The cards below summarize the key commitments of our Privacy Policy.
All your data is protected with 256-bit SSL encryption — making it virtually impossible for hackers to access.
Xbagh never sells your personal data to third parties — and your data is not shared for advertising purposes either.
You can request to view, correct, or delete your information at any time.
All data is stored on internationally certified secure servers. Regular security audits are conducted.
Xbagh complies with international data protection standards. Your rights are treated with the utmost importance.
In the event of a data breach, affected users will be notified within 72 hours.
Introduction & Applicability
This Privacy Policy ("Policy") applies to the xbagh platform and all its services. By registering on or using xbagh, you are considered to have accepted this Policy.
Protecting your privacy at xbagh is not just a legal obligation — it is a core part of our philosophy. Millions of players in Bangladesh trust us, and maintaining that trust is our greatest responsibility.
Who Is This Policy For? This Privacy Policy applies to all visitors of the xbagh website or app, registered members, and anyone using our gaming services.
This policy may be updated at any time. For significant changes, advance notice will be sent to your registered email.
What Data We Collect
Xbagh collects only the data that is necessary. Requesting excessive or irrelevant information is against our policy.
Information Provided Directly
| Data Type | Why It's Collected |
|---|---|
| Name & Date of Birth | Identity Verification & Age Confirmation |
| Mobile Number & Email | Account Communication & Security |
| Payment Details (Mobile Pay/Nagad number) | Transaction Processing |
| Copy of ID Document | KYC Verification (where required) |
Automatically Collected Data
- IP Address & Device Information (Operating System, Browser)
- Login time, session duration & gaming activity
- Page visits, click patterns & search history (within the platform)
- Device location (general — district level, not precise)
We never store your full bank account number or complete credit card details. All payment processing takes place through fully encrypted channels.
How Your Data Is Used
Xbagh uses collected data solely for the following purposes:
- Account Management: To support registration, login, password recovery, and overall account security.
- Payment Processing: To process deposits and withdrawals securely.
- Enhancing Gaming Experience: To suggest games tailored to your preferences and personalize offers for you.
- Customer Support: For resolving issues and handling complaints.
- Responsible Gaming: To detect unusual gaming patterns and provide timely support.
- Legal Obligation: To comply with AML (Anti-Money Laundering) regulations.
- Promotional Communications: To inform you about offers and bonuses (you can opt out at any time).
Profiling Limits: xbagh uses automated profiling to suggest games — but this process is never used to make any decisions that negatively affect you.
Data Retention & Security Practices
Xbagh uses a multi-layered security system to protect your data. This isn't just talk — concrete technology is actively working at every level.
Technical Security
- TLS 1.3 protocol on all transmissions
- AES-256 Encryption in Database
- Passwords are bcrypt-hashed — never stored in plain text
- Two-Factor Authentication (2FA) Support
- Regular penetration testing and vulnerability scanning
Retention Period
Even after account closure, certain data may be retained for up to 5 years due to legal obligations. After that period, it is securely deleted.
No xbagh employee can view your complete payment details. Role-Based Access Control (RBAC) ensures that only authorized personnel can access relevant information.
Data Sharing with Third Parties
Xbagh does not sell your data to third parties. However, information may be shared in the following limited circumstances:
Authorized Sharing
- Payment Provider: Only transaction-related information is shared with payment processing partners such as Mobile Pay, Nagad, and Rocket.
- Game Providers: Only the minimum data necessary to operate games properly.
- Legal Authorities: When required by a valid court order or legal investigation.
- Security Auditor: Third-party auditors approved by the licensing authority.
Contractual Protection: Every third party we share data with is bound by a privacy agreement that meets xbagh's own standards. Any breach of that agreement results in immediate termination of the relationship.
Your data is never shared with advertisers, data brokers, or marketing companies.
Cookie Policy
Xbagh uses cookies on its platform. Cookies are small data files stored in your browser that help improve the site's functionality.
Cookie Types & Purposes
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Login Session, Security | Deleted at end of session |
| Functional Cookies | Saving Language & Preferences | 30 Days |
| Analytics Cookies | Understanding User Behavior | 90 days |
| Performance Cookies | Improving Page Load Speed | 1 year |
Cookies can be disabled through your browser settings, though doing so may limit some features of the platform.
Your Rights
You have full control over your personal data at xbagh. The following rights are yours:
You have the right to request details on what information xbagh holds about you.
You can request corrections to any inaccurate or outdated information.
You can request account closure and deletion of your data (except where retention is required by law).
You can request that we stop using your data for specific purposes.
You can request your data in a machine-readable format for portability.
You can opt out of promotional communications at any time.
To exercise these rights support@xbagh.bizto send us an email. We will respond within 30 days.
Children's Privacy Protection
Xbagh strictly prohibits anyone under the age of 18 from accessing the platform. No information is collected from minors — this is our most non-negotiable policy.
If we suspect a minor has opened an account, that account is immediately closed and any collected data is securely deleted.
For Parents: If your child has accidentally registered on xbagh, please contact us immediately support@xbagh.bizto notify us. We will take prompt action.
Changes to the Privacy Policy
Xbagh may update this Privacy Policy as needed. Changes may be driven by new laws, new technologies, the addition of new services, or updates to business processes.
- For minor changes, only this page will be updated
- For significant changes, you will be notified 30 days in advance at your registered email
- Continued use of the platform after any changes take effect will be considered acceptance of the updated policy
If you need a copy of a previous policy, contact our support team. We can provide archived versions of past policies.
Contact & Complaints
For any privacy-related questions, requests, or complaints, you can reach us through the following:
- Email: support@xbagh.biz
- Subject Line: Write "Privacy Request — [your username]" in the subject line
- Live Chat: Directly by logging into the platform
- Response Time: Usually within 3 business days
If unresolved: If your issue cannot be resolved directly with us, you have the right to escalate your complaint to the relevant licensing authority.