This policy is written in plain English. If a section is unclear, our 24/7 Live Chat team can walk you through it. Reading this takes about four minutes.
Who Operates This Site
xx789 App operates the platform available at https://xx789bdt.net. When you create an account, place a bet, or browse the site, xx789 App acts as the data controller — meaning we decide what data is collected and how it is used. This policy applies to every player in Bangladesh and anywhere else who accesses the site.
What Data We Collect
We only collect information that is necessary to run a fair, secure, and legally compliant gaming service. The table below summarises each category.
| Category | Examples | When Collected |
|---|---|---|
| Account details | Full name, date of birth, email address, phone number | During registration |
| Identity documents | National ID Card (NID), Passport, Driving Licence scan or photo | During KYC verification, before first withdrawal |
| Financial records | Deposit and withdrawal amounts, bKash/Nagad/Rocket/Bank/Upay transaction references | Each transaction |
| Device and session data | IP address, browser type, operating system, session timestamps | Every site visit |
| Gaming activity | Bets placed, games played, win/loss history, bonus usage | Every game session |
| Support communications | Live chat transcripts, messages sent to our support team | When you contact us |
We do not collect your bKash PIN, mobile banking password, or any payment credential directly. Transactions go through the respective payment provider's own secure interface.
Why We Collect It
Every piece of data has a specific purpose. We do not collect information speculatively.
- Account management: To create and maintain your xx789 App account, process deposits, and pay out withdrawals.
- Identity verification (KYC): To confirm you are over 18 and to prevent fraud or money laundering. KYC documents are reviewed within two hours of submission.
- Responsible gaming: Gaming activity records let us flag unusual patterns and enforce self-exclusion or deposit limits if you request them.
- Customer support: Chat transcripts let us resolve disputes and improve service quality.
- Legal compliance: Financial records must be kept to satisfy anti-money-laundering obligations and to respond to lawful authority requests.
- Service improvement: Aggregated, anonymised session data helps us fix bugs and optimise the platform for Android users on Bangladesh mobile networks.
Who Sees Your Data
xx789 App does not sell your personal data. We share it only where strictly necessary:
- Payment processors (bKash, Nagad, Rocket, Bank Transfer, Upay): transaction data to process deposits and withdrawals.
- Game providers (Pragmatic Play, JILI, KA Gaming, Habanero, Red Tiger, Playtech, FA Chai): a session token and player ID to load games. Providers do not receive your name or contact details.
- Identity verification services: Your NID, Passport, or Driving Licence image for KYC screening.
- Legal authorities: Where required by a court order or regulatory body. We will notify you unless prohibited by law.
All third-party partners are contractually required to protect your data and use it only for the stated purpose.
Cookies and Tracking
What cookies we use
xx789 App uses a small set of first-party cookies. We do not use third-party advertising cookies or sell browsing data to ad networks.
| Cookie Type | Purpose | Lifespan |
|---|---|---|
| Session cookie | Keeps you logged in while you play | Until browser closes |
| Authentication token | Remembers login if you tick "Stay logged in" | 30 days |
| Performance cookie | Measures page load times and error rates (anonymised) | 90 days |
| Preference cookie | Stores language and game-filter settings | 1 year |
Controlling cookies
You can delete or block cookies through your browser settings. Blocking session cookies will log you out automatically. The xx789 App Android app (version 2.5.9) uses local device storage instead of browser cookies — you can clear this in your Android app settings.
How Long We Keep Records
Retention periods are set to balance your privacy with our legal obligations:
- Account and identity data: Kept for five years after your account is closed, in line with standard anti-money-laundering requirements.
- Transaction records: Kept for five years from the date of each transaction.
- Gaming activity logs: Retained for two years, then anonymised and aggregated.
- Support chat transcripts: Retained for one year, then deleted unless linked to an ongoing dispute.
- Device/session logs: Automatically deleted after 90 days.
When a retention period expires, data is securely deleted or irreversibly anonymised. You cannot request earlier deletion of records we are legally required to keep.
Security Measures
xx789 App applies industry-standard protections to every layer of the platform:
- All traffic is encrypted with TLS 1.2 or higher. The padlock in your browser confirms this.
- Passwords are stored as salted hashes — xx789 App staff cannot see your password.
- KYC documents are stored in an isolated, access-controlled environment. Only compliance staff with a legitimate need can view them.
- Financial systems are separated from the main web application. A breach of one does not automatically expose the other.
- We run regular internal security reviews and act on findings promptly.
No system is completely immune to attack. If a breach affects your personal data, xx789 App will notify you within 72 hours of discovering it, and will explain what happened and what steps we are taking.
Your Rights as a Player
You have the following rights over your personal data held by xx789 App:
- Access: Request a copy of all data we hold about you.
- Correction: Ask us to fix inaccurate account details (name spelling, date of birth, etc.).
- Deletion: Request erasure of data we are not legally required to keep. Note that transaction and KYC records cannot be deleted during the mandatory retention window.
- Restriction: Ask us to stop processing your data while a dispute is being resolved.
- Objection: Object to processing based on our legitimate interests (such as performance analytics). We will stop unless we can show a compelling reason to continue.
- Portability: Receive your account and gaming history in a machine-readable format (CSV or JSON) so you can transfer it elsewhere.
To exercise any of these rights, start a conversation with our 24/7 Live Chat team. We will verify your identity before processing the request, and will respond within 30 days.
Players Under 18
xx789 App does not knowingly collect data from anyone under 18. Registration requires a date of birth, and KYC verification confirms age before any withdrawal is processed. If we discover that an account was created by a minor, the account will be suspended immediately, all funds returned (minus bonuses), and all associated data deleted. Parents or guardians who suspect a minor has registered should contact us via Live Chat straight away.
When This Policy Changes
We update this policy when our data practices change — for example, when we add a new payment provider or change a retention period. The "Last updated" date at the top of this page always reflects the most recent revision. For significant changes, we will notify registered players via a banner on the site at least 14 days before the change takes effect. Continued use of xx789 App after the effective date means you accept the updated policy.
Contact Us
For any privacy-related question, data request, or concern, please reach our team directly:
- Live Chat: Available 24/7 — the fastest way to get a response. Start a chat from any page on https://xx789bdt.net.
- Response time: Privacy requests are answered within 30 days. Urgent security concerns (suspected account compromise, data breach) are escalated immediately.
We do not publish an email address on the site. All support and privacy communications go through our Live Chat system to keep your query secure and traceable.