Your privacy matters to us. This policy explains exactly what personal data xxbet collects, why we collect it, how we use it, and the rights you hold as a player on our platform.
📅
Effective Date: 1 January 2026. This Privacy Policy applies to all xxbet accounts and platform interactions on or after this date. We recommend reviewing this policy periodically to stay informed of any updates.
Privacy at a Glance
🔒
SSL Encryption
All data transmitted between your device and xxbet servers is protected by industry-standard SSL (Secure Socket Layer) encryption at all times.
📋
Data Collected Only As Needed
xxbet collects only the personal data that is strictly necessary to operate your account, process transactions, and comply with legal obligations. We do not collect data unnecessarily.
🚫
No Sale of Personal Data
xxbet does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you and is never treated as a commercial commodity.
👤
Your Rights as a Data Subject
You have the right to access, correct, and request deletion of your personal data at any time. Submit requests to our support team and we will respond within 30 days.
🍪
Cookies & Tracking
xxbet uses essential and functional cookies to operate the platform. You can manage non-essential cookies via your browser settings. We do not use intrusive cross-site tracking technologies.
✉️
Contact Our Data Team
For any data protection enquiry, email [email protected]. Our privacy team responds within 48 hours and handles all requests in strict confidence.
1. Introduction
This Privacy Policy ("Policy") explains how xxbet ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the xxbet online casino and sports betting platform at xxbet.lat and any associated mobile or web interfaces. xxbet is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy forms part of the xxbet Terms & Conditions, which you accepted when registering your account.
By registering an account or using the xxbet platform, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the xxbet platform. This Policy may be updated from time to time; we will notify you of any material changes via your registered mobile number or by a notice on the platform. The most current version of this Policy is always available on the Privacy Policy page of the xxbet platform.
2. Information We Collect
xxbet collects personal data in three principal ways: information you provide directly when registering and using the platform; information generated automatically through your interactions with the platform; and information received from third-party service providers where necessary to operate the platform.
Section 2.1
Information You Provide Directly
When you register an account or interact with xxbet support, we collect: (a) your full legal name; (b) date of birth; (c) Bangladeshi mobile number; (d) account password (stored in hashed form; never stored in plain text); (e) identity documents submitted for KYC verification, such as your National Identity Card (NID) or passport; (f) payment method details, including your bKash, Nagad, Rocket, or Upay mobile number associated with your payment account; (g) any communications you send to xxbet support, including the content of support messages and attachments; (h) responsible gaming preferences such as deposit limits, session limits, and self-exclusion requests.
Section 2.2
Automatically Collected Information
When you access and use the xxbet platform, we automatically collect technical and behavioural data including: (a) IP address and approximate geographic location derived from it; (b) device type, operating system, and browser version; (c) session data including login timestamps, session duration, and pages visited; (d) gameplay activity including games played, bet amounts, wagering history, and game outcomes; (e) deposit and withdrawal transaction records; (f) cookie and similar tracking technology data as described in Section 7 of this Policy.
Section 2.3
Information From Third Parties
In certain circumstances, xxbet may receive personal data about you from third parties, including: (a) payment service providers such as bKash, Nagad, and Rocket, who may share transaction confirmation data necessary to process your deposits and withdrawals; (b) identity verification service providers engaged to assist with KYC procedures; (c) fraud prevention services that provide risk-scoring data to help protect the platform and its players. xxbet only receives the minimum data necessary from third parties and processes it in accordance with this Policy.
3. How We Use Your Information
xxbet uses your personal data only for the purposes described in this Policy. We do not process your data in ways that are incompatible with the purposes for which it was originally collected.
Section 3.1
Platform Operation & Account Management
We use your personal data to: create and manage your xxbet player account; verify your identity and age during registration and at any subsequent point required by our compliance obligations; process your deposits and withdrawals via your chosen payment method; provide customer support and respond to your enquiries; enforce our Terms & Conditions and other platform policies; detect, investigate, and prevent fraud, money laundering, and other prohibited activities; and maintain the technical operation and security of the platform.
Section 3.2
Personalisation & Platform Improvement
With your consent, we may use aggregated gameplay and behavioural data to personalise your xxbet experience, such as displaying games you are likely to enjoy based on your activity history. We also use anonymised, aggregated data to analyse platform usage patterns, identify technical issues, and improve the features and performance of the xxbet platform. Individual player data is never sold or shared externally for personalisation purposes.
