🔒 Data Privacy

xx87 Privacy Policy

Your privacy matters to us. This policy explains what personal data xx87 collects from Bangladesh players, how we use it, and the controls you have over your information.

Our Privacy Commitments

🛡️
SSL-Encrypted Platform
All data transmitted between your device and the xx87 Platform is protected by SSL encryption. Your account credentials and payment details are never sent in plain text.
🚫
We Never Sell Your Data
xx87 does not sell, rent or trade your personal information to third-party marketers or advertising networks under any circumstances.
🔐
Secure Account Storage
Passwords are stored using industry-standard hashing algorithms. xx87 staff cannot view your raw password at any time — not even during support interactions.
✋
You Control Your Data
You can request access to, correction of, or deletion of your personal data at any time by contacting xx87 support. Requests are processed within 30 days.
📱
Mobile-First Data Practices
As a mobile-first platform for Bangladesh users, xx87 collects only the device and session data needed to deliver a fast, stable experience on bKash and Nagad-connected accounts.
📧
Opt-Out of Marketing
You may opt out of promotional emails and SMS notifications at any time. Transactional messages (deposit confirmations, withdrawal alerts) cannot be disabled as they are essential for account security.
Last updated: January 2026

This Privacy Policy ("Policy") describes how xx87 ("we", "us", "our") collects, processes, stores and protects personal information provided by users ("you", "your") of the xx87 website and mobile Platform (collectively, the "Platform"). xx87 is an online gaming and sports betting platform operated for players in Bangladesh.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please do not use the Platform.

Policy updates: xx87 may update this Policy from time to time. Material changes will be communicated to registered players via email or via a prominent notice on the Platform. Continued use following notification constitutes acceptance of the revised Policy.

xx87 collects personal data in three broad categories: information you provide directly, information generated automatically by your use of the Platform, and information obtained from third-party service providers involved in operating the Platform.

Information you provide directly:

  • Registration data: full legal name, date of birth, mobile number, residential address, and chosen username.
  • KYC verification documents: national ID card (NID), passport, or other government-issued identity document, and proof of address where required.
  • Payment information: mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details for applicable withdrawal methods, and transaction reference numbers.
  • Support communications: messages, attachments and correspondence sent to xx87 through any support channel.

Information collected automatically:

  • Device information: device type, operating system version, browser type and version, unique device identifiers, and screen resolution.
  • Usage data: pages visited, time and duration of visits, game sessions played, bets placed, features accessed, and referring URL.
  • IP address and approximate location data derived from your IP address, used for fraud prevention and regional compliance purposes.
  • Cookie and session data: session tokens, preference cookies, and analytics identifiers. See Section 6 for full cookie details.

Information from third parties:

  • KYC and identity verification results from approved verification service providers used to confirm your identity and age.
  • Payment processor data: transaction status, payment method reference numbers, and fraud signals received from bKash, Nagad, Rocket, Upay, and card payment processors.
  • Fraud prevention data: risk scores and flags provided by third-party fraud detection services that xx87 uses to protect the integrity of the Platform.

xx87 uses the personal data we collect for the following purposes. We process your data only to the extent necessary for each stated purpose and do not use it for any purpose incompatible with those listed below.

  • Account creation and management: to register and maintain your xx87 account, verify your identity, process KYC documentation, and manage account security settings.
  • Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported bank channels, and to maintain accurate financial records.
  • Platform delivery and improvement: to provide, personalise and improve the gaming and betting services on the Platform, including recommending relevant games and promotions based on your activity.
  • Fraud prevention and security: to detect, investigate and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as described in our Terms and Conditions.
  • Regulatory compliance: to meet applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification mandates, and responding to lawful requests from competent authorities.
  • Customer support: to respond to your enquiries, resolve disputes, handle complaints, and provide assistance with account or payment issues.
  • Marketing and promotions: to send you promotional communications about xx87 offers, bonuses, cricket betting opportunities and new Platform features — but only where you have consented to receive such communications or where permitted by applicable law.
No automated decision-making: xx87 does not make solely automated decisions that produce significant legal effects about you without human review. Fraud flags and account restrictions generated by automated systems are always reviewed by a member of the xx87 compliance team before any irreversible action is taken.

xx87 processes your personal data only where there is a valid legal basis for doing so. The primary legal bases on which we rely are:

  • Contractual necessity: processing required to fulfil our obligations under the Terms and Conditions you accepted when registering — including account management, payment processing, and service delivery.
  • Legal obligation: processing required to comply with applicable laws and regulatory requirements, including AML obligations, age verification, and responding to lawful authority requests.
  • Legitimate interests: processing for fraud prevention, Platform security, and improving our services where these interests are not overridden by your data protection rights.
  • Consent: for marketing communications and non-essential cookies, where you have explicitly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

xx87 does not sell or rent your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

We may share your data with:

  • Payment processors and mobile wallet operators (bKash, Nagad, Rocket, Upay, Visa, Mastercard) strictly as required to process your deposit and withdrawal transactions.
  • KYC and identity verification providers contracted by xx87 to verify the identity, age and residential details of registered players in compliance with applicable requirements.
  • Fraud prevention and security service providers that assist xx87 in identifying and blocking fraudulent accounts, suspicious transactions, and coordinated abuse of the Platform.
  • Competent legal and regulatory authorities, including law enforcement agencies and financial intelligence units, where xx87 is required by law to disclose your data or where disclosure is necessary to prevent serious harm.

