xnajee Privacy
Policy

01. Data We Collect

When you interact with the xnajee platform — whether by registering an account, making a deposit, placing a wager, or contacting our support team — we collect certain categories of personal data. The specific data we collect depends on the nature of your interaction with the platform. Below is a comprehensive overview of what we collect and why.

We do not collect any Special Category Data as defined under applicable data protection legislation (such as data concerning health, religion, political opinions, or biometric data) unless you voluntarily provide it in the context of a responsible gaming self-exclusion request or a support interaction, in which case it is handled with the highest level of confidentiality.

We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided us with personal data, that data will be deleted and the associated account will be closed immediately.

02. How We Use Your Data

xnajee processes your personal data only for legitimate, specified purposes. We rely on one or more of the following legal bases for each processing activity: performance of a contract (operating your account), legal obligation (regulatory and AML compliance), legitimate interests (fraud prevention, platform security, service improvement), and — where required — your explicit consent.

The primary purposes for which we use your personal data are as follows:

• Account creation and management: To register your player account, verify your identity, maintain your account settings, and process account closure requests.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported payment methods. Financial data is shared with payment processors solely for the purpose of completing transactions.
• Regulatory compliance and AML: To meet our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) regulations. This includes verifying your identity, monitoring transaction patterns, and retaining records as required by law.
• Fraud and abuse prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, multi-accounting, and other forms of prohibited behaviour on the platform.
• Service delivery and personalisation: To provide the betting, casino, and customer support services you use; to personalise your experience (e.g., displaying games relevant to your preferences); and to tailor promotional offers where you have consented to receive them.
• Marketing communications: To send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and seasonal promotions — but only where you have opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Platform improvement and analytics: To analyse usage patterns, identify technical issues, and improve the performance, reliability, and content of the xnajee platform. Analytics data is processed in aggregated or anonymised form wherever possible.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and fulfil our duty of care to players who may be experiencing gambling-related harm.
• Legal claims and disputes: To establish, exercise, or defend legal claims in the event of a dispute, chargeback investigation, or regulatory inquiry.

03. Data Sharing & Disclosure

xnajee does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

• Payment service providers: We share financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to process your deposits and withdrawals. These providers are contractually bound to process your data only for the purpose of completing transactions and are prohibited from using it for any other purpose.
• Identity verification and KYC providers: We work with certified third-party identity verification services to validate your government-issued identification documents. These providers operate under strict data processing agreements and are independently certified for data security.
• Game software providers: When you play a game powered by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (such as a pseudonymous player identifier and game session data) is shared with that provider to enable game functionality. These providers do not receive your identity or financial data.
• Regulatory and law enforcement authorities: We may disclose your data to relevant government bodies, financial intelligence units, or law enforcement agencies where we are legally required to do so — for example, in response to a court order, regulatory investigation, or our obligations under AML legislation.
• Fraud prevention and security services: We share technical and transactional data with specialist fraud prevention services to identify and block suspicious activity. This sharing is conducted under strict contractual terms and is limited to the data necessary for fraud detection.
• Corporate transactions: In the event of a merger, acquisition, or sale of the xnajee business, your data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and your rights under this policy will continue to apply.

All third parties with whom we share personal data are contractually required to implement appropriate technical and organisational security measures and to process your data only for the purposes specified in our agreements with them.

04. Cookies & Tracking

xnajee uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate the platform, maintain your logged-in session, remember your preferences, and analyse how the site is used. Cookies are small text files stored on your device by your browser.

We use the following categories of cookies on the xnajee platform:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account security tokens, remember your language and currency settings, and enable core features such as the game lobby, cashier, and live betting interface. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Performance and analytics cookies: These cookies collect anonymised or aggregated data about how visitors use the xnajee platform — which pages are visited most often, how long users spend on each section, and where technical errors occur. This data is used exclusively to improve platform performance and user experience.
• Functionality cookies: These remember your preferences such as your preferred game category, display settings, and notification preferences, allowing us to provide a more personalised experience when you return to the platform.
• Targeting and marketing cookies: Where you have consented, these cookies track your activity across our platform to help us display relevant promotional content. We do not use cross-site tracking cookies that follow you across third-party websites.

