X Baij's Privacy Policy – Your data is safe with us

X Baij (xbaij.click) treats your privacy as its highest priority. This Privacy Policy explains what information we collect when you use our website, mobile app, or any of our services, how we use it, and how we keep it secure.

By using any X Baij service, you agree to this Privacy Policy. We want you to make an informed decision, which is why we've written it in plain, easy-to-understand language.

• This policy applies to all users, including those in Bangladesh.
• Any changes to this policy will be posted on this page, and you will be notified.
• This version, written in English, is legally valid and binding.

X Baij only collects the information necessary to provide you with our services. We do not collect any data beyond what is required.

We never access your precise GPS location, camera, or microphone.

X Baij uses collected information only for specific, legitimate purposes. Details are outlined below:

• Account Management: To facilitate registration, login, KYC verification, and account security.
• Payment Processing: To process deposits and withdrawals securely.
• Service Improvement: To analyze usage patterns and improve your experience.
• Contact: To provide important updates, transaction notifications, and support services.
• Security: To prevent fraud, hacking, and other cyber threats.
• Legal Obligations: To comply with licensing authorities and government directives.
• Responsible gaming: To identify signs of gaming addiction and provide timely support.

X Baij retains your data only for as long as necessary. All data is kept for the duration your account remains active.

• Account information: Up to 5 years after account closure (as required by law).
• Transaction records: 7 years in accordance with financial regulatory requirements.
• Log Files: Automatically deleted after 90 days.
• Marketing Consent: Deleted immediately upon consent withdrawal.

If you request deletion of your data beyond legal retention requirements, we will action it within 30 days.

X Baij never sells your information to third parties for advertising or commercial purposes. However, limited data may be shared in certain specific circumstances:

• Payment Processors: Only the data required to process transactions with Mobile Pay, Nagad, and Rocket.
• Game providers: Technical data from game sessions with Evolution Gaming and Pragmatic Play.
• KYC Partner: With trusted third parties for identity verification.
• Law Enforcement Agencies: Only when required by a court order or mandatory legal obligation.
• Anti-Fraud System: With industry-standard verification services for fraud prevention.

All third-party partners are contractually bound to uphold our data protection standards.

X Baij uses cookies on its site and app. Cookies are small data files stored in your browser that help the site remember your preferences.

• You can disable cookies from your browser settings, though some features may not work as a result.
• X Baij does not use any third-party advertising tracking cookies.
• The mobile app stores similar data locally on your device.

X Baij gives you full control over your personal information. You have the following rights:

To exercise these rights support@xbaij.click. We'll respond within 30 days.

X Baij is not intended for anyone under 18. We do not knowingly collect information from minors.

• Age is verified at the time of registration.
• In suspected cases or if required by a court, identity verification via birth certificate or NID will be carried out.
• Accounts found to be used by minors for fraudulent activity will be closed immediately.

X Baij uses industry-leading technology and practices to protect your data. Our security infrastructure is regularly audited by independent third-party security experts.

• SSL/TLS 256-Bit Encryption: All data transfers are fully encrypted.
• Password Hashing: Passwords are stored using the bcrypt algorithm – no one can view them.
• Two-factor authentication (2FA): An additional layer of security for your account.
• Server Security: Firewall, DDoS protection, and regular security audits.
• Access Controls: Only authorized personnel may access specific data.
• Data Backup: Encrypted backups are taken regularly and stored in a secure location.

X Baij may update this Privacy Policy from time to time. Depending on the nature and significance of the changes, you will be informed in the following ways:

• Minor Changes: This page will be updated and the "Last updated" date will reflect the change.
• Important changes: At least 7 days' notice via SMS to your registered mobile number and by email.
• Material Changes: A clear notice will be displayed at login to obtain fresh consent.

Continued use of the platform after an updated policy takes effect will be considered acceptance of the new terms. If you do not agree to the changes, you may request account closure.

For any privacy-related questions, requests, or complaints, please reach out to our Data Protection team. We always respond in Bengali.

• To request data deletion or access, send us an email and include the mobile number registered to your account.
• If you're not satisfied with the complaint resolution, you may escalate the matter to the relevant licensing authority.