xs27 Privacy Policy —
Your Information Stays Protected

1. Information We Collect

When you create an account and use our services on xs27, we may collect the following types of information:

1.1 Personal Identity Information

• Full name and username
• Date of birth (for age verification — only those aged 21 or above may register)
• Email address
• National ID card or passport details (where identity verification is required)
• Address and area postcode

1.2 Financial Information

• Mobile banking number (bKash, Nagad, Rocket)
• Bank account details (for bank transfers)
• Deposit and withdrawal transaction history

1.3 Usage and Technical Information

• IP address and device type
• Browser type and version
• Page view times, clicks, and navigation patterns
• Gaming history and betting information
• Information collected through cookies and similar tracking technologies

2. Purpose of Data Collection

xs27 uses the information collected about you for the following purposes:

• Account Management: Completing the registration process, verifying login, and managing your profile.
• Identity Verification (KYC): Completing the Know Your Customer process in line with international standards and ensuring age verification.
• Financial Transactions: Processing deposits and withdrawals and preventing financial fraud.
• Service Improvement: Personalising your experience and enhancing the gaming experience.
• Customer Support: Resolving your issues through 24/7 live chat.
• Legal Compliance: Complying with applicable laws and regulations and preventing suspicious activity.
• Responsible Gaming: Identifying unusual gaming behaviour and taking necessary steps to ensure responsible play.
• Communications: Informing you about important service-related notices and changes to our policies.

3. Data Storage and Security

xs27 has put in place industry-standard technical and organisational measures to ensure the security of your personal information.

3.1 Technical Security

• All data is transmitted using SSL (Secure Sockets Layer) encryption technology.
• Stored data is protected with AES-256 encryption.
• Regular security audits and penetration testing are carried out.
• Firewalls and an intrusion detection system (IDS) are kept active.

3.2 Organisational Security

• Only authorised staff are granted access to the necessary data.
• All staff are bound by confidentiality agreements.
• Regular staff training and awareness programmes are conducted.

3.3 Data Retention Period

Your information is retained while your account is active and thereafter for as long as required by legal obligations. Information that is not legally required to be kept after an account is closed is securely deleted.

4. Sharing Information with Third Parties

xs27 does not sell your personal information or provide it to third parties for commercial purposes. However, certain information may be shared in the following circumstances:

• Payment Service Providers: The necessary information is shared with bKash, Nagad, Rocket, or a bank to process transactions. These organisations are governed by their own privacy policies.
• Identity Verification Services: Information may be provided to licensed third-party verification agencies for the KYC process.
• Law Enforcement Agencies: Information may be provided on the basis of a court order or a legal request from a competent authority.
• Anti-Money Laundering (AML) Agencies: To comply with applicable laws in preventing financial crime.
• Technology Service Providers: Selected cloud and technology partners used to operate the platform — who are bound by strict confidentiality agreements.

5. Cookies and Tracking Technologies

The xs27 website uses cookies and similar technologies to improve your experience. Cookies are small text files stored in your browser.

5.1 Types of Cookies We Use

• Essential Cookies: For the basic functionality of the website — such as maintaining login sessions. Without these, the service does not work properly.
• Functional Cookies: To remember your preferences and settings.
• Analytics Cookies: To understand website traffic and usage patterns, which helps improve the service.

5.2 Cookie Controls

You can control or reject cookies by changing your browser settings. However, rejecting certain essential cookies may mean that some parts of the service do not work properly.

6. Your Rights

As a user of the xs27 platform, you have the following rights regarding your personal information:

• Right of Access: You have the right to know what information we hold about you.
• Right to Rectification: The right to request correction of incomplete or inaccurate information.
• Right to Erasure: The right to request deletion of your information in certain circumstances — though some information may need to be retained due to legal obligations.
• Right to Restriction of Processing: The right to object to the processing of your information in specific cases.
• Right to Data Portability: The right to request your information in a structured format.
• Right to Withdraw Consent: The right to withdraw consent at any time for information processed on the basis of consent.

To exercise these rights, email [email protected] or contact us via live chat. We will respond to your request as soon as possible after appropriate verification.

7. Protection of Minors' Information

xs27 services are exclusively for those aged 21 or above. We do not knowingly collect information from anyone under the age of 21. Age verification during registration is mandatory.

If we confirm that a minor's information has been collected by mistake, the relevant account will be closed immediately and the information will be deleted.

8. International Data Transfers

To operate the xs27 service, your information may in some cases be stored or processed on servers located outside Bangladesh. For any international data transfer, we ensure that:

• Adequate data protection measures are in place in the destination country or organisation.
• Transfer agreements include data protection terms that meet international standards.
• Only the minimum data necessary to operate the service is transferred.

9. Third-Party Websites and Services

If the xs27 website contains links to third-party websites (such as references to game providers), xs27 is not responsible for the privacy policies of those websites. If you visit those sites, their own privacy policies will apply.

Game providers including Pragmatic Play, Evolution Gaming, JILI, PG Soft, Spribe, Ezugi, Microgaming, and NetEnt operate their software on our platform but are independent organisations and have their own data protection policies.

10. Changes to This Policy

xs27 reserves the right to update this Privacy Policy at any time. If any significant changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users by email.
• Display a notice on the platform where applicable.

If you continue to use xs27 services after the changes, you will be considered to have agreed to the updated policy. We recommend checking this page regularly.

11. Responsible Gaming and Data

xs27 believes in responsible gaming. Information about your gaming behaviour is used only for your protection — such as identifying unusual betting patterns and providing support where needed.

To learn more about responsible gaming, read our Responsible Play page. The option to set gaming limits or temporarily suspend your account is available on xs27.