x7ibaji Privacy Policy
Your privacy is a serious responsibility at x7ibaji. This Privacy Policy explains precisely what personal data we collect when you use our platform, how that data is used, who it may be shared with, how long it is retained, and what rights you hold over it. We encourage you to read this document carefully alongside our Terms & Conditions.
Our Commitments
How x7ibaji Approaches Privacy
Encryption by Default
All data transmitted between your device and x7ibaji's servers is protected by SSL 256-bit encryption. Sensitive fields such as passwords and payment details are never stored in plain text.
Purpose-Limited Collection
x7ibaji collects only the data that is strictly necessary for operating the platform, fulfilling legal obligations, and delivering a personalised, secure player experience. We do not collect data speculatively.
No Sale of Personal Data
x7ibaji does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Data shared with partners is limited to what those partners need to deliver their contracted services.
Defined Retention Periods
Your personal data is retained for no longer than necessary. Account data is held for the life of your account plus a post-closure retention period required for legal and fraud-prevention purposes.
Your Rights, Respected
You have the right to access, correct, and request deletion of your personal data held by x7ibaji, subject to legal retention obligations. Submit a request any time via [email protected].
Transparent Policy Updates
When x7ibaji makes material changes to this Privacy Policy, registered players are notified via the email address on their account before the changes take effect. The current effective date is always shown at the top.
Section 1
Data We Collect
x7ibaji collects personal data through several channels: directly from you when you register an account or contact support, automatically when you interact with the platform, and from third-party partners involved in payment processing and identity verification. The categories of data collected are described below.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID (NID) number, passport number | Registration form, KYC verification submission |
| Contact Data | Email address, mobile phone number, residential address | Registration form, account settings updates |
| Financial Data | bKash/Nagad mobile wallet number, bank account details, transaction history | Deposit and withdrawal flows, payment processor |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Automatically via server logs and session tracking |
| Usage Data | Pages visited, games played, bet amounts, session duration, click paths | Automatically via analytics and game server logs |
| Communications Data | Live chat transcripts, support email exchanges, complaint records | Support interactions initiated by you |
| Verification Documents | Scanned copies of NID, passport, utility bills, bank statements | KYC verification process, uploaded by you |
Data You Provide Voluntarily
When you register an x7ibaji account, you provide your name, date of birth, email address, mobile number, and residential address. You may also voluntarily provide additional information when updating your profile, participating in promotions, completing KYC verification, or communicating with the x7ibaji support team. Providing accurate and complete information is a condition of maintaining an active account — see the Terms & Conditions for details.
Data Collected Automatically
When you access x7ibaji, our servers automatically record certain technical information including your IP address, the type of device and browser you are using, and how you navigate the platform. This data is used for security monitoring, fraud detection, platform performance optimisation, and understanding aggregate usage patterns. It does not, on its own, identify you by name unless combined with your account data.
Data from Third Parties
x7ibaji may receive data about you from third-party partners engaged to support platform operations. This includes identity verification status from KYC providers, transaction confirmation data from payment processors such as bKash and Nagad, and fraud risk signals from our security partners. x7ibaji uses this third-party data only in connection with your account and does not combine it with unrelated datasets.
Section 2
How We Use Your Data
x7ibaji processes your personal data only for clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which x7ibaji processes personal data are set out below, together with the lawful basis for each processing activity.
Account Creation and Management
Your identity and contact data are used to create and maintain your x7ibaji account, authenticate your login sessions, deliver account notifications, and respond to account-related enquiries. This processing is necessary for the performance of the player agreement between you and x7ibaji.
Identity Verification and Fraud Prevention
x7ibaji uses your identity data, financial data, and technical data to verify your age and identity as required under our KYC policy, to detect and prevent fraudulent transactions, to investigate suspicious account activity, and to comply with applicable anti-money-laundering obligations. This processing is necessary for compliance with legal obligations and for the protection of x7ibaji's legitimate business interests.