Section 3.3
Communications & Promotions
xxbet may use your registered mobile number to send you: transactional SMS messages (e.g. OTP codes, deposit confirmations, withdrawal notifications) — these are essential operational communications and cannot be opted out of while your account is active; and promotional messages about bonuses, new games, or platform updates, only where you have given your consent to receive such communications. You may withdraw consent for promotional communications at any time by contacting [email protected] or adjusting your notification preferences in your account settings.
4. Legal Basis for Processing
xxbet processes your personal data only where there is a valid legal basis to do so. The primary legal bases on which xxbet relies are described below.
Section 4.1
Contractual Necessity
The majority of the personal data xxbet processes is necessary for the performance of the contract between you and xxbet (the Terms & Conditions you accepted at registration). Without processing your name, mobile number, date of birth, and payment details, xxbet cannot create your account, process transactions, or deliver the services you have contracted for. This legal basis covers the core operational data processing described in Section 3.1.
Section 4.2
Legitimate Interests & Consent
Where xxbet processes data beyond what is strictly necessary for contractual performance, it does so under one of two additional bases: (a) Legitimate Interests — xxbet has a legitimate interest in detecting fraud, preventing money laundering, maintaining platform security, and improving the platform experience, provided that this interest does not override your fundamental rights; (b) Consent — for optional processing activities such as promotional communications and non-essential personalisation, xxbet relies on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.
5. Sharing Your Information
xxbet does not sell your personal data. xxbet shares your personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.
Section 5.1
Payment Processing Partners
To process your deposits and withdrawals, xxbet shares the minimum necessary transaction data with your chosen payment service provider (bKash, Nagad, Rocket, or Upay). This data is limited to the information required to initiate, confirm, or reverse a specific transaction. Payment service providers process this data in accordance with their own privacy policies and applicable financial regulations. xxbet does not share your gameplay history, device data, or any information beyond what is strictly required to complete the payment transaction.
Section 5.2
Legal & Regulatory Disclosure
xxbet may be required to disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or lawful regulatory request. In such cases, xxbet will disclose only the specific data requested and will, where legally permissible, notify you of such a disclosure. xxbet cooperates fully with lawful investigations and does not require a court order to respond to emergency situations involving an imminent threat to life or safety.
Section 5.3
Service Providers & Technical Partners
xxbet may engage third-party technical service providers to assist with platform operation, including hosting infrastructure, database management, cybersecurity monitoring, and customer support tooling. These providers are granted access to your personal data only to the extent necessary to perform their contracted services and are contractually prohibited from using your data for any other purpose. xxbet remains responsible for ensuring that all third-party processors handle your data in compliance with this Policy.
6. Payment Data & Financial Information
Given the financial nature of the xxbet platform, payment data receives additional protection beyond standard personal data handling procedures. This section describes the specific measures applied to your financial information.
ℹ️
Important: xxbet does not store your full bKash, Nagad, Rocket, or Upay account credentials or PIN codes. Payment transactions are processed directly through the respective payment provider's secure API. xxbet receives only a transaction reference and confirmation status — never your full payment account credentials.
Section 6.1
Transaction Records & AML Obligations
xxbet maintains records of all deposit and withdrawal transactions processed through player accounts. These records are retained for a minimum period required by applicable anti-money laundering (AML) regulations and financial record-keeping obligations. Transaction records are used to: resolve deposit or withdrawal disputes; respond to enquiries from payment service providers; fulfil regulatory reporting obligations where required; and support fraud investigations. Transaction records may be retained for a period of up to 7 years from the date of the transaction, in accordance with standard financial record-keeping requirements.
7. Cookies & Tracking Technologies
xxbet uses cookies and similar lightweight tracking technologies to operate the platform correctly and to understand how players use it. This section explains what cookies we use, why we use them, and how you can manage them.
Section 7.1
Types of Cookies We Use
xxbet uses the following categories of cookies: (a) Essential Cookies — strictly necessary for the platform to function; these include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery; these cannot be disabled without impairing core platform functionality; (b) Functional Cookies — remember your preferences such as language settings and responsible gaming configuration; (c) Analytics Cookies — used with your consent to collect anonymised data about how the platform is used, helping us identify and fix technical issues and improve the user experience; these are never used to build individual advertising profiles.
Section 7.2
Managing Your Cookie Preferences
You can manage non-essential cookies through your device or browser settings. Most modern browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Please note that disabling essential cookies will impair the functionality of the xxbet platform, and you may not be able to log in or complete transactions if essential cookies are blocked. Disabling functional or analytics cookies will not prevent you from using the platform but may reduce the quality of your experience. xxbet does not use third-party advertising networks or cross-site tracking technologies.
