Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register an account on xbij, we collect the following personal information directly from you:

• Identity Information: Full legal name, date of birth, gender, and nationality as provided during registration.
• Contact Information: Email address, phone number, and residential address (street, city, province, postal code).
• Account Credentials: Username and password (passwords are stored in hashed, encrypted format and are never visible to xbij staff).
• KYC Verification Documents: Copies of government-issued identification (Indonesian National ID Card / KTP), proof of address (utility bill or bank statement), and selfie photo holding your ID card for identity verification purposes.
• Payment Information: Bank account details (bank name, account number, account holder name) and e-wallet identifiers for deposits and withdrawals. Credit/debit card information, if applicable, is processed by third-party payment processors and not stored on xbij servers.

1.2 Information Automatically Collected

When you access and use the xbij platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Connection Information: IP address, internet service provider, connection type, and approximate geographic location derived from IP address.
• Usage Data: Pages visited, features used, time spent on platform, betting history, game play sessions, transaction history, and interaction with promotional materials.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user sessions, remember preferences, and analyze platform usage. See Section 7 for detailed cookie information.

1.3 Information from Third Parties

In some cases, we may receive information about you from third-party sources:

• Payment Providers: Transaction confirmation data from banks (BCA, BRI, BNI, Mandiri, etc.) and e-wallet providers (OVO, DANA, GoPay) to verify deposits and process withdrawals.
• Identity Verification Services: We may use third-party KYC verification services to validate the authenticity of submitted identification documents and detect fraudulent accounts.
• Game Providers: Betting and gaming data from third-party suppliers (Pragmatic Play, Evolution Gaming, etc.) regarding your game play sessions on their platforms accessed through xbij.

2. How We Use Your Information

xbij uses your personal information for the following purposes:

• Account Management: To create, maintain, and secure your xbij account, verify your identity through KYC procedures, and authenticate your login sessions.
• Transaction Processing: To process deposits, withdrawals, and betting transactions; maintain accurate financial records; and comply with anti-money-laundering regulations.
• Platform Functionality: To provide access to betting markets, casino games, togel, sabung ayam, and other services; remember your preferences and settings; and deliver personalized content.
• Customer Support: To respond to your inquiries, resolve technical issues, investigate complaints, and provide assistance via live chat, email, and WhatsApp.
• Marketing Communications: To send promotional offers, bonus notifications, loyalty program updates, and platform news to your registered email address or phone number. You can opt out of marketing communications at any time via account settings or by contacting support.
• Security and Fraud Prevention: To detect and prevent fraud, multi-accounting, bonus abuse, collusion, underage gambling, and other prohibited activities; monitor for suspicious transaction patterns; and enforce our Terms & Conditions.
• Legal Compliance: To comply with legal obligations including age verification, anti-money-laundering laws, tax reporting requirements, and regulatory audits.
• Platform Improvement: To analyze usage patterns, identify technical issues, optimize user experience, test new features, and improve overall platform performance.
• Responsible Gaming: To implement self-exclusion measures, deposit limits, session time tracking, and other responsible gaming tools; monitor betting behavior for signs of problem gambling.

3. Legal Basis for Processing (GDPR Compliance)

Although xbij primarily serves the Indonesian market, we adhere to GDPR principles for data protection. Our legal basis for processing your personal data includes:

• Contract Performance: Processing is necessary to fulfill our obligations under the Terms & Conditions you accepted when registering (account creation, transaction processing, service delivery).
• Legal Obligation: Processing is required to comply with laws and regulations such as KYC/AML requirements, age verification, tax reporting, and licensing conditions.
• Legitimate Interest: Processing is necessary for our legitimate business interests including fraud prevention, platform security, customer support, and service improvement — balanced against your privacy rights.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent and allow you to withdraw consent at any time.

4. Data Sharing and Third-Party Disclosure

4.1 When We Share Your Information

xbij does not sell your personal information to third parties. However, we may share your data with trusted service providers and partners in the following circumstances:

• Payment Processors: Bank account details and transaction information are shared with payment gateway providers and financial institutions to process deposits and withdrawals.
• Game Suppliers: Your username, betting activity, and game play data are shared with third-party game providers (Pragmatic Play, Evolution Gaming, NetEnt, etc.) to deliver casino and slot content.
• Identity Verification Services: KYC documents may be shared with third-party verification services to authenticate your identity and detect fraudulent documents.
• Cloud Hosting Providers: Your data is stored on secure cloud servers managed by reputable infrastructure providers with ISO 27001 certification and GDPR compliance.
• Customer Support Tools: Support ticket data, chat transcripts, and contact information may be processed through customer service software platforms (encrypted and access-controlled).
• Legal and Regulatory Authorities: We may disclose your information to law enforcement, tax authorities, regulators, or courts if legally required or to enforce our Terms & Conditions.

