xbagh Privacy Policy — Your Data, Protected

1. Introduction and Scope

xbagh ("we", "us", "our") operates the online casino and sports betting platform accessible at https://xbagh.bio. This Privacy Policy applies to all personal data collected, processed, stored, or transmitted in connection with your use of the xbagh platform, including account registration, deposits and withdrawals, gameplay, customer support interactions, and any marketing communications you receive from us.

This policy applies to all registered players on xbagh, including players located in Bangladesh. It covers data processed through the xbagh website and any associated mobile-optimised interface. It does not apply to third-party websites, payment services, or game providers that operate their own privacy policies — when you interact with those third parties, their own privacy notices govern the processing of your data by them.

The terms "personal data" and "personal information" are used interchangeably throughout this document and refer to any information that relates to an identified or identifiable individual. This includes your mobile number, transaction history, device identifiers, and any other information that, alone or in combination with other data, could identify you as a specific person.

2. Data We Collect

2.1 Registration Data

When you create an xbagh account, we collect the mobile phone number you use to register. This number serves as your primary account identifier and is cross-referenced with the mobile wallet (bKash, Nagad, Rocket, or Upay) you use for financial transactions on the platform. If you are asked to complete enhanced verification at any stage, we may also collect a government-issued identification document, a selfie photograph for identity confirmation, and proof of address.

2.2 Transaction and Financial Data

We record all financial transactions conducted through your xbagh account, including deposit amounts, withdrawal requests, wallet reference numbers, timestamps, and the payment method used for each transaction. This data is essential for processing your payments, resolving disputes, and meeting our financial record-keeping and anti-money laundering obligations. We do not store your full mobile wallet PIN or password at any point.

2.3 Gaming Activity Data

We collect detailed records of your gaming activity on xbagh, including which games you play, bet amounts, win and loss outcomes, session durations, and the timing of your activity. This data is used to operate the platform, detect problem gambling patterns, identify potentially fraudulent betting behaviour, and personalise your experience on xbagh where applicable.

2.4 Technical and Device Data

When you access xbagh, our servers automatically collect certain technical information about your device and connection. This includes your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited on xbagh, and session duration. This data is used for security monitoring, fraud detection, platform optimisation, and aggregate analytics.

2.5 Communications Data

If you contact xbagh support, the content of your messages, the channel used (email, live chat), and the date and time of contact are stored. This enables us to track and resolve your queries efficiently and to maintain a record of our service interactions with you.

2.6 Summary of Data Categories

3. How We Use Your Data

xbagh uses your personal data only for legitimate, specified purposes. The principal ways in which we use your data are as follows:

• Account management: Creating, maintaining, and securing your xbagh account, including processing login requests and enforcing account-level restrictions such as deposit limits or self-exclusion.
• Payment processing: Facilitating deposits from and withdrawals to your registered mobile wallet (bKash, Nagad, Rocket, or Upay), verifying that the wallet mobile number matches your registered account number, and resolving any payment queries or disputes.
• Fraud and security: Detecting and preventing fraudulent account activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling, enforcing player-requested deposit limits and self-exclusion orders, and sending responsible gaming communications where appropriate.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering regulations, retaining financial records for the required statutory periods, and cooperating with lawful requests from competent authorities.
• Platform improvement: Analysing aggregate, anonymised usage data to improve the performance, navigation, and game selection on xbagh.
• Marketing communications: Sending you promotional offers, bonus notifications, and relevant game recommendations — but only where you have provided opt-in consent. You may withdraw this consent at any time by contacting support.
• Customer support: Using your account and communications history to resolve queries, process complaints, and deliver a consistent support experience.

We do not use your personal data to make solely automated decisions that produce significant legal effects on you without human review. We do not sell your personal data to any third party for their own commercial purposes.

4. Legal Basis for Processing

xbagh processes your personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contract performance: Processing your registration data, transaction data, and gaming activity is necessary to provide the xbagh service as agreed when you created your account. Without this processing, we cannot operate your account or process payments.
• Legal obligation: Retaining financial records, conducting identity verification, and cooperating with anti-money laundering investigations are required by applicable laws and regulatory standards to which xbagh is subject.
• Legitimate interests: Processing technical and device data for security monitoring, fraud detection, and platform analytics is carried out on the basis of our legitimate interest in operating a secure, fair, and reliable platform. We have assessed that these interests are not overridden by your privacy rights in these contexts.
• Consent: Sending marketing communications and placing non-essential cookies on your device is done only where you have given prior, freely given, specific, and informed consent. You may withdraw consent for either purpose at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Disclosure

5.1 Service Providers

xbagh shares personal data with carefully selected third-party service providers that assist in the operation of the platform. These include payment processing partners (the operators of bKash, Nagad, Rocket, and Upay integrations), game content providers (including but not limited to Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi), fraud detection and risk management systems, cloud hosting and infrastructure providers, and customer support tooling. Each service provider is engaged under a written data processing agreement that limits their use of your data strictly to the services they provide to xbagh.

5.2 Legal and Regulatory Disclosure

xbagh may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or lawful regulatory request. Where permitted, we will notify you of any such disclosure. We may also disclose data in connection with the prevention, detection, or prosecution of financial crime, including money laundering and fraud.

