xbajee Privacy Policy

2.1 Information Provided Directly

When you register or contact us, the following information is collected:

• Full name and date of birth
• Email address and mobile number
• Username and password (stored in encrypted form)
• Documents submitted for identity verification (where applicable)
• Transaction details — deposit and withdrawal records

2.2 Automatically Collected Information

The following information is automatically recorded while you use the site:

• Device type, operating system, and browser information
• IP address and connection duration
• Pages visited, links clicked, and session details
• Information collected through cookies and similar tracking technologies

2.3 Information Received from Third Parties

For identity verification or fraud prevention purposes, we may collect limited information from trusted third-party sources. This information is used for security purposes only.

4.1 Service Provider Partners

Third-party service providers engaged for payment processing, identity verification, or technical support will receive only the information necessary for their work. They may not use your information for any other purpose.

4.2 Legal Obligations

xbajee may be required to disclose information to comply with a court order, government directive, or applicable law. Any such disclosure will always be limited to the minimum required.

4.3 Business Transfers

In the event of a merger, acquisition, or asset transfer, user information may be transferred. Even in such cases, the terms of this privacy policy will remain in effect.

5.1 Types of Cookies and Their Purpose

• Essential Cookies: Required to maintain login sessions and security; disabling these will prevent the site from working properly.
• Functional Cookies: Used to remember your preferred language, settings, and previous session information.
• Analytical Cookies: Used to analyse patterns of site usage; this information is processed in aggregated and anonymous form.

6.2 Organisational Security

• Only authorised staff have limited access to specific data.
• All staff sign confidentiality agreements and receive regular training.
• Procedures are in place for rapid detection and response in the event of a data breach.

7.1 Retention Periods

• Information for active accounts: retained for as long as the account remains active.
• After account closure: for a set period as required by legal requirements.
• Financial transaction records: retained for an extended period in accordance with applicable law.
• Marketing communication data: deleted as soon as consent is withdrawn.

8.1 Right to Access Information

You can find out at any time what information we hold about you. Contact our support team to receive a copy of your information.

8.2 Right to Correction

If any information we hold about you is incorrect, you can request that it be corrected. This can be done through account settings or with the help of support.

8.3 Right to Deletion

In certain circumstances you can request that your information be deleted. However, some information may need to be retained due to legal obligations, and we will inform you of this.

8.4 Withdrawal of Marketing Communications

You can stop receiving promotional emails or messages at any time. To do so, withdraw your consent in account settings or let our support team know.

9.1 Age Verification Process

We verify date of birth at the time of registration. If evidence is found that information from a minor has been collected for any reason, that information will be deleted immediately and the associated account will be closed. If you have any information regarding this, please notify our support team.

10.1 Agreement to Changes

If you continue to use the site after an updated policy is published, you will be considered to have agreed to the revised policy. The date of any policy change will always be shown at the top of the page.