Payment Processing
Your financial data — including your bKash wallet number, Nagad account, or bank details — is processed solely for the purpose of executing deposit and withdrawal transactions that you initiate. x7ibaji does not store full payment credentials on its own servers; payment data is handled by our PCI-DSS-compliant payment processing partners.
Platform Personalisation
Usage data and game history may be used to personalise your experience on x7ibaji — for example, surfacing games you have previously enjoyed or tailoring promotional offers to your betting preferences. Personalisation processing is based on x7ibaji's legitimate interest in providing a relevant, high-quality player experience. You may opt out of personalised promotions by contacting support.
Legal Compliance
x7ibaji is required to retain certain categories of data — including transaction records and identity verification documents — for defined periods in order to meet legal, regulatory, and audit obligations. This retention occurs regardless of whether your account is active or closed.
Communications and Support
Your contact data is used to send you transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), to respond to support requests, and — where you have given consent — to send promotional communications about x7ibaji offers. You may withdraw consent to marketing communications at any time by contacting [email protected] or using the unsubscribe option in any marketing email.
Section 3
Data Sharing & Third Parties
x7ibaji does not sell your personal data. We share personal data only with third parties who have a legitimate and contracted role in delivering the x7ibaji platform and its services, or where we are required to do so by law. All third-party partners who process personal data on behalf of x7ibaji are bound by data processing agreements that prohibit them from using your data for any purpose beyond their contracted service.
Categories of Third-Party Recipients
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard receive the minimum financial data necessary to execute transactions you initiate. Each processor operates under its own privacy policy and applicable financial regulations.
- Identity Verification Providers: Third-party KYC service providers receive identity documents and data you submit during the verification process. They return a verification status to x7ibaji and are contractually prohibited from retaining your documents beyond the verification period.
- Game Studio Providers: Providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive a pseudonymous player identifier and game session data necessary to deliver their games. They do not receive your full name, contact details, or financial data.
- IT Infrastructure and Hosting Partners: x7ibaji's platform is hosted on third-party cloud infrastructure. Hosting partners have access to server-level data but are contractually restricted from accessing or processing player personal data for any purpose other than infrastructure maintenance.
- Fraud and Security Partners: Specialist fraud detection services may receive technical data (IP addresses, device fingerprints, behavioural signals) to identify suspicious activity. No name, contact, or financial data is shared beyond what is strictly necessary for the fraud assessment.
- Legal and Regulatory Authorities: x7ibaji will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal obligation, court order, or government request. x7ibaji will notify affected players of such disclosures where legally permitted to do so.
International Data Transfers
As an offshore platform, x7ibaji and some of its third-party partners process data in locations outside Bangladesh. Where personal data is transferred internationally, x7ibaji ensures that appropriate contractual safeguards are in place — including standard contractual clauses — to maintain a level of data protection equivalent to that described in this policy.
Section 5
Data Retention
x7ibaji retains personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, to maintain an active player relationship, and to comply with applicable legal, regulatory, and fraud-prevention obligations. The specific retention periods applied to each category of data are described below.
Active Account Data
While your x7ibaji account remains active, x7ibaji retains all identity, contact, financial, usage, and communications data associated with your account. This data is necessary for operating your account, processing transactions, delivering customer support, and personalising your experience on the platform.
Post-Closure Retention
Following account closure — whether voluntary or x7ibaji-initiated — x7ibaji retains certain categories of personal data for a defined post-closure period:
- Transaction Records: Retained for a minimum of five years following account closure for audit, legal compliance, and anti-money-laundering purposes.
- Identity Verification Documents: Retained for a minimum of five years post-closure in line with standard financial services record-keeping obligations.
- Support Communications: Retained for three years post-closure unless required for longer in connection with an active dispute or legal proceeding.
- Technical and Usage Data: Anonymised and aggregated within 12 months of account closure. Anonymised data does not constitute personal data and may be retained indefinitely for platform analytics purposes.
