Xbagh's Privacy Policy

Xbagh ("We", "us", "Platform") operates https://xbagh.onl and provides Sports Betting services to users in Bangladesh. This Privacy Policy explains how we collect, use, and protect your personal information.

By using the xbagh website or app, you agree to this Privacy Policy. If you disagree with any part of it, please stop using the service and contact us.

This privacy policy has been prepared in compliance with applicable laws in Bangladesh and international data protection standards. We believe every user has the right to know where their data goes.

Xbagh only collects the information strictly necessary to provide its services. A detailed breakdown of what is collected is listed below.

Xbagh collects data through several methods. Each method is transparent and based on user consent.

• Directly from you: You provide information directly when completing the registration form, going through the KYC verification process, or contacting support.
• Automatic Collection: When you use the platform, cookies, log files, and web beacons automatically collect certain information.
• Payment providers: Limited financial information is received from payment gateways during deposits or withdrawals.
• Third-party verification: Approved third-party services may be used for KYC and age verification.

Xbagh uses collected data only for specified purposes. Information is never used beyond its approved scope.

• Account Management: For login, security verification, and managing account settings.
• Service delivery: To enable betting features, live scores, bonuses, and promotions.
• Payment Processing: To process deposits and complete withdrawals.
• Customer Service: For complaints, questions, and issue resolution.
• Fraud Prevention: To detect and prevent suspicious or unusual activity.
• Legal compliance: To meet the requirements of applicable laws and regulatory authorities.
• Service improvement: To improve platform functionality and enhance the user experience.
• Contact: To deliver important updates, policy changes, and security alerts.

Xbagh may share limited data with third parties in the following circumstances:

• Payment processor: Necessary information is shared with Mobile Pay, Nagad, or your bank to process transactions.
• Identity Verification Services: Information may be shared with approved verification agencies for the KYC process.
• Technology Partners: Cloud hosting and cybersecurity providers receive limited technical data.
• Legal Authorities: We may be required to share information with government authorities under court order or legal obligation.
• Business Transfer: In the event of a company merger or sale, data may be transferred as a business asset; however, the new owner will be bound by this policy.

All partners are bound by strict data protection agreements and may only use your information for the specific purposes they have been authorized for.

Xbagh uses industry-leading technical and procedural measures to protect your data. That said, we honestly acknowledge that no transmission over the internet can be guaranteed to be completely secure.

• SSL/TLS Encryption: All data transmissions are secured with 256-bit SSL encryption.
• Two-factor authentication (2FA): Two-step verification is available for account login.
• Firewall & DDoS protection: Advanced security measures at the server level.
• Regular security audits: Regular security audits conducted by external experts.
• Limited access: Staff can only access the data required to perform their specific role.
• Breach notification: In the event of a data breach, you will be notified promptly in accordance with applicable law.

Cookies are small data files stored in your browser. xbagh uses different types of cookies, each serving a specific purpose.

You can disable optional cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality of certain platform features.

• Right to Know: You may request to see what data we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your data under certain conditions.
• Right to Portability: You may request a copy of your data in a commonly used, portable format.
• Right to restrict processing: In certain circumstances, you may request that the processing of your data be restricted.
• Right to object: You have the right to opt out of marketing communications.

To exercise any of these rights, email us at support@xbagh.onl. We typically respond within 30 days.

Xbagh does not retain data longer than necessary. Retention periods vary depending on the type of information.

• Account information: For the duration of active account use and up to 5 years after closure.
• Transaction data: Up to 7 years for legal and regulatory compliance.
• KYC documents: Up to 5 years after verification.
• Support Conversations: Up to 2 years after an issue is resolved.
• Cookie data: Session cookies are deleted when you close your browser; persistent cookies last up to 1 year.

Once the retention period ends, data is securely deleted or anonymized.

Our platform is strictly for adults. If a minor has accidentally created an account, a parent or guardian can contact us and we will immediately close the account and delete all associated data.

Xbagh may update this privacy policy from time to time. For any significant changes, we will notify you in advance via your registered email or SMS.

Continued use of the platform after any changes constitutes acceptance of the updated policy. The effective date of any revision will always be shown at the top of the page.

Reach out to us for any privacy-related questions, complaints, or requests. We typically respond within 48 hours.

If your complaint is not resolved to your satisfaction, you have the right to escalate it to the relevant authority.