xx87 Privacy Policy — Your Data, Our Responsibility

In this Privacy Policy, the following terms carry the meanings set out below:

• "xx87" / "we" / "us" / "our" refers to xx87.im and its operators, including all services and features accessible through the website.
• "Member" / "User" / "you" / "your" refers to any natural person who accesses, browses, registers on, or uses the xx87 platform in any capacity.
• "Personal Data" refers to any information that directly or indirectly identifies you as a natural person, including your name, email address, phone number, payment details, device identifiers, and IP address.
• "Processing" refers to any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, modification, and deletion.
• "KYC" refers to the Know Your Customer identity verification process conducted by xx87 prior to approving withdrawals or investigating account issues.
• "Third Party" refers to any natural or legal person, public authority, agency, or body other than the Member and xx87.
• "Platform" refers to the xx87.im website and all products, services, and features accessible through it.

xx87 collects the following categories of Personal Data in the course of providing its services:

xx87 collects Personal Data through the following methods:

• Direct interactions: Data you voluntarily provide when creating an Account, completing the KYC process, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated technologies: Data collected automatically when you access xx87.im, including through cookies, server logs, pixel tags, and similar tracking technologies. This data includes Technical Data and Usage Data as described in Section 02.
• Third-party sources: Data received from payment service providers (such as bKash, Nagad, Rocket, and Upay) in connection with transaction processing; data from identity verification services in connection with KYC checks; and data from fraud prevention and anti-money-laundering screening services.

Where xx87 obtains Personal Data from third-party sources, we will inform you of this at the time we first communicate with you following receipt of that data, unless doing so is not practicable or would be contrary to applicable law or a legitimate law enforcement purpose.

xx87 uses the Personal Data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your xx87 Member Account, including verifying your identity, managing your balance, and processing your bets and casino game results.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; reconciling financial records; and investigating disputed transactions.
• KYC and compliance: Verifying your identity in connection with withdrawal requests; screening for politically exposed persons and sanctions list matches; and fulfilling anti-money-laundering obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, multi-accounting, and other security threats. This includes automated screening of login events, betting patterns, and financial transactions.
• Customer support: Responding to your support enquiries, resolving disputes, and improving the quality of our customer service operations.
• Responsible gaming: Monitoring your account activity for signs of problem gambling; administering self-exclusion requests and deposit limit changes; and providing you with responsible gaming information when appropriate.
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and content of the xx87 Platform.
• Marketing communications: Sending you relevant promotional offers, bonus notifications, and platform news, subject to your communication preferences. You may opt out of marketing communications at any time by contacting support.
• Legal compliance: Complying with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement or regulatory authorities.

xx87 processes your Personal Data on the following legal bases, depending on the specific purpose:

• Performance of a contract: Processing that is necessary to perform our obligations under the xx87 Terms and Conditions, including account management, transaction processing, and game result settlement.
• Legal obligation: Processing that is required by applicable law or regulation, including KYC verification, anti-money-laundering screening, and cooperation with law enforcement requests.
• Legitimate interests: Processing carried out for purposes that are in our legitimate business interests (and which do not override your fundamental rights), including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring.
• Consent: Where we rely on consent as the legal basis for processing (for example, for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where xx87 relies on legitimate interests as a legal basis, we conduct an assessment to ensure that our interests do not override your rights and freedoms, taking into account the nature of the data, the context of processing, and any safeguards we have in place.

xx87 does not sell your Personal Data. We share your Personal Data only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: We share transaction-relevant data (such as the amount and reference) with bKash, Nagad, Rocket, Upay, and other payment processors in order to execute deposit and withdrawal requests.
• Identity verification services: We share identity documents and related data with specialist KYC and liveness-check providers to fulfil our verification obligations.
• Fraud and AML screening services: We share relevant account and transaction data with fraud detection platforms and sanctions screening providers.
• Game content providers: Where required for the correct operation of third-party casino games (such as those provided by Pragmatic Play, Evolution Gaming, Spribe, or Ezugi), we pass a session token and your Member ID to the relevant provider. No financial data is shared with game providers.
• Legal and regulatory authorities: We may disclose Personal Data to courts, law enforcement agencies, regulatory bodies, or other public authorities where we are required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of xx87, our Members, or others.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of xx87's assets, Member data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom xx87 shares Personal Data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection standards. xx87 does not permit third parties to use your Personal Data for their own marketing purposes.

