xbaii Privacy Policy
At xbaii, your privacy is a foundational commitment, not an afterthought. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold as a player on Bangladesh's premier online betting and casino platform.
How xbaii Protects Your Privacy
A plain-language summary of the six core principles that guide xbaii's approach to data privacy. The complete legal policy follows below.
xbaii collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with identity verification requirements. We do not harvest unnecessary data for commercial profiling.
Every connection between your device and xbaii is protected by industry-standard SSL/TLS encryption. Your login credentials, payment details, and personal information are transmitted securely at all times.
xbaii does not sell, rent, or commercially trade your personal data to any third party. Data is shared with service partners only where it is operationally essential and under binding data processing agreements.
This Privacy Policy discloses every category of data we collect, every purpose for which it is used, and every type of third party with whom it may be shared. There are no hidden data practices at xbaii.
You have the right to access, correct, or request deletion of your personal data at any time by contacting [email protected]. xbaii will respond to all data subject requests promptly and in good faith.
xbaii retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Data is securely deleted or anonymised once the retention period expires.
1. Introduction
This Privacy Policy ("Policy") describes how xbaii ("xbaii", "we", "us", "our") collects, uses, stores, and discloses personal information about individuals ("you", "User", "Player") who register an account with, access, or otherwise interact with the xbaii online betting and casino platform available at https://xbaii.io ("the Platform").
xbaii is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Policy is designed to give you a clear understanding of our data practices so that you can make informed decisions about using the Platform.
By creating an account, using any feature of the Platform, or otherwise interacting with xbaii, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of, and should be read together with, the xbaii Terms & Conditions.
This Policy applies to all personal data collected through the xbaii website, mobile-optimised pages, customer support channels, and any other service operated under the xbaii brand. It does not apply to third-party websites or game providers accessible via links on the Platform — those parties operate under their own privacy policies.
2. Data Controller
xbaii acts as the data controller for all personal data collected and processed through the Platform. As data controller, xbaii determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.
For all data-related enquiries, requests, or concerns, you may contact xbaii directly using the contact details provided in Section 16 of this Policy. xbaii will respond to all data-related communications within a reasonable timeframe, and in any event within 30 calendar days of receipt.
3. Personal Data We Collect
xbaii collects personal data in the following categories. We collect only data that is necessary for the stated purposes and do not engage in speculative or excessive data collection.
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, NID / passport number | Account registration form; KYC document submission |
| Contact Data | Email address, mobile phone number, residential address (including city, district, and postcode) | Account registration; profile updates |
| Financial Data | bKash/Nagad/Rocket account number, Visa/Mastercard last four digits, deposit and withdrawal transaction history | Payment processing; deposit and withdrawal requests |
| Verification Data | Copies of National Identity Card (NID), passport, driving licence, utility bills, bank statements | KYC identity verification process |
| Technical Data | IP address, browser type and version, device type, operating system, session duration, time zone | Automatically collected via cookies and server logs |
| Usage Data | Pages visited, games played, bets placed, bet amounts, win/loss history, navigation paths | Automatically collected during Platform use |
| Communications Data | Live chat transcripts, support email content, complaint records | Customer support interactions |
| Marketing Preferences | Email/SMS marketing opt-in status, preferred communication channels, bonus preference history | Account settings; marketing consent forms |
xbaii does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where disclosure of health-related information is voluntarily provided by a player in the context of a responsible gaming self-exclusion or support request.
4. How We Use Your Personal Data
xbaii uses the personal data it collects for the following specific, documented purposes:
- Account Management: To create, maintain, authenticate, and close your xbaii account; to verify your identity at registration and prior to withdrawal; and to communicate account-related updates such as security alerts or policy changes.
- Payment Processing: To process deposits and withdrawals securely via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to prevent payment fraud; and to comply with financial record-keeping obligations.
- KYC Compliance: To conduct mandatory Know Your Customer (KYC) verification in order to prevent underage gambling, identity fraud, and money laundering.
