Privacy Policy — Your Data, Protected

1. Information We Collect

When you register with, access, or use x7ibajee, we may collect the following categories of personal data, depending on the nature of your interaction with the Platform:

a) Registration & Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (collected for mandatory age verification — x7ibajee is an 18+ platform 18+).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other) and postal code.
• Email address and mobile phone number registered in your own name.
• Username and encrypted password.
• Copies of identity documents submitted during KYC verification (e.g., National ID card, passport, driver's licence).

b) Financial & Transaction Data

• Payment method details — including bKash account numbers, Nagad account numbers, Rocket wallet identifiers, Upay account references, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and USDT wallet addresses.
• Deposit and withdrawal transaction records, including amounts in BDT (৳) and timestamps.
• Bonus and promotion claims history.
• Account balance information.

c) Usage & Gameplay Data

• Games played, bet amounts, outcomes, session durations, and wagering history.
• Sports betting selections — including cricket markets (BPL, IPL, T20, international fixtures), beach volleyball, slide games, and other available markets.
• Platform feature interactions — pages visited, buttons clicked, and in-session navigation paths.
• Responsible Gaming tool usage — deposit limits set, session reminders configured, cooling-off periods activated, or self-exclusion requests submitted.

d) Technical & Device Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type and version.
• Unique device identifiers and mobile advertising IDs (where applicable).
• Session logs, access timestamps, and platform error logs.

e) Communications Data

• Records of correspondence between you and our support team — including live chat transcripts, emails sent to support@x7ibajee, and WhatsApp messages.
• Responses to surveys, feedback forms, or promotional participation (where applicable).

2. How We Use Your Data

x7ibajee uses the personal data we collect for the following clearly defined purposes. We process your data only where we have a valid legal basis to do so (see Section 3 below):

x7ibajee will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis.

3. Legal Basis for Processing

x7ibajee processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under these Terms — including operating your account, processing transactions, and delivering the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable legal requirements — including Know Your Customer (KYC) obligations, anti-money laundering (AML) regulations, age verification mandates, and lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of x7ibajee's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your own privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications and for the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Sharing & Third Parties

We may share your personal data with the following categories of third-party recipients under strict contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and USDT network processors — to facilitate deposits and withdrawals in BDT (৳) and cryptocurrency.
• Identity verification providers: Third-party KYC and age-verification service providers who assist in verifying the identity and age of registered players.
• Game providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive limited gameplay data necessary to deliver and maintain their game products on our Platform.
• Analytics and platform performance providers: Service providers who help us analyse platform usage and improve the user experience, operating under contractual data minimisation and anonymisation obligations.
• Fraud prevention and AML screening services: Third-party providers assisting with fraud detection, security monitoring, and anti-money-laundering compliance checks.
• Customer support infrastructure: Providers of our live chat, email support, and WhatsApp communication tools, who process communications data on our behalf.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, courts, or regulators — where we are legally required or legally permitted to disclose your data in response to a lawful request.

All third-party service providers operating on our behalf are bound by contractual terms that restrict their use of your data to the specific purpose for which it was shared, prohibit onward transfer without our authorisation, and require them to maintain appropriate security standards.

5. Cookies & Tracking Technologies

x7ibajee uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the Platform effectively, enhance your user experience, and gather analytics data that helps us improve our services.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They include session authentication tokens, security cookies, and cookies that maintain your login state. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: These remember your preferences — such as language settings, preferred payment method, and responsible gaming limit configurations — to provide a personalised experience on return visits.
• Analytics cookies: These help us understand how players interact with x7ibajee — which games are most popular, how players navigate between sections, and where technical issues may be occurring. Analytics data is aggregated and anonymised where possible. These cookies are set only with your consent.
• Marketing and retargeting cookies: Where you have opted in to marketing communications, these cookies help us ensure that promotional content shown to you is relevant to your gameplay preferences and activity on x7ibajee. We do not use cross-site advertising networks that track you across unrelated third-party websites.

You can manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of x7ibajee, though some personalisation features may be affected.

6. Data Retention

x7ibajee retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. The following retention principles apply:

• Active account data: All personal data associated with an active player account is retained for the duration of the account's active status on the Platform.
• Post-closure retention: Following voluntary account closure or Platform-initiated account termination, we retain core identity, transaction, and KYC records for a minimum period as required by applicable financial regulations and AML compliance obligations. This period is typically five (5) years from the date of account closure.
• Self-exclusion records: Where a player has self-excluded through our Responsible Gaming tools, we retain sufficient data to enforce that exclusion and prevent re-registration for the duration of the exclusion period.
• Legal hold: If your data becomes relevant to an active investigation, legal proceeding, or regulatory inquiry, we may retain relevant records beyond our standard retention periods until the matter is fully resolved.
• Marketing data: If you withdraw consent for marketing communications, your contact details will be suppressed from our marketing lists promptly. A minimal suppression record is kept to ensure we honour your opt-out preference.
• Technical logs: Server access logs and security event logs are retained for a shorter operational period (typically 90 days) unless a specific security incident requires extended retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

