Data Protection Policy

Xbazi Privacy Policy – How Your Personal Information Is Kept Safe

At xbazi, your privacy is our highest priority. This policy clearly explains what information we collect, how we use it, and what rights you have.

Last Updated: June 2026 Language: Bengali (bn-BD) GDPR Compliant SSL Secured
🔐 Our Data Protection Commitment
🔒
256-bit SSL Encryption
All Data Transmissions Are Encrypted
🚫
Never sold to third parties
Your data is never sold or shared
You're in Control of Your Data
Correct or delete your information at any time
🛡️
Regular Security Audits
Verification by Independent Third Parties

How do we protect your information?

Xbazi's Six Core Pillars of Data Protection

Level 1
🔐
Encryption Technology

256-bit AES encryption is applied to all stored and transmitted data — the highest security standard in the banking industry.

Level 2
🧱
Firewall & DDoS Protection

Advanced firewalls and DDoS protection safeguard xbazi's servers against cyberattacks, with 24/7 security monitoring in place.

Level 3
👁️
Minimum Data Collection Policy

Xbazi collects only the information strictly necessary to provide its services. No unnecessary personal data is ever requested.

Level 4
🗄️
Secure Data Centers

Your data is stored in ISO 27001-certified data centers, protected by both physical and digital security layers.

Level 5
🧪
Regular Penetration Testing

Independent cybersecurity experts regularly audit xbazi's systems to identify and address vulnerabilities.

Level 6
📋
Staff Training

All xbazi staff undergo rigorous data protection training. Access to user information is strictly limited on a need-to-know basis.

📌
Section 1

Introduction & Scope of This Policy

This Privacy Policy ("Policy") Explains in detail how personal information of xbazi platform users is collected, used, stored, and protected. xbaziBy using -'s website, mobile application, or any other digital platform, you are deemed to have accepted the terms of this policy.

Xbazi believes that personal privacy is a fundamental right. We handle your information with the utmost respect and protection. This policy is aligned with the GDPR (General Data Protection Regulation) and international data protection standards.

Important: This policy may be updated at any time. For significant changes, a notice will be sent to your registered email address. Please refer to the "Last Updated" date at the top of this page.

Xbazi services are available to users aged 18 and above only. We do not knowingly collect any information from minors.

📊
Section 2

What Types of Data We Collect

Xbazi only collects data that is necessary to deliver its services and maintain security. Our data collection falls into two main categories:

2.1 Information You Provide Directly

  • Identity Information: Full name, date of birth, nationality
  • Contact Information: Mobile number, email address, residential address
  • Identity Documents: NID number, passport, or driving licence (for KYC verification)
  • Financial Information: Payment method details, transaction history
  • Account Information: Username, password (hashed), profile settings

2.2 Automatically Collected Information

  • Device Information: IP address, device type, operating system, browser
  • Usage Data: Pages visited, time spent, and traffic source
  • Gaming Information: Betting history, favorite games, win/loss records
  • Communication Records: Support chat messages, email history

We do not collect: Your bank account password, bKash/Nagad PIN, or any sensitive financial credentials. xbazi will never ask for this information.

🔄
Section 3

Data Collection Methods & Flow

Here is a complete overview of how your information reaches xbazi:

Information You Provide
SSL Encryption
Secure Servers
Encrypted Storage

3.1 Direct Collection

You provide information directly when completing the registration form, updating your profile, submitting a deposit form, completing KYC, or contacting our support team.

3.2 Automatic Collection

When you use the xbazi platform, usage data is automatically collected through cookies, log files, and web beacon technology.

3.3 Collection from Third Parties

Payment providers (bKash, Nagad, etc.) receive limited information solely to confirm transactions. This data is used exclusively for payment verification.

🎯
Section 4

Purpose of Data Use & Legal Basis

Xbazi uses your information only for specific, legitimate purposes. Each use has a clear legal basis:

4.1 Service Delivery & Contractual Obligation

  • Account Creation & Management
  • Processing Deposits & Withdrawals
  • Providing Betting & Gaming Services
  • Bonus & Promotion Delivery
  • Customer Service & Technical Support

4.2 Legal Obligations

  • KYC (Identity Verification) & AML (Anti-Money Laundering)
  • Age Verification – Confirming 18+
  • Financial Reporting & Regulatory Compliance
  • Reporting Suspicious Activity

4.3 Legitimate Interests

  • Fraud Detection & Prevention
  • Improving Platform Security & Performance
  • Improving the quality of products and services
  • Usage Analytics & Statistics

4.4 With Your Consent

  • Sending marketing emails & SMS (you may opt out at any time)
  • Personalized offers & recommendations
  • Surveys & Feedback Collection

You may opt out of marketing communications at any time. Simply click the "Unsubscribe" link in any email or notify our support team.

