mxbaji Privacy Policy

1. Scope of This Policy

1.1 This Privacy Policy applies to all personal data collected by mxbaji through the mxbaji.org website, its mobile-optimised site, customer support channels, and any other services we operate directly.

1.2 This policy applies to all registered players, visitors who browse the platform without an account, and individuals who contact our support team.

1.3 This policy does not apply to third-party websites or services that may be referenced on our platform. We encourage you to read the privacy notices of any third-party services you access independently.

1.4 By using mxbaji, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should not use our services.

2. Personal Data We Collect

2.1 Registration Data: When you create an account, we collect your full name, date of birth, email address, mobile phone number, residential address (including district, division, and postal code within Bangladesh), and your chosen username.

2.2 Identity Verification Data: To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, we may collect copies of government-issued photo identification (such as a National Identity Card or passport) and proof of address documents.

2.3 Financial Data: We collect transaction records including deposit amounts, withdrawal requests, payment method details (such as your bKash or Nagad mobile number, or masked bank card details), and the history of all financial activity on your account. We do not store full card numbers on our servers; payment processing is handled by certified third-party payment processors.

2.4 Gameplay & Betting Data: We record your betting and gaming activity, including games played, bet amounts, wager outcomes, session timestamps, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical Data: We automatically collect IP address, device type, operating system, browser type and version, referring URL, pages visited, session duration, and clickstream data when you visit or use our platform.

2.6 Communications Data: If you contact our support team by email or live chat, we retain records of those communications, including the content of your messages and any attachments you provide, for quality assurance and dispute resolution purposes.

2.7 Marketing Preferences: Where you have opted in to receive promotional communications, we record your preferences and the history of communications sent to you.

3. How We Use Your Personal Data

3.1 mxbaji uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your account, including verifying your identity and age (21+), processing login requests, and updating your account details.
• Payment Processing: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and bank transfer channels, and to detect and prevent payment fraud.
• Legal & Regulatory Compliance: To fulfil our KYC obligations, anti-money laundering (AML) requirements, and any other legal duties applicable to online gaming platforms operating in or accessible from Bangladesh.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to enforce deposit limits, time-outs, or self-exclusions requested by players or triggered by our safeguarding systems.
• Customer Support: To respond to your enquiries, investigate complaints, and resolve disputes.
• Platform Improvement: To analyse aggregated usage data, improve the user experience, and develop new features and game offerings.
• Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other prohibited conduct.
• Marketing (with consent): To send you personalised promotions, bonus offers, and news about mxbaji where you have opted in to receive such communications. You may withdraw this consent at any time.

3.2 We will not use your data for any purpose that is incompatible with those listed above without first obtaining your consent or being required to do so by law.

4. Legal Basis for Processing

4.1 mxbaji processes your personal data on the following legal bases:

• Contract Performance: Processing that is necessary to provide the services you have requested, including account creation, payment processing, and gameplay.
• Legal Obligation: Processing required to comply with applicable laws, including age verification, KYC, and AML obligations.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, which requires your explicit opt-in and may be withdrawn at any time.

5. Sharing Your Personal Data

5.1 mxbaji does not sell, rent, or trade your personal data to third parties for their own commercial use.

5.2 We may share your data with the following categories of trusted third parties, solely to the extent necessary to provide our services:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, Mastercard, and other payment service providers used to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML screening services that assist us in verifying player identities and complying with regulatory requirements.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi who operate the games available on our platform may receive gameplay session data necessary for game operation.
• IT & Cloud Infrastructure Providers: Hosting, database, content delivery, and cybersecurity partners who process data on our behalf under strict data processing agreements.
• Legal & Regulatory Authorities: Where required by law, court order, or legitimate regulatory request, we may disclose data to law enforcement or government authorities.

5.3 All third-party processors are bound by contractual obligations to handle your data securely and only for the purposes specified by mxbaji.

6. Data Retention

6.1 We retain your personal data for as long as your account is active and for a period thereafter as required by applicable law and our operational needs.

6.2 Account and transaction records are typically retained for a minimum of five years following account closure to satisfy legal and regulatory obligations relating to financial records and AML compliance.

6.3 Communications records (such as support chat logs and emails) are retained for up to three years from the date of the last interaction, unless a longer period is required for an open dispute or legal proceeding.

6.4 Technical logs and analytics data are retained in anonymised or aggregated form for platform improvement purposes and do not personally identify you after the anonymisation process is applied.

6.5 When your data is no longer required, it is securely deleted or anonymised using industry-standard data destruction methods.

7. Cookies & Similar Technologies

7.1 mxbaji uses cookies and similar tracking technologies to enhance your experience on the platform.

7.2 We use the following categories of cookies:

• Essential Cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect your account. You cannot opt out of essential cookies without disabling core platform functionality.
• Functional Cookies: Remember your preferences such as language settings and game lobby filters to personalise your experience.
• Analytics Cookies: Collect anonymised data about how visitors use the platform, helping us understand which pages are popular, how players navigate the site, and where we can improve. We use this data in aggregate only.

7.3 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

7.4 We do not use third-party advertising cookies or cross-site tracking technologies that would share your behavioural data with advertisers.

8. Your Data Rights

8.1 As a user of the mxbaji platform, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that override this right.
• Right to Restrict Processing: You may ask us to suspend the processing of your data in certain circumstances, for example while a dispute is being investigated.
• Right to Data Portability: Where technically feasible, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your data on the basis of legitimate interests, including direct marketing. We will stop processing for marketing purposes immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8.2 To exercise any of these rights, please contact our support team at [email protected]. We aim to respond to all valid requests within 30 calendar days.

8.3 We may need to verify your identity before fulfilling a data rights request to ensure we do not disclose or delete data belonging to the wrong person.

9. Security Measures

9.1 mxbaji implements a range of technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data at rest;
• Role-based access controls ensuring that only authorised personnel can access personal data;
• Regular security audits and vulnerability assessments of our platform infrastructure;
• Intrusion detection systems and real-time monitoring for suspicious activity;
• Staff training on data protection and information security best practices.

9.2 In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players as promptly as is practicable, providing details of the nature of the breach and the steps we are taking to mitigate it.

9.3 You are responsible for maintaining the security of your own account credentials. Do not share your password with any third party. If you believe your account has been compromised, contact our support team immediately at [email protected].

10. Minors & Age Restriction

10.1 mxbaji's services are strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.

10.2 Age verification is performed during the registration process and may be repeated at the point of withdrawal. If we discover that an account has been created by a person under the age of 21, we will immediately suspend the account, return any deposits (minus any winnings derived from bonus funds), and securely delete the personal data associated with that account.

10.3 If you believe a minor has registered an account on our platform, please notify us immediately at [email protected].

11. Changes to This Privacy Policy

11.1 mxbaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features.

11.2 When we make material changes to this policy, we will notify registered players by email to their registered address or via a prominent notice on the platform at least 7 days before the updated policy takes effect.

11.3 The date at the top of this page will always reflect when the policy was last updated. We encourage you to review this policy periodically.

11.4 Your continued use of the mxbaji platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

12. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please reach out to the mxbaji support team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

Email addresses on this page are displayed as plain text for informational purposes only and are not clickable links.