xbate Privacy Policy — How We Handle Your Data
xbate is committed to protecting the privacy and security of every Bangladesh player. This policy explains what data we collect, why we collect it, and how we keep it safe.
Six key principles that define how xbate treats your personal information.
256-bit SSL Encryption
All data transmitted between your device and xbate servers is encrypted using industry-standard 256-bit SSL technology.
Minimal Data Collection
We collect only the personal data necessary to operate your account, verify your identity, and process payments. We do not collect unnecessary information.
No Sale of Personal Data
xbate does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes.
Communications Control
You may opt out of marketing communications at any time by contacting xbate support. Transactional messages (e.g. deposit confirmations) cannot be opted out of.
Cookie Usage
xbate uses essential cookies for session management and analytics cookies to improve the platform. You may manage cookie preferences via your browser settings.
Your Rights
You have the right to access, correct, and request deletion of your personal data held by xbate. Contact support to exercise your rights.
1. Introduction and Scope
This Privacy Policy ("Policy") describes how xbate ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "User", "Player") who access or use the xbate platform, including the website, any associated mobile-optimised pages, and all related services. This Policy forms part of the xbate Terms & Conditions and should be read alongside them.
By registering an account or otherwise using the xbate platform, you consent to the collection and use of your personal data as described in this Policy. If you do not agree with this Policy, you must not use the xbate platform. We may update this Policy from time to time. The date of the most recent revision is shown at the top of this page. Continued use of the platform following any update constitutes acceptance of the revised Policy.
2. Personal Data We Collect
xbate collects personal data that you provide directly to us, data that is generated automatically through your use of the platform, and in certain circumstances, data received from third-party service providers. The categories of personal data we collect are set out below.
Data you provide directly
- Registration data: your full name, date of birth, registered mobile number, and any other information required at account creation.
- KYC verification documents: copies of your National Identity Card (NID), passport, or other government-issued identification submitted for age and identity verification purposes.
- Payment information: details of the payment methods you use to deposit and withdraw funds, including mobile wallet identifiers (e.g. the bKash or Nagad account number associated with your transactions). xbate does not store full card numbers or full mobile banking credentials.
- Communications: the content of any messages you send to xbate support, including queries, complaints, and feedback.
- Responsible gaming information: details of any responsible gaming tools you activate, including deposit limits, self-exclusion periods, and session time settings.
Data collected automatically
- Device and technical data: your device type, operating system, browser type and version, screen resolution, IP address, and network type (e.g. mobile data, Wi-Fi).
- Usage data: pages visited, games played, session duration, wagering activity, betting history, and platform navigation patterns.
- Cookie data: session cookies, analytics identifiers, and preference cookies as described in our Cookies section below.
3. How We Use Your Personal Data
xbate processes your personal data for the following purposes, each of which is supported by a lawful basis:
- Account creation and management: to register your account, authenticate your identity at login, and manage your account settings and preferences.
- Age and identity verification (KYC): to verify that you meet the 21+ age requirement and to satisfy our obligations to prevent underage gambling and financial crime.
- Payment processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods, and to detect and prevent fraudulent transactions.
- Platform operation and improvement: to deliver games and sports betting services, optimise platform performance for mobile users in Bangladesh, analyse usage patterns, and develop new features.
- Responsible gaming monitoring: to identify players who may be at risk of gambling-related harm and to make relevant responsible gaming tools available to them proactively.
xbate does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human review. If you have questions about how your data is used, please contact us via the support email address on this site.
4. Sharing Your Personal Data
xbate does not sell, rent, or trade your personal data. We share your personal data only with carefully selected third parties where necessary for the operation of the platform, as follows:
- Payment processors: bKash, Nagad, Rocket, Upay, and card payment processors receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
- Game technology providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other game studios whose titles are available on xbate may receive anonymised gameplay and session data for game integrity and technical purposes.
- Identity verification providers: third-party KYC and identity verification services may process your identification documents on our behalf to confirm your age and identity.
- Legal and regulatory authorities: xbate may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law or in response to a lawful request.
All third parties to whom xbate discloses personal data are contractually required to process that data only for the purposes for which it was shared and to maintain appropriate security measures. xbate does not transfer personal data outside of the platforms and services described in this Policy without informing affected users.
5. Data Retention
xbate retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal, regulatory, and KYC obligations, and to resolve any disputes or enforce our agreements. For most active player accounts, this means personal data is retained for the lifetime of the account plus a period of five years following account closure, to comply with standard AML record-keeping requirements.