Most browsers allow you to manage, block, or delete cookies through the browser settings menu. Please note that disabling strictly necessary cookies will affect the functionality of the xnajee platform, potentially preventing you from logging in or completing transactions. Instructions for managing cookies in common browsers are available through the help documentation of your specific browser.

05. Data Retention

xnajee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. We operate a formal data retention schedule that is reviewed annually. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account's active status plus a minimum of five years following account closure, in accordance with AML and financial record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five years following the date of each transaction, as required by applicable financial regulations and AML legislation.
• KYC verification documents: Retained for five years from the date of verification or account closure, whichever is later. Copies of identity documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Communications and support records: Live chat transcripts, email correspondence, and support tickets are retained for three years from the date of the interaction, to enable us to resolve future disputes and maintain service quality records.
• Technical and usage data: Log files and session data are retained for up to 24 months for security monitoring, fraud detection, and platform performance analysis purposes. Aggregated analytics data may be retained indefinitely in anonymised form.
• Marketing consent records: Records of your marketing preferences and consent status are retained for the duration of your account plus two years following account closure or consent withdrawal, to demonstrate compliance with applicable data protection requirements.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Where deletion is not technically immediately feasible (for example, data held in backup systems), the data will be isolated from active processing and deleted at the next scheduled backup purge cycle.

06. Your Privacy Rights

As a user of the xnajee platform, you hold a number of rights in respect of the personal data we hold about you. We are committed to facilitating the exercise of these rights promptly and without unnecessary friction. To exercise any of the rights listed below, please contact our data protection team at [email protected] with the subject line "Privacy Rights Request" and a description of your request.

• Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a clear, machine-readable format within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain information (such as your contact details) directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that this right is subject to our legal obligations to retain certain data (e.g., transaction records under AML law), which take precedence.
• Right to restriction of processing: In certain circumstances (for example, while a rectification request is being assessed), you may request that we restrict the processing of your data to storage only.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

We will respond to all verified privacy rights requests within 30 calendar days. In cases of complexity or volume, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

07. Data Security

xnajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to reflect the evolving threat landscape.

• Encryption in transit: All data transmitted between your device and xnajee servers is protected using TLS 1.2 or higher (256-bit SSL encryption). This applies to all platform interactions including login, deposit, withdrawal, and support communications.
• Encryption at rest: Sensitive personal data — including identity documents, financial data, and password hashes — is stored in encrypted form using industry-standard encryption algorithms. Passwords are never stored in plaintext.
• Access controls: Access to personal data within xnajee is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed quarterly and revoked immediately upon role change or employment termination.
• Two-factor authentication: xnajee supports two-factor authentication (2FA) for all player accounts. We strongly encourage all users to enable 2FA via their account security settings.
• Vulnerability management: The xnajee platform undergoes regular penetration testing and security audits by independent third-party security firms. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Data breach response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and take immediate steps to contain and remediate the breach.

While xnajee takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure: use a strong, unique password for your xnajee account, enable 2FA, never share your credentials with any third party, and notify us immediately if you suspect any unauthorised access.

08. Policy Updates & Contact

xnajee reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or regulatory guidance. When we make material changes to this policy, we will notify active account holders via the email address registered to their account and publish the updated policy on this page with a revised "Last Updated" date.

We encourage you to review this Privacy Policy whenever you visit the xnajee platform. Your continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you have the right to close your account and request the deletion of your data, subject to our legal data retention obligations.

For any questions, concerns, or requests relating to this Privacy Policy or the way xnajee processes your personal data, please contact our data protection team using the details below:

• Email: [email protected] — use subject line "Privacy Policy Enquiry"
• Response time: We aim to respond to all privacy-related enquiries within two business days.
• Support hours: 24/7 — English and Bengali support available

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the xnajee Privacy Policy.