Privacy Policy — xbetshop

Introduction & Scope

This Privacy Policy ("Policy") is published by xbetshop ("the Platform", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data relating to individuals ("Player", "User", "you") who access or use the xbetshop website, mobile-optimised interface, and all associated services, including online casino gaming, live dealer tables, sports betting markets, and promotional programmes.

This Policy applies to all players accessing xbetshop from Bangladesh and from any other jurisdiction where the platform is accessible. By creating an account, making a deposit, or continuing to use any part of the xbetshop platform, you acknowledge that you have read this Policy and consent to the data practices described herein.

This Policy should be read in conjunction with the xbetshop Terms & Conditions, which govern your overall use of the platform. Capitalised terms not defined in this Policy carry the meaning ascribed to them in the Terms & Conditions.

Personal Data We Collect

xbetshop collects personal data from you in several ways: directly when you register an account or interact with the platform, automatically through your use of the platform, and occasionally from third-party sources such as payment processors and identity verification services. The categories of data we collect are described below.

xbetshop does not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from an underage individual, that data will be deleted promptly and the associated account will be closed.

How We Use Your Data

xbetshop processes your personal data only for lawful purposes. The primary legal bases on which we rely are: (a) performance of the contract between you and xbetshop (i.e., providing the services you have registered for); (b) compliance with legal obligations; (c) our legitimate interests in operating a secure and commercially sustainable platform; and (d) your consent, where we are required to obtain it.

The specific purposes for which we use your personal data are set out below:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and facilitate account recovery.
• Service delivery: To enable you to access games, place bets, process deposits and withdrawals in BDT, and participate in promotions.
• KYC and fraud prevention: To comply with our Know Your Customer obligations, verify your age and identity, detect and prevent fraudulent activity, money laundering, and multi-accounting.
• Customer support: To respond to your queries, complaints, and requests via live chat, email, and WhatsApp during Bangladesh Standard Time support hours.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, apply self-exclusion and deposit limit settings, and fulfil our duty of care obligations.
• Platform improvement: To analyse aggregated usage data, identify technical issues, and improve the user experience of the platform for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign messages (such as Eid and BPL season promotions) — but only where you have opted in to receive marketing communications. You may opt out at any time via your account settings or by contacting support.
• Legal and regulatory compliance: To respond to court orders, regulatory requests, or lawful demands from competent authorities.

Cookies & Tracking Technologies

xbetshop uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate the platform efficiently, remember your preferences, and understand how players interact with the site. A cookie is a small text file placed on your device by a web server when you visit a website.

The following categories of cookies are used on xbetshop:

xbetshop does not place third-party advertising or re-targeting cookies on your device. Strictly necessary cookies are exempt from consent requirements as they are essential to provide the service you have requested. All other cookie categories are only placed following your acknowledgement of our cookie notice upon first visit to the platform.

You may configure your browser to refuse or delete cookies at any time. Please be aware that disabling strictly necessary cookies will impair your ability to log in to your xbetshop account and use core platform features. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Samsung Internet, etc.).

Data Sharing & Third Parties

xbetshop does not sell, rent, or trade your personal data to any third party. We may, however, share your data with a limited set of trusted service providers and partners strictly for the purposes described in this Policy. All such third parties are contractually required to handle your data securely and only for the purposes for which it has been shared.

Categories of third parties with whom your data may be shared include:

• Payment processors and mobile money operators: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — solely to process your deposits and withdrawals in BDT.
• Identity verification services: Third-party KYC and document verification providers who assist in confirming the identity and age of players during the account verification process.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive only the minimum technical identifiers necessary to deliver game sessions and record game outcomes.
• Analytics and platform monitoring tools: Aggregated and anonymised usage data is processed by performance analytics services to help us improve the platform.
• Customer support platforms: Live chat and helpdesk software providers that facilitate our 24/7 English-language support for players across Bangladesh.
• Legal and regulatory authorities: Where required by a valid court order, regulatory directive, or lawful request from a competent authority, we may disclose personal data to the extent strictly necessary to comply with that obligation.

Data Retention & Storage

xbetshop retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain your active player account, and to comply with applicable legal and regulatory obligations. The following indicative retention periods apply:

• Active account data (identity, contact, financial): Retained for the duration of your account being open, and for a minimum of five years following account closure to satisfy anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable legal or regulatory requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping standards.
• Support communications: Retained for a period of three years from the date of the interaction, after which they are deleted or anonymised.
• Technical and usage data (logs): Server logs and access records are retained for a maximum of 12 months and then automatically purged unless required for an active investigation.
• Marketing consent records: Retained for the period during which marketing communications are sent, plus three years following opt-out to demonstrate historical consent compliance.

Upon expiry of the applicable retention period, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to any individual. xbetshop stores all player data on servers equipped with enterprise-grade physical and digital security controls.

Your Privacy Rights

As a player on xbetshop, you hold a number of rights with respect to your personal data. These rights are summarised below. To exercise any of these rights, please contact our support team. We aim to respond to all valid data subject requests within 10 business days. In some cases, we may need to verify your identity before processing a request to ensure that data is not disclosed to an unauthorised party.

• Right of access: You may request a copy of the personal data that xbetshop holds about you, along with information about how that data is used and with whom it has been shared.
• Right to rectification: You may request that inaccurate or incomplete personal data held about you be corrected or updated. For account details such as email address or mobile number, updates can also be made directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data. This right is subject to overriding legal obligations — for example, we are required to retain transaction records and KYC documents for a minimum period as described in Section 6.
• Right to restriction of processing: In certain circumstances, you may request that we limit the way in which we process your personal data — for example, while the accuracy of data is being contested.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing of your personal data carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring purposes. You may opt out of marketing communications at any time without restriction.
• Right to withdraw consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Data Security Measures

xbetshop takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction.

Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers, including login sessions, payment flows, and support interactions.
• At-rest encryption for all sensitive personal and financial data stored in our databases, using industry-standard AES-256 encryption algorithms.
• Two-factor authentication (2FA) available to all players via their registered Bangladesh mobile number, providing an additional layer of account security beyond username and password.
• Role-based access controls ensuring that internal xbetshop staff can only access personal data that is relevant to their job function. All data access is logged and periodically audited.
• PCI-DSS compliant payment processing for all card transactions, ensuring that full payment credentials are never stored on xbetshop servers.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified information security professionals.
• Incident response procedures that are activated in the event of a suspected data breach, including player notification where required and appropriate.

While xbetshop employs robust security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the confidentiality of your own account credentials, choosing a strong and unique password, and enabling 2FA on your account. If you suspect that your account has been compromised, contact our support team immediately via live chat.

Updates to This Policy

xbetshop reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal and regulatory standards. When material changes are made to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify active players by posting a prominent notice on the platform or by sending a notification to your registered email address or Bangladesh mobile number.

Your continued use of the xbetshop platform following the publication of any amendment to this Privacy Policy constitutes your acknowledgement of the updated Policy. We therefore encourage you to review this page periodically, particularly if you are an active player. If you disagree with any material change to this Policy, your recourse is to cease using the platform and request account closure in accordance with the procedure described in the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the way xbetshop handles your personal data, please contact our dedicated support team. Our English-speaking support staff are available 24 hours a day, 7 days a week. You may also visit the FAQ page for answers to common data-related questions, or the Responsible Gaming page if you have concerns about your gaming activity and the data associated with it.