4.2 International Data Transfers

xbij operates internationally and some of our service providers are located outside Indonesia. When we transfer your data internationally, we ensure appropriate safeguards are in place such as Standard Contractual Clauses, data processing agreements, and partner compliance with international data protection standards.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. Retention periods vary by data type:

After the retention period expires, personal data is securely deleted or anonymized. Self-excluded users' data is retained for the duration of the exclusion period plus any legally required retention period to prevent circumvention of the self-exclusion.

6. Your Data Protection Rights

Under international data protection principles, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.
• Right to Rectification: If any personal information we hold is inaccurate or incomplete, you can request correction. You can update most information directly via your account settings.
• Right to Erasure ("Right to Be Forgotten"): You can request deletion of your personal data, subject to legal retention obligations. Note that active accounts cannot be deleted — you must first close your account and withdraw any remaining funds.
• Right to Restriction: You can request that we temporarily restrict processing of your data while we verify accuracy or investigate a complaint.
• Right to Data Portability: You can request your personal data in a portable format to transfer to another service provider.
• Right to Object: You can object to processing based on legitimate interest grounds, particularly for marketing purposes. We will stop processing unless we have compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing emails), you can withdraw consent at any time via account settings or by contacting support. This does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Protection Request". We will respond within 30 days. You will need to verify your identity before we process your request.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They help websites remember your preferences, track your activity, and improve user experience.

7.2 Types of Cookies We Use

• Essential Cookies: Required for platform functionality — authentication, session management, security. These cannot be disabled as the platform would not function without them.
• Functional Cookies: Remember your preferences such as language, currency display, and layout settings to personalize your experience.
• Analytics Cookies: Help us understand how users interact with xbij — which pages are most visited, how long users stay, where users drop off. We use this data to improve the platform.
• Advertising Cookies: Track your browsing behavior to deliver targeted promotional offers and measure the effectiveness of marketing campaigns. You can opt out of these via cookie settings.

7.3 Managing Cookies

You can control cookie settings through your browser preferences. Note that disabling essential cookies will prevent you from using core platform features. Most browsers allow you to block third-party cookies while accepting first-party cookies, which is a good balance between privacy and functionality.

8. Data Security Measures

xbij implements multiple layers of security to protect your personal information:

• Encryption: All data transmitted between your device and xbij servers is encrypted using TLS 1.3 protocol with 256-bit SSL certificates. Stored data is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized xbij personnel who require it to perform their job functions. Access is logged and monitored.
• Authentication: User accounts are protected by password authentication. We enforce strong password requirements and recommend enabling two-factor authentication (2FA) for additional security.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity 24/7.
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments on the xbij platform quarterly to identify and remediate potential security weaknesses.
• Employee Training: All xbij staff undergo mandatory data protection and security awareness training annually.
• Incident Response: We maintain a security incident response plan. In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours as required by GDPR principles.

9. Third-Party Links and Services

The xbij platform may contain links to third-party websites or integrate third-party services (such as payment processors or game providers). This Privacy Policy applies only to xbij. When you click on third-party links or use third-party services, you are subject to their own privacy policies. We encourage you to review the privacy policies of any third-party services you interact with. xbij is not responsible for the privacy practices of third parties.

10. Children's Privacy

xbij services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and close the associated account. Parents or guardians who believe their child has provided personal information to xbij should contact us immediately at [email protected].

11. Changes to This Privacy Policy

xbij reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be communicated to registered users via email. Your continued use of xbij after changes are posted constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed about how we protect your data.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how xbij handles your personal information, please contact our Data Protection team:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through your account dashboard
• Response Time: We aim to respond to all privacy inquiries within 48 hours, and no later than 30 days for formal data protection requests.

For questions about our Terms & Conditions or Responsible Gaming policies, please visit those respective pages or contact support.