- Platform Operations: To deliver the betting, gaming, and live casino services available on the Platform; to personalise your in-platform experience based on usage patterns; and to ensure the technical stability and security of the Platform.
- Customer Support: To respond to your queries, complaints, and feedback submitted via live chat or email; to maintain records of support interactions for quality assurance and dispute resolution purposes.
- Responsible Gaming: To monitor betting patterns for indicators of problem gambling; to implement deposit limits, session limits, and self-exclusion requests; and to fulfil xbaii's responsible gaming obligations.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, and other prohibited conduct as described in the xbaii Terms & Conditions.
- Marketing Communications: To send promotional offers, bonus notifications, event updates, and relevant product information to players who have opted in to receive such communications. You may opt out at any time.
- Legal Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from regulatory or law enforcement authorities.
- Analytics and Improvement: To analyse aggregated usage data in order to improve the Platform's features, game selection, user experience, and overall service quality.
xbaii will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or being required to do so by applicable law.
5. Legal Basis for Processing
xbaii processes your personal data on the following legal bases:
- Contractual Necessity: Processing is necessary to perform the contract between you and xbaii (i.e., the Terms & Conditions), including operating your account, processing deposits and withdrawals, and delivering betting and gaming services.
- Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) rules, KYC requirements, and fraud prevention obligations.
- Legitimate Interests: Processing is necessary for xbaii's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving Platform performance, provided those interests are not overridden by your privacy rights.
- Consent: Where xbaii relies on your consent — particularly for marketing communications — you may withdraw that consent at any time by updating your account preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
6. Data Sharing and Disclosure
xbaii does not sell, rent, or commercially exploit your personal data. We may share personal data with the following categories of third parties strictly on a need-to-know basis and only to the extent necessary for the stated purpose:
- Payment Processors: bKash, Nagad, Rocket, Upay, and card network operators (Visa, Mastercard) receive financial data necessary to process your deposit and withdrawal transactions. These processors operate under their own privacy and security frameworks.
- Identity Verification Providers: Third-party KYC service providers who assist xbaii in verifying the identity documents submitted by account holders. These providers are bound by confidentiality obligations and data processing agreements.
- Game Technology Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the technical session data necessary to deliver their games to you on the Platform. They do not receive your full identity or financial data.
- Fraud Prevention and Security Services: Third-party services that assist xbaii in detecting fraudulent accounts, suspicious betting patterns, and technical security threats.
- Customer Support Platforms: Live chat and ticketing software providers that facilitate xbaii's 24/7 support operations. These providers access communications data under strict contractual confidentiality obligations.
- Legal and Regulatory Authorities: xbaii may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activity.
- Business Successors: In the event of a merger, acquisition, or sale of all or substantially all of xbaii's assets, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.
Every third party that receives personal data from xbaii is required to handle that data in accordance with applicable data protection standards and the specific terms of their data processing agreement with xbaii. We do not permit third-party service providers to use your data for their own independent marketing or commercial purposes.
7. Cookies and Tracking Technologies
xbaii uses cookies and similar tracking technologies on the Platform to provide a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a website you visit. Cookies allow the Platform to recognise your device, maintain your logged-in session, and remember your preferences.
xbaii uses the following categories of cookies:
- Essential Cookies: Required for the Platform to function. These cookies manage your login session, maintain your account authentication state, and enable core security features. They cannot be disabled without affecting Platform functionality.
- Performance Cookies: Collect anonymised data about how players use the Platform — including pages visited, session duration, and navigation paths — to help xbaii identify areas for improvement. This data is aggregated and does not identify individuals.
- Functional Cookies: Remember your language preferences, display settings, and other customisations to provide a consistent experience across sessions.
- Analytics Cookies: Used to track aggregate usage patterns for statistical analysis and product development purposes. Where third-party analytics tools are used, data is anonymised before processing.
