xssokk Privacy Policy

xssokk collects personal information from you in the course of operating the platform. The categories of information we collect, and the circumstances under which we collect them, are set out below.

Information You Provide Directly

When you register an account, make a deposit, contact our support team, or participate in a promotion, you may provide us with the following information:

• Identity information: Full legal name, date of birth, nationality, and National ID (NID) or passport number submitted during account registration or KYC verification.
• Contact information: Email address, mobile phone number, and residential address (city, district, and country).
• Financial information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, and transaction reference numbers related to deposits and withdrawals.
• Account credentials: Your chosen username and a hashed (non-readable) representation of your password. xssokk never stores your password in plain text.
• Support communications: The content of any messages, emails, or live chat conversations you initiate with the xssokk support team, including your stated issue and any documents you attach.

Information Collected Automatically

When you access the xssokk platform, certain technical information is collected automatically by our systems:

xssokk uses the personal information we collect for the following purposes. We process your data only where we have a lawful basis for doing so — including your consent, our contractual obligations to you, our legal compliance requirements, and our legitimate business interests.

Account Management & Service Delivery

We use your registration information, contact details, and financial data to create and maintain your xssokk account, process your deposits and withdrawals, settle your bets and game outcomes, and deliver the full range of xssokk services including cricket betting, live casino, slots, and Fortune Bingo. Without this processing, we cannot provide the core platform services to you.

Identity Verification & Fraud Prevention

xssokk is committed to operating a safe and fair platform. We use your identity information, device data, IP address, and gameplay data to verify that you meet the age (18+) and geographic eligibility requirements, to detect and prevent fraud, money laundering, bonus abuse, and match-fixing, and to comply with anti-money laundering (AML) obligations. This processing is both a legal requirement and a legitimate business necessity.

Customer Support

When you contact the xssokk support team, we use your account information and the content of your communication to investigate and resolve your enquiry, improve the quality of our support operations, and maintain a record of interactions for quality assurance and dispute resolution purposes.

Responsible Gaming

xssokk uses your gameplay data — including session duration, bet frequency, deposit patterns, and self-imposed limits — to monitor for signs of problem gambling behaviour and to enforce any self-exclusion or deposit limit settings you have activated on your account. For more information, visit our Responsible Gaming page.

Platform Improvement & Analytics

We use anonymised and aggregated data about how players interact with the xssokk platform to identify technical issues, improve site performance, optimise game and product offerings, and better understand the preferences of our player community in Bangladesh. This analytics processing does not identify you personally.

Promotions & Marketing Communications

With your consent (which you may withdraw at any time), xssokk may send you promotional emails or SMS messages about new games, bonus offers, seasonal promotions, and platform updates. You can opt out of marketing communications at any time by contacting our support team at [email protected] or by using the unsubscribe link in any marketing email.

xssokk does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, xssokk shares relevant transaction details with our payment processing partners, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, Sonali Bank, City Bank, Islami Bank). These partners receive only the transaction data necessary to complete the payment and are bound by their own privacy and data security obligations.

Game Technology Providers

xssokk's casino games and sports betting markets are powered by technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In the course of delivering live casino and slot games, these providers may process certain gameplay data (such as bet amounts and game session identifiers) on xssokk's behalf. They are contractually prohibited from using this data for any purpose other than game delivery and technical support.

Legal & Regulatory Disclosure

xssokk may disclose your personal information to law enforcement agencies, regulatory authorities, or other government bodies where we are required to do so by applicable law, court order, or in connection with a legal investigation. In such cases, we will disclose only the minimum information required to satisfy the legal obligation.

Fraud Prevention & AML

xssokk may share identity and transaction information with fraud prevention agencies and financial intelligence units where we have a reasonable suspicion of fraudulent activity, money laundering, or other financial crime involving your account. This sharing is a legal obligation and cannot be waived by the account holder.

xssokk uses cookies and similar technologies (such as local storage and session storage) to operate the platform, maintain your login session, and gather anonymised analytics data. This section explains the types of cookies we use and how you can manage them.

Essential Cookies

These cookies are strictly necessary for the xssokk platform to function. They include your session authentication token (which keeps you logged in during your visit), security tokens (which protect against cross-site request forgery), and cookies that remember your language and display preferences. You cannot opt out of essential cookies without disabling access to the platform entirely.