7. Your Privacy Rights

As a registered player on x7ibajee, you hold the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): In certain circumstances — where data is no longer necessary for the purpose it was collected, or where you withdraw consent — you may request that we delete your personal data. This right is subject to our legal retention obligations; we cannot erase data that we are legally required to retain.
• Right to restriction of processing: You may request that we temporarily pause or limit our processing of your data in specific circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests — particularly for direct marketing purposes. Where you object to marketing, we will cease such processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred prior to withdrawal.

x7ibajee will not discriminate against you or restrict your access to the Platform as a result of you exercising any of the rights described above, except where the exercise of a right (such as erasure) necessarily requires account closure due to our inability to operate the account without the relevant data.

8. Data Security

x7ibajee implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption: All data transmitted between your device and x7ibajee servers is encrypted using industry-standard SSL/TLS protocols, ensuring that your credentials, payment information, and personal data cannot be intercepted in transit.
• Encrypted data storage: Sensitive data — including passwords (stored as salted cryptographic hashes), financial records, and identity documents — is stored in encrypted form on our secured servers.
• Access controls: Access to personal data within x7ibajee is restricted on a strict need-to-know basis. Staff access is role-based and logged; privileged access undergoes regular review.
• Two-factor authentication (2FA): Registered players are encouraged to enable 2FA on their accounts for an additional layer of login security. 2FA is also applied to internal administrative access.
• Intrusion detection and monitoring: Our platform is monitored continuously for unusual activity patterns, unauthorised access attempts, and potential security breaches. Automated alerts trigger immediate investigation and response procedures.
• Regular security audits: x7ibajee conducts periodic security assessments to identify and address vulnerabilities in our platform infrastructure, code, and data handling practices.

While x7ibajee takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and interests, we will notify affected users in a timely manner and take all appropriate remedial steps.

You also play an important role in keeping your data secure. Please ensure that your x7ibajee account password is strong, unique, and not shared with any other person. If you believe your account has been compromised, contact us immediately at support@x7ibajee.

9. Children & Minors

The x7ibajee Platform is designed exclusively for adults aged 18 years and above. We apply mandatory age verification checks at registration and during the KYC process to confirm that all registered players meet this requirement.

If we become aware — through our age-verification procedures, third-party screening, user report, or any other means — that a person under the age of 18 has registered an account or provided personal data on x7ibajee, we will:

• Immediately suspend and permanently close the account.
• Delete all personal data associated with the minor's account as promptly as is consistent with our legal obligations.
• Void any bets placed and forfeit any balance held in the account.
• Report the matter to relevant authorities where required by applicable law.

If you are a parent or legal guardian and believe that a person under 18 in your care may have accessed x7ibajee or provided personal data to us without your knowledge, please contact us immediately at support@x7ibajee. We will investigate and take appropriate action without delay.

We also strongly encourage parents and guardians to make use of internet parental control tools and filtering software to prevent minors from accessing online gambling platforms. Useful resources are available through our Responsible Gaming page.

10. Changes to This Policy

x7ibajee reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable law, evolving data protection best practices, or material changes to how we operate the Platform.

When we make material changes to this Privacy Policy, we will notify registered users by posting a prominent notice on the x7ibajee website and, where appropriate, by sending a notification to your registered email address. The "Last Updated" date at the top of this page will be revised to reflect the date on which any updated version takes effect.

Your continued use of x7ibajee following the effective date of any updated Privacy Policy constitutes your acknowledgement of those changes. We encourage you to review this page periodically to stay informed of how we protect your personal data. If you have any concerns about a change to this Privacy Policy, please contact us at support@x7ibajee before continuing to use the Platform.

Where a proposed change to this Privacy Policy would significantly alter how we use data that was collected under a previous version of the policy in a way that is materially less favourable to you, we will seek your consent before applying that change to your existing data.

11. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which x7ibajee handles your personal data, please do not hesitate to get in touch with us. Our team is committed to responding to all privacy-related enquiries promptly and transparently.

• Email: support@x7ibajee — please use the subject line "Privacy Enquiry" and include your registered account details for faster processing.
• Live Chat: 24/7 live chat is available directly on the x7ibajee platform — Bangladesh Standard Time (BST, UTC+6).
• WhatsApp: +880 1700 000000 — available during support hours (24/7, BST).

All privacy-related correspondence must be submitted in English. Requests submitted in other languages may be delayed while translation is arranged. We aim to acknowledge all privacy requests within 48 hours and resolve them within 30 days, or sooner where the nature of the request permits.