KYC documents are retained for the period required by applicable anti-money laundering regulations following the date of your last transaction with xbate, unless a longer retention period is required by law. If you request deletion of your personal data, xbate will delete or anonymise all data that we are not legally required to retain, and will inform you of any data that must be kept and the basis for retaining it.
xbate Security Standards — Protecting Bangladesh Players
All data in transit is protected by 256-bit SSL encryption. Stored personal data is protected using encryption at rest, access controls, and regular security audits. xbate's technical and organisational security measures are reviewed and updated regularly to reflect current best practices. No system is completely immune to security risks, but xbate takes every reasonable precaution to protect your data.
6. Cookies and Tracking Technologies
xbate uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and improve the user experience for Bangladesh players. A cookie is a small text file placed on your device by the xbate website. Cookies do not give xbate access to your device and cannot be used to read personal files stored on your device.
Essential cookies
Essential cookies are required for the platform to function. They include session authentication cookies that keep you logged in during a session, security tokens that protect against cross-site request forgery, and cookies that remember your language preference. Essential cookies cannot be disabled without impairing the functioning of the platform.
Analytics cookies
Analytics cookies help xbate understand how players navigate the platform, which games are most popular, and where technical issues arise. The data collected by analytics cookies is aggregated and anonymised wherever possible. You may opt out of analytics cookies by adjusting your browser settings; this will not affect your ability to use the platform.
7. Your Rights Regarding Your Personal Data
As a registered user of xbate, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact xbate support via the email address provided on this site:
- Right of access: you may request a copy of the personal data xbate holds about you. We will respond to access requests within a reasonable period and will provide the data in a commonly used electronic format.
- Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. We will action rectification requests promptly.
- Right of erasure: you may request that xbate delete the personal data we hold about you. We will comply with erasure requests to the extent that we are not legally required to retain the data in question.
- Right to restrict processing: in certain circumstances you may request that xbate restrict the processing of your personal data, for example while a rectification request is being assessed .
- Right to object to marketing: you have the right to object to the use of your personal data for direct marketing purposes at any time. To opt out of marketing communications, contact xbate support via the email on this site.
xbate will respond to all data rights requests within a reasonable period. Where a request cannot be fulfilled in full — for example because we are legally required to retain certain data — we will explain the reason and the legal basis for any data we are unable to delete or restrict.
8. Children and Underage Users
xbate is strictly an adult platform for players aged 21 and above. xbate does not knowingly collect personal data from individuals under the age of 21. If xbate becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all funds will be dealt with in accordance with our Terms & Conditions, and the personal data will be deleted as promptly as possible.
If you are a parent or guardian and you believe that your child has registered on the xbate platform, please contact us immediately via the support email address on this site. We take underage access seriously and will act promptly on any verified report. 21+ only.
9. Security of Your Personal Data
xbate employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures are reviewed and updated on a regular basis to reflect current security best practices and to address emerging threats.
Technical measures
All data transmitted between your browser or mobile device and xbate is encrypted using 256-bit SSL/TLS encryption. Stored personal data and payment records are encrypted at rest. Access to personal data by xbate staff is governed by role-based access controls, and access logs are maintained and reviewed. Our platform infrastructure undergoes regular security assessments.
Your responsibilities
You are responsible for keeping your xbate account credentials secure. Choose a strong, unique password and do not share your login details with anyone. If you believe your account has been accessed without authorisation, contact xbate support immediately via the email address on this site and change your password without delay. xbate will never ask you to reveal your password by email, SMS, phone, or any other channel.
10. Links to Third-Party Services
The xbate platform may reference or integrate with third-party payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game technology providers (Evolution Gaming, Pragmatic Play, NetEnt, and others). These third-party services operate under their own privacy policies and terms of service. xbate is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service you interact with through the xbate platform.
xbate does not control and is not responsible for the content, privacy practices, or security standards of any third-party website, application, or service. Any personal data you provide directly to a third-party service is subject to that service's own privacy policy, not this one.
11. Amendments to This Policy
xbate reserves the right to amend this Privacy Policy at any time. Amendments will take effect upon publication on the xbate website. Where a material change is made to this Policy — for example, a change to the categories of personal data we collect, the purposes for which we use it, or the third parties with whom we share it — we will use reasonable endeavours to notify registered players via the email address associated with their account or via an in-platform notification. Your continued use of the xbate platform following publication of a revised Policy constitutes your acceptance of the revised terms. The date of the most recent revision is shown at the top of this page.
12. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or the way xbate handles your personal data, please contact our support team. All privacy-related enquiries are handled confidentially and responded to within Bangladesh Standard Time business hours.
Support email: [email protected] (plain text — not a clickable link). Please include your registered mobile number and a brief description of your privacy query. xbate aims to respond to all privacy-related enquiries within two Bangladesh Standard Time business days.
Your Privacy Is Protected — Explore xbate
Now that you understand how xbate protects your data, explore our platform. Cricket betting, live casino, slots and more — trusted by players across Bangladesh. 21+ only.
Explore xbate Casino Read Our FAQ