Analytics Cookies

xssokk uses anonymised analytics cookies to understand how players navigate the platform — for example, which pages are most visited, how long players spend on each section, and where technical errors occur. This data is aggregated and does not identify individual players. It is used solely to improve the platform experience.

Fraud Prevention Cookies

Certain cookies are used specifically to support xssokk's fraud detection and responsible gaming monitoring systems. These cookies track device fingerprints and session behaviour patterns to identify potentially suspicious activity, such as multiple account creation attempts from the same device.

Managing Your Cookie Preferences

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in and using the xssokk platform. Disabling analytics cookies will not affect your ability to use the platform but will reduce our ability to identify and fix performance issues.

xssokk retains your personal data for as long as your account remains active and for a defined period thereafter, as required to meet our legal, regulatory, and contractual obligations.

Active Accounts

While your xssokk account is active, we retain all personal, financial, and gameplay data associated with your account. This data is necessary to provide you with uninterrupted access to the platform, process transactions, and respond to any account-related enquiries or disputes.

Closed or Suspended Accounts

Following the closure or suspension of your xssokk account — whether at your request or due to a breach of the Terms & Conditions — xssokk retains your personal and transactional data for a minimum period of 5 years from the date of account closure. This retention period is necessary to:

• Comply with anti-money laundering (AML) record-keeping requirements.
• Respond to regulatory enquiries or law enforcement requests.
• Resolve any outstanding disputes, chargebacks, or fraud investigations.
• Prevent the re-registration of self-excluded players.

Marketing Data

If you have opted in to marketing communications, we retain your contact preferences and marketing consent records until you withdraw your consent or for a maximum of 3 years from your last interaction with xssokk, whichever is sooner.

Data Storage Location

xssokk stores your personal data on secured servers. All data is processed and stored in compliance with applicable data protection standards. Data transfers between xssokk's systems and our payment and game technology partners are protected by encryption in transit.

xssokk takes the security of your personal information seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical Safeguards

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and xssokk's servers.
• Password hashing using industry-standard cryptographic algorithms — your password is never stored in readable form.
• Firewalls and intrusion detection systems monitoring xssokk's network infrastructure 24/7 for suspicious activity.
• Regular security patching of all server-side software and dependencies to address known vulnerabilities promptly.
• Two-factor authentication (2FA) available for player accounts to add an extra layer of login security.

Organisational Safeguards

• Access to player personal data is restricted on a strict need-to-know basis. Only authorised xssokk personnel whose role requires access to specific data categories are granted that access.
• All xssokk staff with access to personal data receive data protection training and are bound by confidentiality obligations.
• Third-party partners and service providers who process data on xssokk's behalf are subject to contractual data processing agreements that require them to maintain equivalent security standards.

Reporting a Security Concern

If you believe your xssokk account has been compromised, or if you discover a potential security vulnerability on the xssokk platform, please contact us immediately at [email protected]. We take all security reports seriously and will investigate promptly.

As a player on the xssokk platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your account details and a clear description of your request. We aim to respond to all privacy rights requests within 15 business days.

Right of Access

You have the right to request a copy of the personal data that xssokk holds about you. Upon verification of your identity, we will provide you with a summary of the categories of data we hold, the purposes for which it is processed, and any third parties to whom it has been disclosed.

Right to Rectification

If any of the personal information xssokk holds about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain account details (such as your email address or mobile number) directly through your account settings. For changes to identity documents or date of birth, please contact our support team.

Right to Erasure

You may request that xssokk delete your personal data. We will action such requests where we are not legally required to retain the data in question. Please note that we are required by AML regulations to retain transaction and identity records for a minimum of 5 years following account closure, and deletion requests cannot override this legal obligation.

Right to Restrict Processing

In certain circumstances, you may request that xssokk restricts the processing of your personal data — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing and we are considering your objection.

Right to Object

You have the right to object to xssokk processing your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests. Where you object to marketing, we will cease processing your data for that purpose immediately.

Right to Data Portability

Where data is processed based on your consent or on the performance of a contract with you, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

xssokk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we use your personal data, xssokk will notify registered players via email to their registered address or via a notice within the xssokk platform, giving reasonable advance notice before the changes take effect.

Your continued use of the xssokk platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any changes to this Policy, you should cease using the platform and contact our support team to discuss account closure options.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or xssokk's data practices, please do not hesitate to reach out to our support team. We are available 24/7 to assist players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond.

Contact us at: [email protected]