5.3 Business Transfers

In the event that xbagh undergoes a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. We will provide reasonable notice of any such transfer and ensure that the successor entity is bound by privacy obligations no less protective than those set out in this policy.

5.4 No Sale of Personal Data

xbagh does not sell, rent, or trade your personal data to any third party for their own marketing, profiling, or commercial exploitation purposes. Any sharing of data is limited to what is strictly necessary for the purposes described in this policy.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to remember information about your visit — such as your session state and preferences — and are widely used to make websites function correctly and efficiently. xbagh uses both first-party cookies (set directly by xbagh) and third-party cookies (set by our service providers).

6.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account during a session. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate xbagh — which pages are visited most, how long sessions last, and where errors occur. This helps us improve the platform. These cookies are only placed with your consent.
• Functional cookies: Used to remember your preferences such as display settings. These are placed only with your consent.
• Marketing cookies: Used by our promotional systems to track whether you have seen or interacted with a specific offer, so that we do not show you the same promotion repeatedly. These are placed only with your explicit consent.

6.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Instructions for controlling cookies are available in the help documentation of all major browsers. Please note that disabling strictly necessary cookies will prevent you from logging in to your xbagh account and using core platform features. Disabling other categories of cookies will not affect your ability to use the platform but may reduce the relevance of any promotional content you see.

7. Data Retention

xbagh retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable law. The following retention framework applies:

• Account and transaction data: Retained for a minimum of five years after the date of account closure. This period reflects standard financial record-keeping requirements applicable to offshore gambling platforms.
• Identity verification documents: Retained for the duration of your account and for five years after closure. Extended retention may apply if required by an active investigation or legal hold.
• Gaming activity logs: Retained for three years after your last active session, after which they are anonymised or deleted.
• Technical and device data (session logs, IP records): Retained for 12 months from the date of collection, then deleted.
• Customer support communications: Retained for three years from the date of the last communication in a given support thread.
• Marketing consent records: Retained for as long as you hold an account, and for two years after account closure, to demonstrate that communications were sent with valid consent.

When data reaches the end of its retention period, it is securely deleted from our systems, or irreversibly anonymised such that it can no longer be attributed to any individual.

8. Your Privacy Rights

As an xbagh player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at the support email address in the footer of this page. We will respond to all valid requests within a reasonable period, typically within 30 days.

We may need to verify your identity before processing a rights request to ensure that personal data is not disclosed to or acted upon by an unauthorised person. We will not charge a fee for handling routine requests. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or decline to act, with written explanation.

9. Data Security Measures

xbagh implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security practices include:

• SSL/TLS encryption: All data transmitted between your device and the xbagh platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. This protects your session data, login credentials, and payment information from interception.
• Access controls: Access to personal data within xbagh's internal systems is restricted on a need-to-know basis. Staff members are granted only the minimum level of access required to perform their role. Access rights are reviewed regularly and revoked promptly when no longer needed.
• Secure hosting: xbagh's servers and databases are hosted in data centres that maintain physical security controls including restricted access, CCTV monitoring, and environmental protections.
• Password security: Account passwords are stored in hashed form using modern cryptographic algorithms. xbagh staff cannot view your plain-text password at any point.
• Fraud monitoring: Automated systems monitor account activity in real time for indicators of unauthorised access or fraudulent behaviour, triggering alerts and account protections where suspicious patterns are detected.
• Security reviews: We conduct periodic internal reviews of our data handling practices, access logs, and security configurations to identify and address potential vulnerabilities.

While xbagh takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security. You also play an important role in keeping your data safe — in particular by maintaining the confidentiality of your xbagh account password and ensuring that the device you use to access the platform is free from malware.

10. Minors and Age Restriction

xbagh is strictly an adult platform. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 18. By registering an account on xbagh, you confirm that you are at least 18 years of age. If xbagh becomes aware — through its own detection processes, through a parental or guardian notification, or through any other means — that a registered account belongs to a person under 18, the account will be immediately suspended and the matter will be investigated. Any real-money balance will be returned to the payment wallet on record after verification. Bonus balances associated with underage accounts will be voided.

If you are a parent or guardian and believe that a minor in your care has registered an xbagh account, please contact us immediately at the support email address in the footer of this page. We will prioritise the investigation and closure of any account confirmed to belong to a minor. We encourage parents and guardians to make use of parental control software to restrict access to online gambling platforms.

11. Changes to This Policy

xbagh may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When material changes are made, the revised policy will be published on this page with an updated "Last updated" date at the top. We may also notify you of significant changes through your registered contact details where it is practicable to do so.

Your continued use of xbagh after any updated version of this Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not accept the revised policy, you should cease using the platform and contact support to request account closure. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how xbagh has handled your personal data, please contact our support team at the email address displayed in the footer of this page. All privacy-related queries are treated with strict confidentiality and will receive a substantive response within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter. xbagh is committed to resolving data-related concerns through good-faith dialogue, and we will cooperate fully with any escalation process. For players in Bangladesh, you may also contact the relevant national authority responsible for data protection or consumer rights if you believe your rights have not been properly observed.

All privacy correspondence should be directed to: support@xbagh.bio — please include "Privacy Request" in the subject line of your message so that it is routed to the correct team promptly. Do not include sensitive personal data such as full wallet PINs, passwords, or national ID numbers in your initial message; our team will request only what is necessary to verify your identity and process your request securely.