Plain-language summary: xx789 collects personal data to run your account, process payments, and meet legal requirements. We do not sell your data. You can request access to or deletion of your records at any time through our 24/7 Live Chat.
Who We Are
xx789 operates the online gaming platform at xx789.onl, offering casino games, sports betting, and live dealer tables to players in Bangladesh. When you create an account, deposit funds via bKash or Nagad, or contact our support team, you share personal information with us. This Privacy Policy explains exactly what we collect, the reason behind each piece of data, and the choices you have.
References to "xx789", "we", "us" or "our" throughout this document all mean the platform operator responsible for xx789.onl.
Data We Collect From You
We collect only what we genuinely need to run your account and comply with applicable rules. The table below lists each category and the typical source.
| Category | Examples | Source |
|---|---|---|
| Identity data | Full name, date of birth, gender | Registration form |
| Contact data | Mobile number, email address | Registration form |
| Verification documents | National ID Card (NID), Passport, Driving Licence | KYC submission before first withdrawal |
| Financial data | bKash/Nagad/Rocket/Upay account reference, transaction IDs, deposit and withdrawal amounts in ৳ BDT | Payment processor records |
| Account activity | Login timestamps, game sessions, bet history, bonus usage | Platform systems |
| Device & connection data | IP address, device type, OS version, browser | Automatic collection |
| Communications | Live chat transcripts, support tickets | Customer support interactions |
We do not collect your bKash PIN or the full credentials of any mobile banking account. Payment references are stored only as transaction tokens.
Why We Need Your Information
Each type of data serves a clear purpose. We rely on one of four legal grounds: fulfilling our contract with you, meeting a legal obligation, protecting a legitimate interest, or acting on your consent.
Running your account
Your name, mobile number, and password are needed to create and secure your xx789 account. Without this, we cannot process deposits or pay out withdrawals. This falls under contract performance.
Processing payments
To move ৳ BDT between your bKash wallet and your xx789 balance, we must record transaction references. Deposits credit within 5 minutes; withdrawals complete within 18 minutes. These records are kept for financial reconciliation and dispute resolution.
Identity verification (KYC)
Before your first withdrawal, xx789 requires a verified government-issued document — NID, Passport, or Driving Licence. The review takes up to 12 hours. This step protects against fraud and underage play, and meets regulatory obligations.
Bonuses and promotions
To apply your welcome bonus, reload offers, or daily cashback, we track your deposit amounts, wagering progress, and eligible game activity. This lets us credit rewards accurately and enforce the 18x wagering requirement fairly.
Security and fraud prevention
Device and IP data help us spot unusual login attempts and protect your account balance. If we detect suspicious activity, we may temporarily restrict access and ask you to re-verify your identity.
Payment Data and bKash Transactions
Bangladesh players primarily use bKash, Nagad, Rocket, and Upay. When you make a deposit or withdrawal, the mobile payment provider processes the transaction on their own platform. xx789 receives only a reference number and the transaction amount — not your mobile banking PIN or one-time password.
We store payment records for a minimum of five years to satisfy financial record-keeping requirements and to resolve any disputes over missing credits or failed withdrawals.
Cookies and Tracking Technologies
xx789 uses cookies and similar local-storage mechanisms when you use the website or the xx789 App (Android v2.7.2). These fall into three groups:
- Essential cookies — keep you logged in, maintain your session, and store your language preference. These cannot be disabled.
- Analytics cookies — anonymous page-view data to help us understand which sections of the site work well and which need improvement. No personally identifying information is passed to analytics tools.
- Marketing cookies — set only if you arrive via an affiliate or referral link, to attribute a referral bonus correctly. You can decline these without affecting core platform functions.
You can clear cookies through your browser settings at any time. Clearing essential cookies will log you out of your xx789 account.
When We Share Your Data
xx789 does not sell personal data to third parties. We share information only in the following limited situations:
- Payment processors (bKash, Nagad, Rocket, Upay) — to execute deposits and withdrawals.
- Game providers (JDB, Playtech, Spribe, Ezugi, CQ9, Habanero) — your account token and bet data are shared so games load correctly and results are recorded. Providers do not receive your full identity details.
- KYC verification services — your government ID documents may be passed to a third-party identity verification provider for document authentication. These providers are contractually bound to handle your data securely and use it only for verification.
- Legal and regulatory bodies — if required by law, court order, or official investigation, we will disclose information as legally compelled.
- Fraud prevention partners — aggregated, pseudonymised signals (IP patterns, device fingerprints) may be shared with industry fraud-prevention networks.
How Long We Keep Your Records
We hold data only as long as it is needed for the original purpose or required by law.
| Data type | Retention period |
|---|---|
| Account registration details | Duration of account + 5 years after closure |
| KYC documents | 5 years from submission |
| Payment transaction records | 5 years from transaction date |
| Bet and game history | 3 years |
| Live chat and support tickets | 2 years |
| Marketing consent records | Until consent is withdrawn + 1 year |
When retention periods expire, data is permanently deleted or anonymised so it can no longer be linked back to you.
Your Rights Over Your Data
Regardless of where you are located in Bangladesh, you have the following rights with respect to your personal data held by xx789:
- Access — request a copy of all data we hold about you.
- Correction — ask us to fix inaccurate or outdated details (for example, a changed mobile number).
- Deletion — request that we erase your data. Note that we may need to retain certain records for legal or financial compliance even after account closure.
- Restriction — ask us to pause processing while a dispute is being resolved.
- Withdrawal of consent — if you consented to marketing messages, you can withdraw at any time by contacting Live Chat.
- Data portability — receive your account data in a structured, machine-readable format.
To exercise any of these rights, contact our 24/7 Live Chat support. We aim to respond within 30 days.
Security Measures
xx789 applies technical and organisational controls to keep your data safe. These include TLS encryption on all data in transit, encrypted storage for sensitive fields such as passwords and document scans, access controls so that only authorised staff can view personal records, and regular security reviews of our platform infrastructure.
No system is completely immune to breaches. If we become aware of a material breach affecting your data, we will notify you through your registered mobile number or email within 72 hours of discovery and explain what steps we are taking.
Players Under 18
xx789 is strictly for adults. We do not knowingly collect data from anyone under 18 years of age. The KYC document check at first withdrawal is partly designed to confirm age. If we discover that an account was created by a minor, the account will be closed immediately and any funds returned to the original payment source after verification.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, new payment methods, updated game providers, or shifts in applicable rules. The "Last updated" date at the top of this page will always show when the latest version was published. For significant changes, we will send a notification to your registered mobile number before the changes take effect.
Continuing to use the xx789 platform after the effective date of an update means you accept the revised policy.
Get in Touch
If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, please use our 24/7 Live Chat from any page on xx789.onl. Our support team is available around the clock and will route your request to the appropriate team within one business day.
Response time commitment: Data access, correction, and deletion requests are acknowledged within 24 hours and completed within 30 calendar days. If we need more time, we will let you know the reason.