xbagi Privacy Policy

Your Privacy at a Glance

Here is a plain-language summary of the core privacy commitments xbagi makes to every player on the platform:

2How We Use Your Information

xbagi uses your personal information for specific, legitimate purposes directly connected to operating the platform and serving our players. The purposes for which we process your data include:

• Account management: to create and maintain your xbagi account, verify your identity, process your deposits and withdrawals, and provide you with access to platform features.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and any other conduct that violates our Terms and Conditions or applicable law.
• Responsible gaming: to monitor gaming patterns, identify potential indicators of problem gambling, apply self-exclusion restrictions at your request, and ensure compliance with our responsible gaming obligations including the 21+ age requirement.
• Legal and regulatory compliance: to comply with anti-money laundering (AML) obligations, KYC requirements, and any other applicable laws or regulations. This may include reporting obligations to competent regulatory authorities where required by law.
• Customer support: to respond to your queries, complaints, and requests via our support team, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Platform improvement: to analyse aggregated, anonymised data about how players use xbagi in order to improve platform functionality, game selection, payment options, and overall user experience. Individual player data is not shared externally for this purpose.

xbagi will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without first providing notice and, where required, obtaining your consent.

4Sharing Your Information

xbagi does not sell, rent, or trade your personal information to third parties. We may share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment processors and financial institutions: we share transaction data with payment providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) solely to facilitate your deposit and withdrawal requests. Each provider handles your data in accordance with their own privacy policies and applicable financial regulations.
• Identity verification providers: where required to complete KYC checks, we may share identity documents with accredited identity verification service providers. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Law enforcement and regulatory authorities: we may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Service providers and technology partners: we may share limited technical data with platform hosting providers, analytics services, and customer support software providers who assist us in operating xbagi. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to us.

6Data Retention

xbagi retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account data: retained for the duration of your active account plus a minimum of 5 years following account closure, to meet AML record-keeping requirements and to allow for the resolution of any disputes that may arise after your account is closed.
• Transaction records: deposit, withdrawal, and gaming transaction records are retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations.
• Support communications: records of communications with our customer support team are retained for 2 years from the date of the most recent communication, unless a longer retention period is required for an unresolved dispute or compliance matter.

Once your personal data is no longer required for any of the purposes described in this Policy and no legal retention obligation applies, xbagi will securely delete or anonymise that data. You may request information about the specific retention period applicable to your data by contacting [email protected].

8Your Data Rights

xbagi respects your rights in relation to your personal data. You may exercise the following rights at any time by contacting our support team at [email protected]:

• Right of access: you have the right to request a copy of the personal data xbagi holds about you, together with information about how it is being used.
• Right to rectification: if any personal data xbagi holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: in certain circumstances, you have the right to request that xbagi delete your personal data. This right is subject to any overriding legal obligation to retain data (such as AML record-keeping requirements).
• Right to restrict processing: you may request that xbagi restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being verified or a legitimate interests assessment is being conducted.
• Right to withdraw consent: where xbagi processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

xbagi will respond to all data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your data rights unless a request is manifestly unfounded or excessive.

10Payment Data and Financial Security

When you make a deposit or request a withdrawal on xbagi, you provide financial information to facilitate the transaction. xbagi takes specific measures to protect payment data. We do not store full card numbers for Visa or Mastercard transactions — only masked card references are retained to support dispute resolution and to verify that withdrawals are returned to the correct payment method. Mobile financial service details such as bKash and Nagad account references are stored in encrypted form and accessed only by authorised payment processing personnel.

All financial transactions on xbagi are monitored for suspicious activity as part of our AML compliance programme. If unusual transaction patterns are detected, our compliance team may place a temporary hold on your account pending further verification. In such cases, we will contact you via your registered mobile number to explain the hold and the steps required to resolve it.

12Changes to This Privacy Policy

xbagi reserves the right to update or revise this Privacy Policy at any time. When we make a material change to this Policy, we will notify active players via a notice on the xbagi platform and update the "Last Updated" date at the top of this page. Minor changes such as typographical corrections or clarifications may be made without specific notification.

Your continued use of the xbagi platform after the publication of a revised Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically so that you remain informed about how xbagi handles your personal data. If you have questions about any change to this Policy, please contact us at [email protected] before continuing to use the platform.