for account notifications and support correspondence).
• Username and encrypted password (credentials used to access your account).

3.2 Identity Verification (KYC) Data

To comply with our obligations relating to player identity verification and to process withdrawal requests, we may collect copies of the following documents:

• National Identity Card (NID), passport, or driving licence — front and back.
• Proof of residential address: a recent utility bill, bank statement, or government-issued document displaying your name and address, dated within the past three months.
• Proof of payment method ownership: a screenshot or statement from your bKash, Nagad, Rocket, or Upay account, or a bank statement confirming the account belongs to you.
• Source of funds documentation, where requested by the xbagie compliance team.

3.3 Financial Transaction Data

When you make deposits or request withdrawals on xbagie, we record transaction metadata including: the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), the transaction reference number assigned by the payment provider, the amount in Bangladeshi Taka (৳ BDT), the date and time of the transaction in Bangladesh Standard Time (UTC+6), and the transaction status. xbagie does not store full payment card numbers or mobile banking PINs on our servers.

3.4 Behavioural and Usage Data

As you navigate and use xbagie.net, we automatically collect certain technical and behavioural data about your interactions with the platform, including:

• IP address and approximate geolocation (city and country level) derived from your IP address.
• Device type, operating system, browser type and version.
• Pages visited, features used, games played, bets placed, and time spent on each section of the platform.
• Session timestamps — login time, logout time, and duration of each session.
• Referring URL (the page or search engine result from which you arrived at xbagie.net, if applicable).

3.5 Communications Data

When you contact xbagie's support team via email, we retain records of your communications, including the content of your messages and our responses. This data is used to resolve your query, maintain quality assurance, and as a reference in any subsequent disputes. Support communications are stored for a period of up to 3 years from the date of the interaction.

4 How We Use Your Data

xbagie uses the personal data it collects for the following defined purposes only:

xbagie does not use automated decision-making or profiling that produces legal or similarly significant effects on individual players without human review. Where automated tools are used in fraud detection or responsible gaming monitoring, flagged cases are reviewed by a member of our compliance team before any account action is taken.

5 Legal Basis for Processing

xbagie processes personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between xbagie and the player — specifically, to operate the player's account, accept bets, process payments, and provide the services described in the Terms & Conditions.
• Legal obligation: Processing is necessary to comply with applicable legal obligations, including identity verification requirements, financial crime prevention obligations, and record-keeping requirements.
• Legitimate interests: Processing is necessary for the legitimate interests of xbagie, including fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by the interests or rights of the individual player.
• Consent: Where xbagie seeks to send you optional promotional communications (bonus offers, seasonal promotions, new product announcements), we will do so only with your explicit, freely given consent. You may withdraw this consent at any time by contacting [email protected] or updating your communication preferences within your account settings.

6 Data Sharing

6.1 Payment Processors

To process your deposits and withdrawals, xbagie shares relevant transaction data with the payment providers you have selected, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Data shared with payment processors is limited to what is strictly necessary to complete the transaction and is governed by the respective provider's own privacy policies.

6.2 Game Studio Providers

Casino and live dealer games on xbagie are powered by third-party studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. When you play a game from these studios, a session identifier is passed to the relevant studio's platform to authenticate your session and load the game. No personally identifiable information beyond the session token is shared with game studios in the normal course of gameplay.

6.3 Compliance and Legal Disclosure

xbagie may disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where it is legally required to do so, or where xbagie reasonably believes that such disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, disclosure will be limited to what is required by the applicable legal obligation or lawful request.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of xbagie's business assets, personal data held by xbagie may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, xbagie will take reasonable steps to ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this Privacy Policy. Players will be notified of any such transfer that materially affects the way their data is handled.

7 Cookies & Tracking

7.1 What Are Cookies

Cookies are small text files placed on your device by xbagie.net when you visit the platform. They allow the site to recognise your device across pages and sessions, maintain your login state, and gather aggregated usage statistics that help us improve the platform.

7.2 Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without breaking core platform functionality.
• Performance Cookies: Used to collect anonymised data about how players navigate the platform — which pages are most visited, where players encounter errors, and how long pages take to load. This data is used solely to improve platform performance and user experience.
• Functional Cookies: Remember your preferences such as your selected language, odds format, and last-viewed sports or game categories, so that the platform can present a more relevant experience on your return.

