xbaze Privacy Policy

Five Things You Should Know

The highlights below summarise how xbaze handles your data. They do not replace the full policy text — please read each section carefully.

Introduction

xbaze ("the Platform", "we", "us", "our") operates the website at https://xbaze.ws, providing online casino games, cricket betting markets, slots, and related services to players in Bangladesh and other permitted jurisdictions. We are committed to protecting the privacy of every person who uses our Platform.

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the rights you hold as a data subject. By registering an account or continuing to use the Platform you confirm that you have read and understood this Policy. If you do not agree with how we process your data, please do not use the Platform.

Information We Collect

We collect personal data in two ways: information you provide directly to us, and information collected automatically when you use the Platform. The table below summarises the main categories:

We collect only the data necessary to provide and improve our services, comply with legal obligations, and protect the integrity of the Platform. We do not collect sensitive personal data such as biometrics or political opinions.

How We Use Your Information

xbaze uses your personal data only for specific, explicit, and legitimate purposes. We process your data for the following reasons:

• Account management: to create, verify, and maintain your player account, including identity verification (KYC) and age checks as required under responsible gaming obligations.
• Service delivery: to process deposits and withdrawals via bKash, Nagad, and other supported payment channels; to allow you to place bets on cricket markets, BPL, IPL, T20 World Cup events, and to access casino games and slots.
• Legal compliance: to fulfil obligations under anti-money laundering (AML) regulations, fraud prevention requirements, and any other applicable laws or regulatory directives.
• Platform security and fraud prevention: to monitor account activity for signs of prohibited conduct, collusion, bot usage, or money laundering; to protect the Platform and all players from fraudulent behaviour.
• Customer support: to respond to your queries, complaints, and disputes; to maintain records of communications for quality assurance and audit purposes.
• Personalisation and analytics: to understand how players use the Platform, improve game recommendations, and tailor promotional offers — for example, targeted cricket betting promotions during IPL or BPL season.

We do not use your personal data for any purpose incompatible with those listed above. We do not engage in automated decision-making that produces significant legal effects without human review.

Legal Basis for Processing

xbaze processes personal data only where a valid legal basis exists. The applicable legal bases are:

• Contractual necessity: processing is necessary to perform the contract between you and xbaze — for example, to create your account, process your bets, and pay out winnings.
• Legal obligation: processing is required to comply with applicable laws, including AML regulations, KYC obligations, and cooperation with law enforcement or regulatory authorities.
• Legitimate interests: processing for fraud prevention, Platform security, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: where we rely on your consent — for example, to send you marketing communications about promotions — you may withdraw your consent at any time by contacting support or adjusting your account notification settings.

Sharing Your Data

xbaze does not sell your personal data. We share data only in the limited circumstances described below, and only with parties that are contractually bound to handle it securely and in accordance with applicable law:

• Payment processors: bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks receive the minimum financial data necessary to process deposits and withdrawals securely.
• KYC and identity verification providers: third-party services that assist us in verifying player identity and age as required under our responsible gaming and anti-fraud obligations.
• Game and technology providers: studios and software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive pseudonymised session data necessary to deliver game services and calculate results.
• Regulatory and law enforcement authorities: where we are legally required to disclose data — for example, in response to a court order, regulatory investigation, or AML reporting obligation — we will comply without prior notice to you where the law so requires.

Any third party receiving your data is required to implement appropriate technical and organisational measures to protect it, and may use it only for the specific purpose for which it was shared.

Data Retention

xbaze retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. In general, account data is retained for the duration of your account and for a period thereafter as required by financial regulations and AML obligations — typically five to seven years following account closure.

Usage data and analytical data may be retained in aggregated, anonymised form for longer periods for statistical and Platform improvement purposes. Once data is anonymised it is no longer considered personal data and falls outside the scope of this Policy.

Data Security

xbaze takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or destruction:

• SSL/TLS encryption on all data in transit between your device and our servers, ensuring that login credentials, payment details, and account information cannot be intercepted.
• Encryption of sensitive data at rest, including financial records and identity documents, using AES-256 or equivalent standards.
• Role-based access controls ensuring that staff members can access only the data required for their specific job function, with all access events logged for audit purposes.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online system is completely immune to security risks. If you believe your account has been compromised, please contact support immediately at [email protected]. xbaze will notify affected players without undue delay in the event of a data breach that is likely to result in high risk to your rights and freedoms.

Your Rights

As a data subject you have the following rights in relation to the personal data xbaze holds about you. To exercise any of these rights, contact us at [email protected] with your account username and a clear description of your request. We will respond within 30 days:

• Right of access: you may request a copy of the personal data we hold about you, along with information about how it is used.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected without undue delay.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful.
• Right to restriction: you may ask us to pause processing of your data — for example while a dispute is being resolved — without requesting full deletion.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your data to transfer to another service.

xbaze will not charge a fee for reasonable data subject requests. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to act on the request, explaining our reasons in writing.

Cookies and Tracking

xbaze uses cookies — small text files stored on your device — and similar tracking technologies to operate the Platform and improve your experience. We use the following categories of cookies:

• Strictly necessary cookies: required for the Platform to function correctly — including session management, login state, and security tokens. These cannot be disabled without breaking core functionality.
• Analytical cookies: help us understand how players navigate the Platform — which pages are visited most, where players drop off, and how long sessions last. This data is collected in aggregated form and used only to improve the Platform.
• Preference cookies: remember your settings and choices — such as your preferred language — so you do not need to re-enter them on each visit.

You can control and delete cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the Platform — in particular, disabling strictly necessary cookies will prevent you from logging in or placing bets.

Third-Party Links

The xbaze Platform may contain references to game providers and payment partners. xbaze is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party service before providing them with your personal data. This Policy applies solely to data processed by xbaze in connection with the Platform at https://xbaze.ws.

Children and Minors

The xbaze Platform is strictly intended for persons aged 21 and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will delete that data immediately and close the associated account without refund of any deposited funds.

Changes to This Policy

xbaze reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When a material change is made we will post the revised Policy on this page with an updated effective date and, where practicable, notify registered players via email.

Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy you should stop using the Platform and may request account closure by contacting support.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to report a privacy concern, please contact the xbaze data team. We are committed to responding to all privacy-related enquiries promptly and transparently.

Email us at [email protected]