Who Operates This Site
xx789 is an online gaming platform accessible at xx789.one, operated for players based in Bangladesh. When you create an account, make a deposit, or contact our support team, you share personal data with us. This policy describes how we treat that data responsibly.
If you have questions about anything in this document, our 24/7 Live Chat team can answer them directly — no email needed, no waiting days for a reply.
Data We Collect From You
We only collect data that is genuinely needed to run a safe, legal gaming service. The table below lists the main categories.
| Category | Specific items | When collected |
|---|---|---|
| Identity | Full name, date of birth, NID / Passport / Driving Licence number | During KYC verification before first withdrawal |
| Contact | Mobile number (for bKash, Nagad, Rocket, Upay), device locale | At registration |
| Financial | Mobile wallet account references, deposit and withdrawal records in BDT | Every transaction |
| Account activity | Login timestamps, games played, bets placed, bonus usage | Continuously while logged in |
| Device & network | IP address, device model, OS version, browser type | Automatically on each session |
| Communications | Live Chat transcripts, support ticket content | When you contact support |
We do not collect sensitive data such as religion, ethnicity, or health information. We do not store full payment card numbers — xx789 processes deposits exclusively through mobile wallets and bank transfers, so card data is never entered on our platform.
Why We Process Your Data
Every piece of data has a specific, documented purpose. We do not sell your personal information to third parties.
Running your account
We need your registration details to open an account, verify your age (you must be 18 or older), process deposits and withdrawals, and credit bonuses such as the welcome offer. Without this data, we simply cannot provide the service.
Identity verification (KYC)
Before processing your first withdrawal, xx789 verifies your identity using one of three accepted documents: National ID Card (NID), Passport, or Driving Licence. Our KYC review takes up to 6 hours. This step protects both you and the platform from fraud and underage play.
Fraud prevention and security
Device and network data helps our systems flag unusual login patterns — for example, a login from an unfamiliar IP address immediately after a large deposit. This keeps your funds safe. We monitor account activity automatically; a human reviewer steps in when the system raises an alert.
Improving the platform
Anonymised, aggregated data about which games players visit and when tells us where the platform needs work. This analysis never identifies you personally. We use the findings to improve load times, game selection, and the mobile experience — most xx789 players are on Android, so the app matters a lot.
Legal obligations
We retain transaction records and identity documents because applicable anti-money-laundering rules require it, not because we want to hold your data longer than necessary.
Cookies and Tracking Technologies
xx789 uses cookies for three purposes: keeping you logged in between sessions (session cookies), remembering your preferences such as language, and measuring how players navigate the site (analytics cookies). We do not use advertising tracking pixels or cross-site behavioural ad networks.
How to control cookies
Your browser settings let you block or delete cookies at any time. If you block session cookies, you will need to log in each visit. Clearing cookies does not delete your xx789 account or any game history — that data is stored server-side.
When We Share Your Data
We share the minimum necessary data with the following parties, and only for the stated reason:
- Game providers (FA Chai, JILI, Habanero, PG Soft, KA Gaming) — receive a session token to load games. They do not receive your name or mobile number.
- Payment processors — bKash, Nagad, Rocket, Upay, and partner banks receive transaction references needed to complete deposits and withdrawals. They do not receive your game history.
- KYC verification service — your identity document image is passed to a third-party verification partner under a data processing agreement.
- Legal authorities — if a court order or regulatory authority lawfully demands specific records, we comply. We will notify you unless legally prohibited from doing so.
No other sharing takes place. We do not sell data to marketers, data brokers, or any other commercial party.
How Long We Store Your Data
Different types of data have different retention windows, based on operational need and legal requirement:
- Account and identity records — kept for the life of your account plus 5 years after closure, to meet anti-money-laundering obligations.
- Transaction logs — kept for 5 years from the date of each transaction.
- Live Chat transcripts — kept for 12 months, then deleted unless linked to an open dispute.
- Device and session logs — kept for 90 days, then automatically purged.
- Marketing preferences — kept until you opt out or close your account, whichever comes first.
When a retention period expires, data is deleted or irreversibly anonymised. You cannot request earlier deletion of records we are legally required to keep, but you can request deletion of everything else.
Rights Over Your Personal Data
You have the following rights regarding the personal data xx789 holds about you:
- Access — request a copy of all personal data we hold about you.
- Correction — ask us to fix inaccurate details (name spelling, mobile number, etc.).
- Deletion — request deletion of data we are not legally required to keep. We will confirm what can and cannot be deleted and why.
- Restriction — ask us to pause processing while a dispute is under review.
- Portability — request your account data in a machine-readable format.
- Objection — object to processing for direct marketing at any time; we will stop within 48 hours.
To exercise any of these rights, contact us via 24/7 Live Chat. We will respond within 30 days. If the request is complex, we may extend this by a further 30 days and will tell you so upfront.
Security Measures
xx789 applies standard security practices to protect your data:
- All data in transit is encrypted using TLS 1.2 or higher. The padlock in your browser address bar confirms this.
- Passwords are stored as salted hashes — we cannot read your password, only verify it.
- Access to production databases is restricted to named staff with a documented business reason. Access logs are reviewed weekly.
- The platform undergoes periodic security assessments. Critical findings are patched within 72 hours.
No system is perfectly invulnerable. If we ever discover a breach that affects your personal data, we will notify you promptly and explain what happened, what data was involved, and what steps we have taken.
Players Under 18
xx789 is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us immediately via Live Chat. We will suspend the account and delete the data without delay.
Age is verified during the KYC process using government-issued ID. Accounts where age cannot be confirmed are suspended until verification is complete.
Updates to This Policy
We may update this Privacy Policy when our practices change, when we add new features, or when regulations require it. The "last updated" date at the top of this page always reflects the most recent version.
If a change materially affects how we use your data — for example, sharing data with a new category of third party — we will notify active players via Live Chat message before the change takes effect. Continued use of the platform after the effective date means you accept the updated policy.
Contact & Complaints
The quickest way to reach us about any privacy question is 24/7 Live Chat, available directly in your account dashboard. Our support team handles data queries alongside general account questions — no separate process, no waiting in a different queue.
If you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. xx789 will cooperate fully with any such inquiry.