This Privacy Policy explains how xbalee collects, uses, stores, shares, and protects the personal information you provide when you register and use our platform. We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection principles.
Our Privacy Commitments
Six core data protection principles that govern how xbalee handles every piece of personal information it collects.
xbalee collects only the personal data that is strictly necessary to operate the platform, verify your identity, process your transactions, and comply with our legal obligations. We do not collect personal data speculatively or for purposes unrelated to your xbalee account and gaming activity.
xbalee does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is shared only with the regulated service providers required to operate the xbalee platform — payment processors, identity verification services, and game software providers — under strict data processing agreements.
All data transmitted between your device and the xbalee platform is protected by 256-bit SSL encryption over TLS 1.3 — the current industry standard for secure communications. Your stored credentials are protected using cryptographic hashing; xbalee staff cannot read your password even in internal systems.
You may request a complete copy of the personal data xbalee holds about you at any time by contacting our support team. xbalee will acknowledge your request within 5 business days and provide the requested data export within 30 days. There is no charge for a standard data access request.
Where we are not legally required to retain your data, you may request the deletion of your xbalee account and associated personal information. Certain categories of data — including transaction records — must be retained for a minimum statutory period for anti-money-laundering and financial auditing purposes, even after account closure.
In the unlikely event of a data security incident that affects your personal information, xbalee will notify all affected players via the email address registered to their account within 72 hours of the breach being confirmed. We will provide clear information about what was affected and the steps being taken to remediate the situation.
Full Privacy Policy
Last updated: 1 July 2026Summary: xbalee takes your privacy seriously. This document explains in plain, formal English exactly what personal data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it. By using the xbalee platform, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy applies to all personal data collected and processed by xbalee through the website located at https://xbalee.net, including all sub-domains, mobile browser interfaces, live chat systems, email correspondence, and any other digital touchpoint through which xbalee interacts with registered or prospective players based in Bangladesh and other permitted jurisdictions.
xbalee is committed to protecting the privacy and personal data of every individual who uses our platform. We process personal data in a lawful, fair, and transparent manner, collecting only what is necessary for the specific purposes described in this Policy. We do not use personal data for purposes that are incompatible with those stated here without first obtaining your explicit consent.
This Privacy Policy should be read alongside the xbalee Terms & Conditions and the xbalee Responsible Gaming Policy, both of which form part of your overall agreement with xbalee. If you have any questions about how your data is handled, you may contact our support team at any time using the contact details set out in Section 14 of this Policy.
For the purposes of applicable data protection law, xbalee acts as the data controller in respect of all personal data collected through the xbalee platform. As data controller, xbalee determines the purposes for which, and the means by which, your personal data is processed.
Where xbalee engages third-party service providers to process personal data on its behalf — for example, payment processors such as bKash, Nagad, and Rocket, or identity verification providers — those providers act as data processors operating under xbalee's instruction and under the terms of written data processing agreements that impose obligations consistent with this Privacy Policy.
The point of contact for all data protection queries, subject access requests, and erasure requests is the xbalee support team. Contact details are provided in Section 14 of this Policy.
xbalee collects personal data in three principal ways: data you provide directly, data generated automatically by your use of the platform, and data obtained from regulated third-party verification services. The specific categories of data collected are set out below.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, gender | Registration form; identity verification upload |
| Contact Data | Email address, mobile phone number, residential address in Bangladesh | Registration form; account settings |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account reference numbers | Deposit and withdrawal screens |
| Transaction Data | Deposit amounts, withdrawal amounts, bonus claims, bet history, win/loss records | Automatically generated by platform activity |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Automatically collected via server logs and cookies |
| Usage Data | Pages visited, games played, time spent per session, click-path data | Automatically collected via analytics tools |
| Communications Data | Live chat transcripts, support email content, WhatsApp message records | Customer support interactions |
Note on Sensitive Data: xbalee does not intentionally collect special categories of sensitive personal data (such as biometric data, health information, religious beliefs, or political opinions) through the normal registration and account operation process. If you voluntarily disclose such information in a support communication, it will be treated with the highest level of confidentiality and will not be used for any purpose other than responding to your query.
xbalee uses the personal data it collects for the following specific purposes:
xbalee will not use your personal data for any purpose not listed above without first notifying you and, where required by law, obtaining your explicit consent.
xbalee processes your personal data under one or more of the following legal bases, depending on the specific processing activity:
xbalee does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. Personal data is shared only with the following categories of recipient, strictly for the purposes described:
International Transfers: Some of xbalee's third-party service providers may process data outside Bangladesh. Where this occurs, xbalee ensures that appropriate contractual safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy.
xbalee uses cookies and similar tracking technologies on the xbalee platform for the purposes of session management, security, and platform analytics. The following categories of cookie are in use:
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the xbalee platform and may prevent you from logging in or completing transactions.
xbalee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity and contact data | Duration of account + 5 years after closure | KYC and AML legal obligations |
| Financial transaction records | 7 years from date of transaction | Financial audit and statutory requirements |
| Customer support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical and usage data (logs) | 13 months on a rolling basis | Security monitoring and fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of consent for compliance |
Upon the expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.
xbalee implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
While xbalee maintains rigorous technical and organisational safeguards, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials. If you believe your account has been compromised, please contact xbalee support immediately.
As a data subject, you have the following rights in relation to the personal data xbalee holds about you. To exercise any of these rights, please contact our support team using the details in Section 14:
Response Timescales: xbalee will acknowledge all data rights requests within 5 business days and will provide a substantive response or data export within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case xbalee will notify you of the extension and the reason for it.
The xbalee platform is strictly intended for adults aged 18 and above. xbalee does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has registered on the xbalee platform or provided personal data without your knowledge, please contact our support team immediately at [email protected]. Upon confirmation, xbalee will close the account and delete all associated personal data without delay.
xbalee employs age verification procedures at registration and reserves the right to request documentary proof of age at any stage of the account lifecycle. Any account found to be held by a person under 18 will be closed immediately, with balances handled in accordance with the xbalee Terms & Conditions.
The xbalee platform may contain references or links to third-party services such as payment providers and game software platforms. Once you leave the xbalee platform and navigate to a third-party website or application, this Privacy Policy no longer applies. xbalee is not responsible for the privacy practices, data handling, or content of any third-party platform. We encourage you to review the privacy policies of any third-party services you interact with in connection with your xbalee account.
xbalee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, xbalee will notify registered players via the email address on their account and will display a prominent notice on the xbalee platform for a minimum of 14 days before the changes take effect.
Your continued use of the xbalee platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. The "Last Revised" date at the top of this document will always reflect the date on which the most recent changes were made. We recommend reviewing this Policy periodically to stay informed about how xbalee protects your data.
If you wish to exercise any of your data rights, submit a privacy-related query, raise a concern about how your personal data is being handled, or report a suspected data security incident, please contact the xbalee data protection team through any of the following channels:
xbalee will acknowledge all privacy-related correspondence within 5 business days. We are committed to resolving data protection concerns in a transparent, fair, and timely manner. All communications relating to data rights requests are treated with strict confidentiality and handled exclusively by authorised xbalee personnel.
Your data is protected. Now discover the full xbalee experience — from live casino tables to cricket betting and slots.