🤝
Section 5

Third-Party Data Sharing Policy

Xbazi never sells your personal data. Information may be shared with third parties only in the following limited and specific circumstances:

5.1 Service Provider Partners

  • Payment Providers: bKash, Nagad, Bank – for processing transactions
  • Game Providers: Limited data for gaming results verification
  • KYC Verification Services: To verify your identity
  • Cloud Service Provider: Secure Data Storage

5.2 Legal Requirements

We may be required to share information as a legal obligation in response to court orders, requests from regulatory authorities, or reports of suspicious financial activity.

5.3 Business Transfers

In the event of a merger, acquisition, or asset transfer involving xbazi, user data may be transferred. Advance notice will be provided in such cases.

Our Commitment: Strict Data Processing Agreements (DPAs) are in place with all third parties, who are contractually obligated to comply with xbazi's privacy standards.

🍪
Section 6

Cookies & Tracking Technologies

Xbazi uses cookies and similar technologies to enhance your experience and ensure the platform functions correctly. The types of cookies used are explained below:

You can manage cookies through your browser settings. Please note that disabling essential cookies may limit access to certain xbazi features.

📅
Section 7

Data Retention & Deletion Policy

Xbazi does not retain your data longer than necessary. Retention periods depend on the type of information and applicable legal requirements:

  • Account Details: Up to 5 years after account closure (as required by law)
  • Transaction Records: 7 years (in compliance with financial regulations)
  • KYC Documents: 5 years after account closure
  • Gaming Logs: 3 Years
  • Support Chat Records: 2 Years
  • Marketing Data: Until consent is withdrawn or 2 years, whichever comes first
  • Analytics Data: Anonymized, retained for up to 3 years

Data Deletion: Once legal retention obligations are met, xbazi permanently deletes your data using secure methods. You may also request early deletion at any time.

⚖️
Section 8

Your Privacy Rights

Xbazi respects your right to data protection. You have the following rights:

Rights Description Process
Right to Know Find out what information we hold about you Email Requests
Right to Rectification Correct inaccurate or incomplete information Profile / Support
Right to Erasure Request deletion of your data under certain circumstances Support Team
Right to Object Object to the use of your data for specific purposes Written Request
Right to Portability Obtain a copy of your data in a machine-readable format Email Requests
Right to Restriction Restrict the processing of your data in specific circumstances Support Team

All requests are processed within 30 business days. For complex cases, additional time may be required — you will be notified if this applies.

🛡️
Section 9

Security Measures & Data Breach Response

Xbazi maintains industry-leading security measures to protect your data. Our multi-layered security framework:

  • Encryption: AES-256 encryption at rest and in transit
  • Access Controls: Role-based access control, principle of least privilege
  • Two-Factor Authentication: 2FA is mandatory for all administrative accounts
  • Regular Backups: Encrypted backups stored across multiple locations
  • Monitoring: 24/7 Automated Security Monitoring
  • Penetration Testing: Independent audits at least twice a year

Xbazi's Response to Data Breaches

In the event of a data breach that puts your rights at risk, xbazi will notify the relevant regulatory authority within 72 hours and inform affected users as soon as possible.

Your Responsibilities: Keep your account password strong, never share it with anyone, and always log out when using an unfamiliar device.

📞
Section 10

Contact, Complaints & Data Protection Officer

For any privacy-related questions, requests, or complaints, please reach us through the following:

📧
Email
privacy@xbazi.ws
support@xbazi.ws
💬
Live Chat
24/7 Bangla Support
Response time: 2–5 minutes

Complaint Resolution Process

  1. Contact the xbazi support team first
  2. If unresolved within 30 days, escalate your complaint to the Data Protection Officer
  3. If the matter remains unresolved, you may escalate it to the relevant regulatory authority

Any request related to xbazi's Privacy Policy Acknowledged within 15 business days, with a full response provided within 30 business days.

Privacy FAQs

Absolutely not. xbazi never sells your personal data to third parties. We only share limited information with essential partners required to deliver our services, and they are all bound by strict confidentiality agreements.

xbazi never has access to your full payment credentials (PIN, password). All transactions are processed through the payment gateway, and xbazi only receives confirmation of whether a transaction was successful or failed.

Certain data must be retained for specified periods under legal obligations (e.g., transaction records for 7 years). Marketing data, however, is deleted immediately, and all remaining data is permanently erased once the legal retention period expires.

Every marketing email includes an "Unsubscribe" link at the bottom — simply click it to opt out. You can also contact our support team and we'll take care of it promptly.

Yes, you have the right to data portability. Email us at privacy@xbazi.ws and we will send your data in a machine-readable format (JSON/CSV) within 30 days.

Approximate location is determined via IP address, primarily for fraud prevention and geographic restriction verification. xbazi does not track GPS or precise real-time location.
🔐 Your information is completely secure

Join xbazi with confidence – your privacy is our responsibility

Xbazi is one of Bangladesh's most trusted online betting platforms. We're always by your side with industry-standard security, a transparent privacy policy, and guaranteed fast payouts.

SSL Secured Data never sold 24/7 Security
🔐
Safe & Trusted
Your data is a trust we hold sacred
বাংলা