Data Deletion Requests
You may request deletion of your personal data by contacting x7ibaji at [email protected]. x7ibaji will action deletion requests within 30 days, subject to any legal retention obligations that require us to retain specific data categories for a defined period. Where a deletion request cannot be fulfilled in full due to legal obligations, x7ibaji will inform you of the specific categories retained, the legal basis for retention, and the expected retention period.
Section 6
Data Security Measures
x7ibaji takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect data against unauthorised access, loss, alteration, disclosure, or destruction. No online platform can guarantee absolute security, but x7ibaji's controls represent industry-standard best practice for an online gaming environment.
Technical Controls
- SSL/TLS Encryption: All data in transit between your device and x7ibaji servers is encrypted using TLS 1.2 or higher with 256-bit encryption. The padlock icon visible in your browser's address bar confirms that your connection to x7ibaji is secure.
- Password Hashing: Player passwords are never stored in plain text. They are hashed using a strong cryptographic algorithm with individual salts before storage, meaning that even in the unlikely event of a data breach, password values cannot be recovered.
- Two-Factor Authentication: x7ibaji supports two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection against unauthorised login attempts.
- Access Controls: Access to personal data within x7ibaji's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and reviewed periodically by x7ibaji's security team.
- Vulnerability Management: x7ibaji conducts periodic security assessments and penetration testing of the platform to identify and remediate vulnerabilities before they can be exploited.
Reporting a Security Concern
If you believe your x7ibaji account has been compromised, or if you discover a potential security vulnerability on the platform, please contact us immediately at [email protected]. x7ibaji will investigate all credible security reports promptly and take appropriate action. We ask that you do not publicly disclose a suspected vulnerability before x7ibaji has had a reasonable opportunity to investigate and address it.
Section 7
Your Privacy Rights
As a user of x7ibaji, you hold a number of rights over your personal data. These rights are described below. To exercise any of them, contact x7ibaji at [email protected] with the subject line "Privacy Rights Request". x7ibaji will respond within 30 days of receiving a valid request.
Right of Access
You may request a copy of the personal data x7ibaji holds about you, together with information about how it is processed and with whom it is shared.
Right to Rectification
If any personal data held by x7ibaji is inaccurate or incomplete, you have the right to request that it be corrected. Account details can be updated via account settings or by contacting support.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mandatory legal retention obligations.
Right to Restrict Processing
In certain circumstances, you may request that x7ibaji restricts processing of your data — for example, while the accuracy of data you have contested is being verified.
Right to Data Portability
Where processing is based on your consent or on a contractual basis, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service.
Right to Object
You may object to x7ibaji processing your data on the basis of legitimate interests, including profiling for personalisation. You may also withdraw consent to marketing communications at any time.
Section 8
Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or to x7ibaji's handling of your personal data, please contact the x7ibaji support and data team using the details below. All privacy-related enquiries are handled in English and are responded to within 30 days of receipt.
How to Contact Us
Email: [email protected] — use the subject line "Privacy Enquiry" or "Privacy Rights Request" to ensure your message reaches the appropriate team member promptly.
Live Chat: Available 24/7 on the x7ibaji platform. Our support agents are trained to handle privacy-related queries and can escalate complex data requests to the appropriate team.
Response time: x7ibaji aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, x7ibaji may extend this period by up to a further 30 days, in which case you will be notified of the extension and the reasons for it.
Policy Updates
x7ibaji reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our data practices, platform functionality, or applicable legal requirements. When material changes are made, registered players will be notified by email at least 14 days before the changes take effect. The effective date at the top of this page always reflects the version currently in force. Continued use of x7ibaji after the effective date of any update constitutes acceptance of the revised policy.
Have More Questions About Your Privacy?
Our support team is available around the clock to answer any questions about how x7ibaji handles your data. You can also review our full Terms & Conditions or visit the x7ibaji Casino to start playing on a platform built around transparency and security.