All third parties with whom xx87 shares your data are contractually required to maintain the confidentiality and security of your personal information and to use it only for the specific purpose for which it was shared. xx87 does not permit third-party service providers to use your data for their own marketing purposes.

xx87 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and improve your experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain viruses or executable code.

Types of cookies we use:

  • Essential cookies: strictly necessary for the Platform to function. These include session authentication tokens that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
  • Functional cookies: remember your language preference, currency display settings, and other personalisation choices to improve your experience on return visits.
  • Analytics cookies: collect anonymised data about how players use the Platform — which pages are visited most often, how long sessions last, and where users encounter errors — to help us improve Platform performance.
  • Marketing cookies (consent-based only): used to deliver relevant promotional content about xx87 offers. These are activated only with your explicit consent and can be withdrawn at any time via your account settings.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the Platform from functioning correctly and you will not be able to log into your account.

xx87 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically: active account data is retained for the lifetime of your account; KYC documentation and transaction records are retained for a minimum of 5 years following account closure in compliance with applicable financial record-keeping requirements; support communications are retained for 3 years from the date of each interaction.

When your data is no longer required, xx87 securely deletes or anonymises it so that it can no longer be associated with you as an individual. Anonymised and aggregated analytics data that cannot identify you may be retained indefinitely for Platform improvement purposes.

xx87 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Our security programme includes:

  • TLS/SSL encryption for all data transmitted between your device and the xx87 Platform, ensuring your login credentials and payment information cannot be intercepted in transit.
  • Encrypted password storage using industry-standard one-way hashing. xx87 employees have no ability to view your plaintext password, and password resets are handled through verified mobile number confirmation.
  • Access controls: internal systems that store player data are accessible only to xx87 staff with a defined operational need. Access is logged and reviewed regularly as part of our security audit programme.
  • Incident response procedures: defined processes for detecting, reporting and responding to personal data breaches, including notifying affected players without undue delay where a breach poses a risk to their rights.

While xx87 takes security seriously and applies appropriate safeguards, no online platform can guarantee absolute security against all threats. You also play a role in keeping your account secure by using a strong, unique password and not sharing your login credentials with others.

As a user of the xx87 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact xx87 support using the email address provided on this page. We will respond to verified requests within 30 days.

Right of Access Right to Rectification Right to Erasure Right to Restrict Processing Right to Data Portability Right to Object

Please note that some rights are subject to limitations. For example, we may be unable to delete certain data that we are legally required to retain, such as KYC records and transaction histories. Where we are unable to fully comply with a request, we will explain why and advise on any alternative steps available to you.

Identity verification required: To protect your privacy, xx87 will verify your identity before processing any data rights request. We may ask you to confirm your registered mobile number, provide a copy of your NID, or answer account security questions. This step is mandatory and cannot be waived.

The xx87 Platform is strictly for adults aged 21 and above. xx87 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately close that account, forfeit any associated balance, and securely delete the personal data collected in connection with that account.

If you believe that a minor has registered an account on xx87, please contact us immediately at the support email address provided on this page so that we can take prompt action.

To operate the xx87 Platform and deliver its services to players in Bangladesh, it may be necessary to transfer your personal data to service providers located outside Bangladesh, including KYC verification providers, fraud prevention services, and cloud infrastructure providers.

Where such transfers occur, xx87 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applied within Bangladesh. This includes contractual data protection clauses in all agreements with international service providers. xx87 will not transfer your personal data to a jurisdiction that does not provide adequate data protection safeguards.

The xx87 Platform may contain references to third-party payment services (bKash, Nagad, Rocket, Upay) and game software providers (Pragmatic Play, Evolution Gaming, Spribe and others). xx87 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your xx87 account, particularly mobile wallet providers through which you make deposits or withdrawals.

xx87 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal requirements, or the services we offer. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Where a change is material — for example, a new category of data being collected or a new type of third-party sharing — we will notify registered players via email at least 14 days before the change takes effect.

Your continued use of the xx87 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure by contacting xx87 support.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the xx87 support team. All privacy-related enquiries are handled confidentially and responses are provided within 30 days of receipt. For urgent data security concerns, please indicate "Data Security" in the subject line of your message.

Privacy enquiries email: [email protected]

Ready to Play Responsibly?

Your data is protected. Explore xx87 Casino, bet on cricket, or visit our FAQ for more information.

Explore xx87 Casino Cricket Betting Read Our FAQ