zxbaji Privacy
Policy

This Privacy Policy is issued by zxbaji ("the Platform", "we", "us", "our"), the operator of the online casino and sports betting website available at zxbaji.net. zxbaji acts as the data controller in respect of all personal data collected from registered players and website visitors located in Bangladesh and other jurisdictions where the platform is accessible.

As data controller, zxbaji determines the purposes for which personal data is collected and the means by which it is processed. All data processing activities carried out by zxbaji are governed by this Privacy Policy, our Terms and Conditions, and our Responsible Gaming Policy.

Contact Details

For all privacy-related enquiries, data subject access requests, or complaints regarding the handling of your personal data, please contact the zxbaji privacy team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Privacy Enquiry — [Your Account Username]
• Response Time: Within 72 hours on Bangladesh Standard Time (UTC+6)
• Support Hours: 24 hours a day, 7 days a week

zxbaji collects personal data from you in several ways: directly when you register an account or interact with our services, automatically when you browse or use the platform, and from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described below.

Account Registration Data

When you create a zxbaji account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (used for mandatory age verification — 18+ only)
• Email address and mobile phone number
• Residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code
• Preferred username and account password (stored in hashed, encrypted form)
• Preferred payment method and associated account identifiers (e.g., bKash number, Nagad number)

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, which is required before your first withdrawal is processed, we collect:

• A copy of a valid government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address dated within 90 days (utility bill, bank statement, or similar document)
• In some cases, a selfie or live photograph for biometric identity confirmation

Transaction and Financial Data

We collect records of all financial transactions conducted through your zxbaji account, including deposit amounts, withdrawal requests, payment method references, transaction timestamps, and transaction status. We do not store full payment card numbers or mobile banking PINs at any point.

Gaming Activity Data

We maintain records of your gaming activity on the zxbaji platform, including games played, bet amounts, outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud prevention.

Technical and Device Data

When you access the zxbaji website, we automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, referring URLs, pages visited, and session duration. This data helps us operate the platform securely and optimise your experience.

zxbaji uses the personal data it collects for specific, legitimate purposes directly related to the operation of our platform and the delivery of services to our players. We do not use your data for purposes that are incompatible with those stated below without first obtaining your explicit consent.

Marketing Communications

zxbaji will only send you promotional emails, SMS notifications, or platform push notifications about bonuses, new games, and seasonal offers (such as Eid promotions or Pohela Boishakh specials) if you have explicitly opted in to receive such communications at the time of registration or in your account settings. You may withdraw consent for marketing communications at any time by contacting [email protected] or updating your notification preferences in your account dashboard.

Automated Decision-Making

zxbaji uses automated systems to monitor account activity for fraud, bonus abuse, and responsible gaming indicators. In certain circumstances, these systems may result in automated account restrictions pending manual review. If your account is affected by an automated decision, you have the right to request human review of that decision by contacting our support team.

zxbaji does not sell your personal data to any third party. We share your data only where it is necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform. The categories of third parties with whom we may share your information are described below.

Payment Processing Partners

To process your deposits and withdrawals, zxbaji shares the minimum necessary transaction data with our payment processing partners, which include bKash, Nagad, Rocket, Upay, and card processing providers for Visa and Mastercard transactions. These partners are bound by their own data protection obligations and are not permitted to use your data for any purpose other than processing the transaction in question.

Identity Verification Providers

KYC document verification may be conducted with the assistance of third-party identity verification service providers. These providers receive only the documents and data required to complete the verification process and are contractually prohibited from retaining or using your data for any other purpose.

Game Studio Providers

Games hosted on the zxbaji platform are provided by independent studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data for the purposes of game performance monitoring and technical support. They do not receive your full personal profile.

Law Enforcement and Regulatory Authorities

zxbaji will disclose personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by law, by a valid legal order, or where we believe in good faith that disclosure is necessary to prevent fraud, protect the safety of players, or comply with an applicable legal obligation. We will notify you of any such disclosure where permitted by law.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of the zxbaji business, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

zxbaji uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to understand how players interact with the site so we can continue to improve the experience. This section explains what cookies we use and why.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across multiple page visits within the same session or across future sessions, depending on the cookie type. Cookies do not contain executable code and cannot access other data stored on your device.

Types of Cookies Used by zxbaji

Managing Cookies

You can control or disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies will impair your ability to log in to and use the zxbaji platform, as these cookies are required for session management and security. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Edge.

zxbaji retains your personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and responsible gaming obligations. The table below summarises the retention periods applied to each category of data.

Secure Deletion

Upon expiry of the applicable retention period, personal data is either permanently deleted from zxbaji's systems or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained for aggregated statistical analysis without time limit, as it no longer constitutes personal data.

As a player on the zxbaji platform, you have a number of rights with respect to your personal data. zxbaji is committed to respecting and facilitating the exercise of these rights in a timely and transparent manner. All rights requests should be submitted to [email protected] with your account username in the subject line.

Right of Access

You have the right to request a copy of the personal data that zxbaji holds about you, along with information about how that data is being used. We will respond to access requests within 30 days of receipt. In cases of complex or multiple requests, this period may be extended by a further 30 days, and you will be informed of the extension.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. We will action rectification requests within 14 days. Please note that correcting certain data fields (such as your registered name or date of birth) may require you to submit updated KYC documentation.

