Xbat Privacy Policy — How We Protect Your Information

This Privacy Policy applies to xbat (xbat.onl) Applies to all users of the website and mobile application. xbat is an online Sports Betting and gaming platform operated for sports enthusiasts in Bangladesh.

We believe your privacy is a fundamental right. This Privacy Policy is designed to give you a clear understanding of what information xbat collects, why it's collected, and how securely it is kept.

By registering with xbat or using the website, you confirm that you have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, please refrain from using the platform and contact our support team.

Xbat only collects the information needed to deliver the best experience to you. A detailed breakdown by category is provided below:

We never store your password in plain text. Passwords are always encrypted using strong hashing algorithms.

Xbat collects your information through several methods:

• Information you provide directly: Information you provide when filling out the registration form, completing KYC verification, or contacting support.
• Automatically collected: When you use xbat, device and usage information is automatically collected via cookies and log files.
• From Third Parties: Transaction confirmation details from payment gateways (Mobile Pay, Nagad, Rocket).
• Identity Verification Providers: Trusted third-party services are used to verify national ID documents as part of the KYC process.

Your data is used only for specific, defined purposes. xbat never uses your information for unrelated activities:

• Account Management: To create, maintain, and secure your account.
• Identity Verification (KYC): For mandatory verification to prevent fraud and money laundering.
• Payment Processing: To process deposits and withdrawals.
• Customer Support: To address your complaints, questions, or issues.
• Security assurance: To detect unauthorized access and suspicious activity.
• Legal obligations: To comply with applicable laws and regulations.
• Service Improvement: To analyse your usage patterns and improve the quality of the platform.
• Personalised Experience: To show you bonuses and offers relevant to your preferences.

Xbat keeps your data strictly confidential. However, limited information may be shared in certain specific circumstances:

• Payment Providers: Only the necessary financial information is shared with payment gateways such as Mobile Pay, Nagad, and Rocket to process deposits and withdrawals.
• Identity Verification Services: Information is shared with approved verification agencies as part of the KYC process.
• Law enforcement agencies: Information may be disclosed where legally required, such as by court order or government directive.
• Fraud prevention: Limited data may be shared with industry-recognised organisations to help detect fraudulent activity.

Outside of the cases listed above, xbat does not sell, rent, or exchange your personal data with any third party under any circumstances.

Xbat uses cookies to enhance your browsing experience and ensure the platform functions properly. Cookies are small text files stored on your device.

Types of cookies we use:

• Essential Cookies: For login sessions, security tokens, and core platform functionality. These cannot be disabled.
• Functional cookies: To remember your language preference and account settings.
• Analytics Cookies: To understand which pages are most visited. This data is aggregated and not personal.

You can manage or delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features.

Xbat does not store your data indefinitely. Each type of information has a defined retention period:

Once the retention period ends, your data is securely deleted or anonymised so that you can no longer be identified.

As an xbat user, you have important rights over your data:

Xbat strictly does not provide services to anyone under the age of 18. We take the protection of minors' online privacy very seriously.

• Age is verified at the point of registration.
• Date of birth is verified during the KYC process.
• If it is found that a minor is using an account, that account will be suspended immediately.
• If parents suspect their child is using xbat, please notify us immediately.

Xbat applies industry-leading technical and organizational measures to protect your information:

• 256-bit SSL/TLS encryption: All data transmissions are encrypted.
• Two-Factor Authentication (2FA): An additional layer of security can be added to your account.
• Firewall & DDoS Protection: To protect against cyber attacks.
• Regular Security Audits: Periodic audits conducted by third-party security experts.
• Staff Training: All staff receive regular training on data privacy and confidentiality.
• Restricted access: Only authorized personnel have access to your information.

In the event of a security breach, we will notify affected users within 72 hours and take appropriate remedial action.

Xbat may update this Privacy Policy from time to time. How you are notified will depend on the nature of the changes:

• Minor Changes: Notice on the website and date updated at the top of the policy.
• Important changes: A notification will be sent to your registered email or mobile number.
• Material changes: You will be notified at least 30 days before changes take effect.

Continued use of xbat after any changes takes effect will be considered acceptance of the updated policy. If you do not agree to the new policy, you have the right to close your account.

For any privacy-related questions, concerns, or requests, please get in touch with us:

• Email: support@xbat.onl
• Response time: Within 24 hours on business days
• Data Protection Request: Processed within 30 days