8. Data Retention
xxbet retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes. The following principles govern our retention practices.
Section 8.1
Retention Periods
Active account data (name, mobile number, gameplay history, transaction records) is retained for the duration of your account's active status plus a minimum of 5 years after account closure, to fulfil legal and regulatory obligations. KYC identity documents are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later. Support communication records are retained for 3 years from the date of the communication. Analytics and session data is anonymised or deleted within 12 months of collection. When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you.
9. Data Security
xxbet implements a layered approach to data security, combining technical, organisational, and operational controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
Section 9.1
Technical Security Measures
xxbet employs the following technical security measures: SSL/TLS encryption for all data in transit between your device and our servers; encryption at rest for sensitive stored data including identity documents and hashed passwords; OTP-based two-factor authentication for account login; automated systems for detecting unusual login activity, such as logins from new devices or unfamiliar geographic locations; regular security assessments and penetration testing of the platform infrastructure; and server-side rate limiting and brute-force protection on authentication endpoints.
Section 9.2
Security Incident Response
In the event of a personal data breach that poses a risk to your rights and freedoms, xxbet will notify affected players as promptly as practicable via their registered mobile number, and will take immediate steps to contain and remediate the breach. xxbet maintains an internal incident response plan and conducts regular drills to ensure readiness. If you suspect that your account has been compromised, you must contact xxbet support immediately at [email protected] so that protective action can be taken without delay.
10. Your Rights as a Data Subject
As a player on the xxbet platform, you hold a number of rights in relation to the personal data we hold about you. To exercise any of the rights described below, please contact [email protected] with the subject line "Data Rights Request". xxbet will respond to all verified data rights requests within 30 days.
Section 10.1
Right of Access
You have the right to request a copy of the personal data xxbet holds about you. Upon a verified request, xxbet will provide you with a summary of your personal data in a readable format, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared. This is provided free of charge for the first request in any 12-month period.
Section 10.2
Right of Rectification
You have the right to request correction of any inaccurate or incomplete personal data xxbet holds about you. If you believe that your registered name, date of birth, or any other personal data is incorrect, please contact [email protected]. Please note that certain corrections (for example, changes to the name or date of birth on your account) may require documentary verification before the correction can be applied.
Section 10.3
Right of Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate ground for xxbet to continue. Please note that this right is not absolute: xxbet may retain personal data where required by law (for example, transaction records retained for AML compliance) or where necessary to resolve a pending dispute involving your account. A deletion request will trigger a review; xxbet will confirm what data can be deleted and what must be retained, and the reasons for any retention.
Section 10.4
Right to Withdraw Consent
Where xxbet processes your data on the basis of consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. To withdraw consent for promotional communications, you may contact [email protected] or update your notification preferences in your account settings. Withdrawal of consent for essential processing (such as the processing required to operate your account) is not possible without closing your account entirely.
11. Children's Privacy
The xxbet platform is strictly intended for adults aged 21 and above. xxbet does not knowingly collect personal data from individuals under the age of 21. If xxbet becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account closed. If you are a parent or guardian and believe that a minor has registered an xxbet account or provided personal data to xxbet, please contact [email protected] immediately so that the matter can be investigated and resolved without delay.
12. Third-Party Links
The xxbet platform does not contain links to third-party websites. However, if at any time you navigate away from xxbet to a third-party website or service (for example, your bKash or Nagad mobile banking app to complete a transaction), please be aware that xxbet has no control over the privacy practices of those third parties. Their collection and use of your personal data is governed entirely by their own privacy policies. xxbet encourages you to review the privacy policy of any third-party service you use in connection with your xxbet account.
13. Changes to This Policy
xxbet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made to this Policy, xxbet will notify registered players via their registered mobile number or by a prominent notice on the platform upon next login. The updated Policy will be effective from the date specified in the notification. Your continued use of the xxbet platform following notification of a change constitutes acceptance of the revised Policy. The effective date at the top of this Policy always reflects the date of the most recent update.
14. Contact & Data Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 10, or need to report a suspected data breach or security incident, please contact the xxbet privacy and data protection team. All data-related enquiries are handled in strict confidence and responded to within 30 days.
Now that you know how we protect your data, explore the xxbet platform with confidence. Hundreds of games, cricket betting, and live casino — all secured by SSL encryption. 21+ only.