You may control cookie settings through your browser. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies will impair your ability to use the Platform, including staying logged in and completing transactions.
xbaii does not use third-party advertising or behavioural tracking cookies that profile you for purposes unrelated to the Platform.
8. Data Security
xbaii implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- SSL/TLS Encryption: All data transmitted between your device and xbaii servers is encrypted using Transport Layer Security (TLS). This protects your login credentials, payment details, and personal information in transit.
- Encrypted Data Storage: Sensitive personal data — including identity documents and payment information — is stored in encrypted form at rest using industry-standard encryption algorithms.
- Access Controls: Access to personal data within xbaii's systems is restricted to authorised personnel only, on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
- Two-Factor Authentication: xbaii supports and encourages the use of two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorised account access.
- Regular Security Audits: xbaii's platform and data infrastructure undergo regular security reviews and vulnerability assessments to identify and address potential risks proactively.
- Incident Response: xbaii maintains a data breach response procedure. In the event of a security incident that is likely to result in a high risk to your rights and freedoms, xbaii will notify affected account holders without undue delay.
While xbaii applies rigorous security measures, the security of your account also depends on the confidentiality of your own login credentials. You should use a strong, unique password for your xbaii account, never share your password with anyone, and contact xbaii support immediately if you suspect unauthorised access to your account.
9. Data Retention
xbaii retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account relationship, and to comply with applicable legal and regulatory requirements. Specific retention periods by data category are set out below:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance; fraud investigation; legal proceedings |
| Financial Transaction Data | 7 years from transaction date | Financial record-keeping obligations; tax and audit requirements |
| KYC Verification Documents | Duration of account + 5 years after closure | Regulatory KYC obligations; AML compliance |
| Betting & Gaming History | Duration of account + 3 years after closure | Dispute resolution; responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Quality assurance; dispute evidence; complaints handling |
| Marketing Preferences | Until opt-out or account closure | Consent management; communication preferences |
| Technical & Usage Data | 13 months on a rolling basis | Platform analytics; security monitoring |
Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in a manner that prevents re-identification. Anonymised, aggregated data that can no longer be linked to any individual may be retained indefinitely for statistical and analytical purposes.
10. Your Data Rights
As a data subject, you hold the following rights in relation to your personal data held by xbaii. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Account Username]".
- Right of Access: You may request a copy of all personal data that xbaii holds about you. xbaii will provide this information within 30 calendar days of a verified request.
- Right to Rectification: If any personal data xbaii holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain data directly through your account settings.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests may be declined where xbaii is required to retain data by law (e.g., for AML compliance).
- Right to Restrict Processing: You may request that xbaii restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
- Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that xbaii provide your personal data to you in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data where xbaii relies on legitimate interests as its legal basis, and where you believe your individual rights and freedoms override those interests.
- Right to Withdraw Consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
xbaii will not charge a fee for handling data rights requests submitted in good faith. In the event that a request is manifestly unfounded or excessive, xbaii reserves the right to charge a reasonable administrative fee or decline the request, with written explanation.
11. Children and Minors
The xbaii Platform is strictly intended for adults aged 21 years and above. xbaii does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.
If xbaii becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, that data will be deleted immediately and the associated account will be closed. Any funds deposited by an underage user will be returned to the originating payment method after identity confirmation.
If you are a parent or guardian and believe that a minor has registered on the xbaii Platform, please contact us immediately at [email protected] so that we can take the appropriate action without delay.
12. Third-Party Links and Game Providers
The xbaii Platform integrates games and content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these games are accessible through the xbaii interface, they are operated on the game providers' own technology infrastructure. These providers may collect certain technical data — such as session identifiers — necessary to deliver their game content.
xbaii is not responsible for the privacy practices of third-party game providers. Each provider operates under its own independently maintained privacy policy. We encourage you to review those policies if you have concerns about how your data is handled at the game-engine level.
The xbaii Platform does not contain external links to third-party websites unaffiliated with xbaii's services. Any links present on the Platform are limited to internal pages within the xbaii ecosystem.
