xxgame Privacy
Policy

1. Data We Collect

To provide a secure, compliant, and enjoyable experience on xxgame, we collect personal data through several channels: directly from you during registration and account use, automatically through your interactions with the platform, and occasionally from trusted third-party partners where permitted by law.

1.1 Information You Provide Directly

When you create an account on xxgame, deposit funds, request a withdrawal, or contact our support team, you may provide the following categories of personal data:

• Identity data: full legal name, date of birth, gender, and a copy of your National Identity Card (NID), passport, or other government-issued identity document submitted for KYC verification.
• Contact data: email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postcode.
• Financial data: mobile money account numbers (bKash, Nagad, Rocket, Upay), bank account details for bank-transfer withdrawals, and card details for Visa or Mastercard transactions. Full card numbers are never stored on xxgame servers — payment processing is handled by PCI-DSS compliant third-party processors.
• Account credentials: username and encrypted password. Passwords are stored using one-way hashing and are never accessible to xxgame staff in plaintext form.
• Communications: records of live chat conversations, support email correspondence, and feedback submitted through on-site forms.

1.2 Information Collected Automatically

When you visit xxgame.app, our systems automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: pages visited, games launched, bets placed, session duration, navigation paths, and feature interactions.
• Location data: approximate geolocation derived from your IP address, used solely for regulatory compliance and fraud detection purposes. We do not collect precise GPS location data.
• Log data: server access logs including timestamps (recorded in Bangladesh Standard Time, BST UTC+6), error reports, and referring URLs.

1.3 Data from Third Parties

In limited circumstances, xxgame may receive personal data about you from trusted third parties, including identity verification agencies used to fulfil our KYC obligations, payment processors confirming transaction status, and fraud prevention services that alert us to suspicious activity patterns. We process such third-party data only where we have a lawful basis to do so.

2. How We Use Your Data

xxgame processes personal data only where we have a clear and legitimate purpose. The table below summarises the primary uses of data collected from our players:

We do not use automated decision-making or profiling in any way that produces legal or similarly significant effects for you without human review. Where automated tools are used to flag accounts for fraud review, a qualified member of the xxgame compliance team will assess the flagged case before any account action is taken.

3. Data Sharing & Disclosure

xxgame does not sell personal data to any third party. We share data only in the limited circumstances described below, and in every case we require recipients to maintain appropriate data security standards.

3.1 Service Providers

We engage carefully vetted third-party service providers to assist with the operation of the xxgame platform. These include payment processors (handling bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer transactions), identity verification and KYC providers, cloud hosting and infrastructure providers, and customer support software vendors. Each provider is contractually bound to process your data only on xxgame's instructions and for no other purpose.

3.2 Game Providers

To deliver casino games and live dealer products, xxgame integrates software from third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you launch a game, a session token is shared with the relevant provider to authenticate your session. No additional personal data beyond the session token is transmitted unless technically required for game functionality.

3.3 Legal and Regulatory Disclosure

xxgame may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of xxgame, our players, or the public. We will notify affected players of any such disclosure where we are legally permitted to do so.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of xxgame's assets, your personal data may be transferred to the successor entity. In such circumstances, we will provide advance notice via email and a prominent notice on the platform, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

4. Cookies & Tracking Technologies

xxgame uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse aggregate usage patterns. Cookies are small text files placed on your device by your web browser when you visit xxgame.app.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and your last-used payment method to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how players interact with xxgame — pages visited, time spent, error occurrences — to help us improve the platform. These cookies do not identify you personally.
• Security cookies: Help detect and prevent fraudulent account activity and bot traffic. These cookies analyse login patterns and device fingerprints for anomaly detection.

4.2 Third-Party Tracking

xxgame does not permit third-party advertising networks to place tracking cookies on xxgame.app. Analytics data is processed using tools configured for data minimisation and anonymisation. No cross-site tracking of individual players is conducted by xxgame or its authorised partners.

5. Data Retention

xxgame retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data (active accounts): Retained for the lifetime of your account and for a period of five (5) years after account closure, to comply with AML and financial record-keeping obligations.
• Transaction records: Retained for seven (7) years following each transaction, in line with applicable financial regulations.
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the last interaction to assist with dispute resolution.
• Analytics data: Anonymised after twelve (12) months and retained in aggregate form for up to five (5) years for platform improvement purposes.
• Inactive account data: Where an account has been inactive for twelve (12) consecutive months, we may delete or anonymise non-essential personal data while retaining the minimum necessary for legal compliance.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Deletion is performed using industry-standard secure-erase procedures.

6. Security Measures

xxgame implements a layered security framework to protect your personal and financial data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport security: All data in transit between your device and xxgame servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Data at rest: Sensitive stored data — including financial records and identity documents — is encrypted at rest using AES-256 encryption.
• Access controls: Access to production systems and personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Penetration testing: Our platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: xxgame maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to player rights, affected players will be notified within 72 hours of us becoming aware of the incident.
• Password security: Passwords are stored using bcrypt hashing with per-user salts. We enforce minimum password complexity requirements and encourage the use of strong, unique passwords.

While we take every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong unique password, enable two-factor authentication where offered, and never share your login credentials with anyone.

7. Your Privacy Rights

As a player on the xxgame platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within fourteen (14) days and may ask you to verify your identity before processing the request.

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to xxgame's legal retention obligations. Note that data required for AML and financial compliance cannot be deleted before the relevant statutory retention period expires.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request a machine-readable copy of the personal data you provided to us, in a structured and commonly used format, so that you can transfer it to another service provider.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, subject to our demonstrating compelling grounds for that processing.
• Right to withdraw consent: Where processing is based on your consent (e.g., receiving promotional emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

xxgame reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. Where a change is material, we will notify registered players by email and via a prominent notice on xxgame.app at least seven (7) days before the amended policy takes effect. The effective date at the top of this document will be updated accordingly. Continued use of the xxgame platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

8.2 Children's Privacy

xxgame is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that personal data has been collected from a minor, it will be deleted immediately and the account will be closed in accordance with our Terms & Conditions. If you believe a minor has registered on xxgame, please contact us at [email protected] immediately.

8.3 Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the way xxgame handles your personal data, please reach out to our dedicated privacy support team:

• Email: [email protected] (use subject line "Privacy Request")
• Live Chat: Available 24/7 on every page of xxgame.app
• Response time: Within 14 days for formal privacy requests; within 4 business hours for general support queries (BST, UTC+6)

We are committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.