xx87 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and gather usage analytics. The following types of cookies may be set when you visit xx87.im:

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of xx87.im, including your ability to log in and access account features.

xx87 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption in transit: All data exchanged between your browser and xx87.im is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Encryption at rest: Sensitive data stored in our databases, including identity documents and financial records, is encrypted using AES-256 or equivalent standards.
• Password security: Account passwords are never stored in plain text. We use a strong one-way cryptographic hashing algorithm with a unique salt per account.
• Access controls: Access to systems holding Personal Data is restricted to authorised personnel on a strict need-to-know basis. All staff access is logged and regularly audited.
• Infrastructure monitoring: Our servers are monitored 24/7 for intrusion attempts, anomalous access patterns, and potential data breaches.
• Penetration testing: xx87 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.

While xx87 takes all reasonable steps to protect your Personal Data, no security system is impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, xx87 will notify affected Members promptly and take all necessary remediation steps.

xx87 retains your Personal Data only for as long as it is necessary for the purposes set out in this Privacy Policy, or for as long as we are required to do so by applicable legal or regulatory obligations. The following general retention periods apply:

When a retention period expires, xx87 securely deletes or anonymises the relevant data in accordance with our internal data lifecycle procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

As a Member of xx87, you have the following rights in relation to your Personal Data. These rights may be subject to certain limitations where permitted by applicable law:

• Right of access: You may request a copy of the Personal Data that xx87 holds about you, together with information about how it is being processed.
• Right to rectification: You may request that we correct any inaccurate or incomplete Personal Data we hold about you. You can update most account information directly through your Account settings.
• Right to erasure: You may request that we delete your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and consent was the sole legal basis), or where you have objected to processing based on legitimate interests. This right is not absolute and may be limited by legal retention obligations.
• Right to restriction of processing: You may request that we restrict processing of your Personal Data in certain circumstances, for example while a dispute about the accuracy of the data is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your Personal Data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests at any time, including for direct marketing purposes. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to all data rights requests within 30 days of receipt. We may ask you to verify your identity before processing any such request.

The xx87 Platform is strictly intended for adults aged 21 years and older. xx87 does not knowingly collect Personal Data from any person under the age of 21. If we become aware that a Member Account has been registered by a person under the age of 21, we will immediately suspend that Account, delete all associated Personal Data, and void any associated winnings.

If you are a parent or guardian and believe that a minor has registered on xx87.im, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

xx87 operates primarily for Members based in Bangladesh. However, certain third-party service providers used by xx87 — including payment processors, KYC providers, and infrastructure partners — may process Personal Data in jurisdictions outside Bangladesh.

Where Personal Data is transferred to a third country, xx87 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Contractual clauses that require the recipient to protect Personal Data to the same standard as xx87.
• Transfers only to countries or organisations that have demonstrated an adequate level of data protection through independent certification, contractual commitment, or regulatory approval.

If you would like further information about the specific safeguards applied to any cross-border transfer of your Personal Data, please contact our support team at [email protected].

The xx87 Platform may contain references to third-party services, such as payment providers (bKash, Nagad, Rocket, Upay) and game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others). Where interactions with these services require you to visit an external website or application, please note that:

• xx87 is not responsible for the privacy practices or content of any third-party website or application.
• This Privacy Policy applies solely to data processed by xx87 in connection with the xx87 Platform. It does not apply to data processed by third parties on their own platforms.
• We encourage you to review the privacy policies of any third-party service providers with whom you interact in connection with your xx87 account.

xx87 reserves the right to update or amend this Privacy Policy at any time. The current version of this Policy, together with its effective date, is always available at xx87.im/privacy-policy.

Where we make material changes to this Policy — for example, changes that affect the categories of data we collect, the purposes for which we use it, or the rights available to you — we will notify registered Members by email at the address associated with their Account, and we will display a prominent notice on xx87.im, at least 14 days before the changes take effect.

Your continued use of the xx87 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with any changes, you may request closure of your Account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way xx87 handles your Personal Data, please contact our support team using the details below:

• Email: [email protected]
• Response time: We aim to respond to all privacy-related enquiries within 3 business days, and to all formal data rights requests within 30 days.
• Language: Our support team can handle enquiries submitted in English.

When contacting us about a data rights request, please include your registered email address and a brief description of your request so that we can locate your account and respond efficiently. We may ask you to verify your identity before processing any request that involves access to or deletion of Personal Data.