13. International Data Transfers
xbaii primarily processes and stores personal data within secure data centre infrastructure serving the Bangladesh region. However, certain operational service providers — including game technology partners, cloud infrastructure providers, and fraud prevention services — may be located in or operate from jurisdictions outside Bangladesh.
Where personal data is transferred to or accessed from a jurisdiction outside Bangladesh, xbaii takes appropriate safeguards to ensure that the transfer is conducted in a manner consistent with applicable data protection standards. These safeguards may include standard contractual clauses, data processing agreements, or equivalent contractual protections requiring the recipient to apply appropriate security and confidentiality measures.
By using the xbaii Platform, you acknowledge that your personal data may be transferred to, stored in, or processed in countries other than Bangladesh, subject to the safeguards described above. xbaii will not transfer your personal data internationally in circumstances where adequate protections cannot be put in place.
14. Marketing Communications
xbaii may send you promotional communications including bonus offers, seasonal promotions, new game announcements, tournament invitations, and platform updates. We will only send marketing communications where you have provided your prior consent to receive them, either during the account registration process or through your account communications preferences.
Marketing communications may be sent via the following channels, depending on your preferences:
- Email: Promotional emails sent to your registered email address, including bonus notifications, deposit match offers, and seasonal promotions tied to events such as Eid, Pohela Boishakh, IPL, BPL, and T20 World Cup fixtures.
- SMS: Short text message notifications sent to your registered mobile number for time-sensitive promotions or account alerts where SMS consent has been granted.
- On-Platform Notifications: In-session messages, banners, and pop-up notifications displayed within the Platform to logged-in users. These are tied to your active session and do not require a separate marketing consent.
You may withdraw your consent to receive marketing communications at any time by:
- Clicking the "Unsubscribe" link included in any marketing email;
- Updating your communication preferences in your xbaii account settings; or
- Contacting xbaii support at [email protected] with the subject line "Marketing Opt-Out — [Your Account Username]".
Withdrawal of marketing consent will not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, security alerts, and KYC-related correspondence. These service messages are sent regardless of marketing preference.
xbaii is committed to responsible marketing practices. We do not send unsolicited marketing communications to individuals who have not opted in. We also ensure that promotional materials targeting players in Bangladesh include appropriate responsible gaming messaging and are not directed at individuals who have self-excluded or requested a marketing block on their account.
15. Changes to This Privacy Policy
xbaii reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services offered on the Platform. All changes will be posted at https://xbaii.io/privacy-policy, and the "Last Updated" date at the top of this page will be revised accordingly.
Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data, or the rights you hold in relation to that data — xbaii will provide advance notice via email to your registered address, or via a prominent notice displayed on the Platform. Non-material updates, such as clarifications of existing language or corrections of typographical errors, may be made without prior notice.
Your continued use of the xbaii Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting [email protected]. We encourage you to review this Policy periodically to stay informed about how xbaii protects your personal data.
16. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which xbaii handles your personal data, please contact our dedicated privacy and support team through any of the following channels:
- Email: [email protected] — please use the subject line "Privacy Enquiry — [Your Account Username]" to ensure your message is directed to the correct team.
- Live Chat: Available 24 hours a day, 7 days a week directly from any page on the xbaii Platform. Average first-response time is under 2 minutes.
- Response Commitment: xbaii will acknowledge all privacy-related communications within 24 hours and provide a substantive response within 30 calendar days. Complex data rights requests (such as full data access exports) may take up to 30 days to fulfil.
This Privacy Policy was last reviewed and updated on 1 January 2026. xbaii thanks you for taking the time to understand how your personal data is handled. We remain committed to treating your privacy with the seriousness and respect it deserves.
Your Privacy Is Protected — Now Let's Play
Now that you know how xbaii handles your data, you can bet and play with confidence. Explore cricket betting, premium slots, live casino tables, and more — all secured by industry-standard encryption and a commitment to your privacy.