Right to Erasure

You have the right to request that zxbaji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing is based, or where you object to processing and there is no overriding legitimate interest. Please note that this right is subject to legal retention obligations — we may be required by law to retain certain data (such as transaction records) even after an erasure request.

Right to Restriction of Processing

You have the right to request that zxbaji restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is contested or while an objection to processing is assessed.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time, with no need to provide justification.

Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that zxbaji transmit this data directly to another service provider where technically feasible.

zxbaji takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration.

Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and zxbaji's servers is encrypted using TLS 1.2 or higher, providing industry-standard protection against interception.
• Password Hashing: Account passwords are never stored in plain text. zxbaji uses modern cryptographic hashing algorithms (bcrypt or equivalent) so that even internal staff cannot read your password.
• Firewalls and Intrusion Detection: zxbaji's servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for and block suspicious access attempts in real time.
• Secure Data Centres: Player data is stored in physically secured data centres with restricted access controls, 24/7 monitoring, and environmental protections against damage or data loss.
• Regular Security Audits: zxbaji conducts regular internal and third-party security assessments to identify and remediate vulnerabilities before they can be exploited.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific data categories are granted that access.
• All staff with access to personal data are trained on data protection obligations and the consequences of mishandling player information.
• Third-party service providers who process data on behalf of zxbaji are assessed for security compliance before engagement and are bound by data processing agreements.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, zxbaji will notify affected individuals without undue delay via the email address registered to their account. The notification will describe the nature of the breach, the data categories affected, the likely consequences, and the steps zxbaji is taking to address it.

The zxbaji platform integrates with a number of third-party service providers to deliver a complete gaming and betting experience. While zxbaji carefully selects and contracts with these providers, each third-party service operates under its own privacy policy and data handling practices. This section describes the categories of third-party services that may process data in connection with your use of zxbaji.

Game Providers

Games available on the zxbaji platform are supplied by independent game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch and play a game, the relevant game provider's software processes your game session data — including bet amounts, game outcomes, and session duration — on their own certified servers. These providers are independently audited for fair play and data security. zxbaji does not control the internal data processing practices of these studios beyond the requirements set out in our contracts with them.

Payment Service Providers

Deposit and withdrawal transactions are processed via third-party payment gateways that support bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer. When you initiate a payment, you interact directly with the payment provider's secure interface. The payment provider receives your transaction details and processes them according to their own privacy policy and financial data security standards. zxbaji does not receive or store your full card numbers, mobile banking PINs, or online banking credentials.

Analytics and Performance Tools

zxbaji may use privacy-conscious analytics tools to measure platform performance, identify technical issues, and understand aggregate usage patterns. Any analytics data collected through these tools is anonymised or pseudonymised before processing and is used solely to improve the zxbaji platform experience. No personally identifiable information is shared with analytics providers for profiling or advertising purposes.

Identity Verification Services

KYC verification may be carried out with the assistance of specialist identity verification providers. These providers receive only the documents and personal data necessary to complete the verification check. They are contractually prohibited from using or retaining your data beyond the scope of the verification service.

No Embedded Social Media or Advertising Networks

zxbaji does not embed social media share buttons, tracking pixels from advertising networks, or retargeting scripts on its platform pages. There are no Facebook Pixel, Google Ads conversion tags, or similar third-party advertising trackers present on any page of the zxbaji website. Your browsing activity on zxbaji is not shared with external advertising platforms.

zxbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to the services we offer, changes in applicable law, or recommendations from data protection authorities. The most current version of this Privacy Policy will always be available on this page at zxbaji.net/privacy-policy.

How We Notify You of Changes

When we make material changes to this Privacy Policy — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify you by sending an email to the address registered to your zxbaji account. The notification will summarise the key changes and provide a link to the updated policy. We will also update the "Last Updated" date at the top of this page each time a revision is published.

Minor Updates

For minor clarifications, typographical corrections, or non-material structural changes, zxbaji may update this policy without sending individual notifications. The revised "Last Updated" date on the page will indicate that a change has been made. We encourage you to review this page periodically, particularly before making deposits or engaging with new platform features.

Continued Use as Acceptance

By continuing to use the zxbaji platform after a revised Privacy Policy has been published and (where applicable) you have been notified, you acknowledge that you have read and understood the updated policy. If you do not accept the changes, you should stop using the platform and request account closure by contacting [email protected] before the revised policy takes effect.

Governing Language

This Privacy Policy is written in English, which is the governing language of all legal documents on the zxbaji platform. In the event of any inconsistency between this English-language version and any translated summary or explanation, the English version shall prevail.

Jurisdiction

This Privacy Policy is intended to comply with applicable data protection principles relevant to the jurisdictions in which zxbaji operates and its players are located, including Bangladesh. Any disputes arising from or in connection with this Privacy Policy shall be addressed in the first instance by contacting the zxbaji privacy team at [email protected]. zxbaji will make every reasonable effort to resolve privacy concerns informally before any formal escalation.