7.3 Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core features of xbagie.net. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Edge, and Safari.

xbagie does not use advertising or cross-site tracking cookies. We do not load third-party advertising networks, retargeting pixels, or social media tracking scripts on xbagie.net.

8 Data Security

xbagie takes the security of your personal data seriously and implements a layered set of technical and organisational controls to protect it against unauthorised access, loss, alteration, or disclosure:

• Transport Encryption: All data transmitted between your device and xbagie.net is encrypted using 256-bit SSL/TLS. A valid SSL certificate is maintained at all times. You can verify this by checking for the padlock icon in your browser's address bar when visiting xbagie.net.
• Password Storage: Account passwords are never stored in plain text. They are processed using a strong, salted cryptographic hashing algorithm. Even xbagie support staff cannot view your password — only you know it.
• Access Controls: Access to player personal data within xbagie's internal systems is granted on a strict need-to-know basis. Staff members who do not require access to personal data for their role do not have it. All internal access events are logged and audited.
• Two-Factor Authentication (2FA): xbagie supports 2FA on player accounts. We strongly recommend enabling 2FA in your account security settings to add an additional layer of protection against unauthorised login attempts.
• Infrastructure Security: xbagie's platform is hosted on secured infrastructure with firewall protection, intrusion detection systems, and regular vulnerability assessments. Our technical team monitors for security incidents on a continuous basis.

While xbagie employs industry-standard security measures, no system can be guaranteed to be completely immune to security incidents. In the event of a data breach that materially affects your personal data, xbagie will notify affected players and relevant authorities in accordance with applicable legal obligations, within a timeframe consistent with those obligations.

9 Data Retention

xbagie retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following general retention periods apply:

Where data is retained solely to satisfy a legal or regulatory obligation, access to that data is restricted to compliance personnel and it is not used for any operational purpose. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with xbagie's internal data disposal procedures.

10 Your Rights

As a player on xbagie, you have the following rights in relation to the personal data that xbagie holds about you:

• Right of Access: You have the right to request a copy of the personal data xbagie holds about you, along with information about how it is being used. xbagie will provide this within 30 calendar days of a valid request.
• Right to Rectification: If you believe that any personal data xbagie holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly within your account settings; for KYC document corrections, please contact our support team.
• Right to Erasure: You may request that xbagie delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that xbagie may be required to retain certain data for legal and regulatory compliance purposes, in which case erasure may be limited to data not subject to such obligations.
• Right to Restriction: You may request that xbagie restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes. xbagie will assess your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the rights listed above, please contact xbagie's Data Privacy team at [email protected] with the subject line "Data Rights Request" and include your registered name and account username. We will verify your identity before processing any data rights request to ensure that your data is not disclosed to an unauthorised third party.

11 Children's Privacy

xbagie operates a strict 18+ policy. The platform is not intended for use by individuals under the age of 18, and xbagie does not knowingly collect personal data from anyone under this age. Age verification is carried out as part of the account registration and KYC process.

If xbagie becomes aware that personal data has been collected from an individual who is under 18 years of age, that data will be deleted promptly, the relevant account will be closed, and any funds held in the account will be returned to the originating payment method after deducting any bonus balances, in accordance with xbagie's underage gambling policy set out in the Terms & Conditions.

If you are a parent or guardian and believe that your child has registered an account on xbagie, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12 Third-Party Links

xbagie.net may contain references to third-party services, such as payment providers (bKash, Nagad, Rocket) and game studios (Pragmatic Play, Evolution Gaming). When you access these third-party services from xbagie.net, you leave the xbagie platform and are subject to the privacy policies of those third parties. xbagie has no control over, and accepts no responsibility for, the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any third-party service you use in connection with your xbagie account.

13 Policy Updates

xbagie reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When a material change is made to this Policy, the updated version will be published on this page with a revised effective date, and registered players will be notified via the email address registered to their account.

Your continued use of xbagie.net following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease use of the platform and may request account closure in accordance with the procedure described in xbagie's Terms & Conditions.

We recommend checking this page periodically to stay informed about how xbagie protects your personal data. The "Last Reviewed" date at the top of this page indicates when the Policy was most recently assessed and updated.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how xbagie handles your personal data, please contact us using the details below. All privacy-related communications must be submitted in English.

xbagie is committed to resolving all data privacy concerns promptly and transparently. If you are not satisfied with our response to your privacy concern, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction.