Xx67's Privacy Policy
Your Data, Our Responsibility

Xx67 (xx67.win) is a trusted online gaming and Sports Betting platform in Bangladesh. This Privacy Policy explains how xx67 collects, uses, and protects your personal information. It applies to the xx67 website, mobile app, and all related services.

By creating an account or using xx67's services, you are considered to have accepted this Privacy Policy. Please read it carefully before registering. If you have any objections, feel free to contact us.

Xx67 only collects information that is strictly necessary to provide our services. We never request excessive or irrelevant data. The categories of information we collect are listed below:

When you use the xx67 website or app, certain technical information is collected automatically, including your browser type, operating system, referral URL, and session duration. This information is not used to personally identify you.

Xx67 uses collected information only for specific, legitimate purposes. Your data will not be used for any other purpose without your consent.

• For account creation, verification, and management.
• To process deposits, withdrawals, and financial transactions.
• To complete KYC (Know Your Customer) verification.
• To provide customer support and assist with issue resolution.
• To send you relevant promotions and bonus offers (with your consent).
• To prevent fraud, money laundering, and other illegal activities.
• To comply with legal obligations.
• To improve platform performance and enhance the user experience.
• To promote responsible gaming and provide support to at-risk players.

Xx67 does not generally share your personal information with third parties. Sharing may occur only in the limited circumstances outlined below:

• Payment Processors: Limited data is shared with bKash, Nagad, Rocket, and other approved payment gateways to process deposits and withdrawals.
• Identity Verification Services: Required information may be shared with authorized identity verification agencies to complete KYC verification.
• Legal Authorities: Information is disclosed in compliance with court orders or lawful requests from government authorities.
• Anti-Fraud System: Limited data may be shared with authorized security providers for fraud prevention purposes.

Outside of the cases mentioned above, no information is shared with any other third parties. All partners with whom data is shared are bound by xx67's strict privacy standards.

Xx67's website and app use cookies and similar tracking technologies to enhance your browsing experience and improve platform performance.

• Essential Cookies: Used to maintain login sessions and ensure security. These cannot be disabled.
• Performance Cookies: To analyze which sections of the site are used most. This helps improve site speed and overall performance.
• Functionality Cookies: To remember your preferred language, time zone, and other settings.
• Analytics Cookies: Analyzing overall user behavior to improve the platform.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of certain platform features.

Xx67 uses industry-leading security technology to protect your information. Our security infrastructure is continuously updated and monitored.

• 256-bit SSL/TLS encryption — applied to all data transfers.
• Two-Factor Authentication (2FA) support.
• Automated detection and blocking of suspicious login attempts.
• Regular security audits and Penetration Testing.
• Multiple layers of physical and digital security at our data centers.
• 24/7 cybersecurity monitoring team.

Please note that no one can guarantee 100% security on the internet. You also have a role to play — use a strong password, keep 2FA enabled, and avoid logging in on public Wi-Fi.

Xx67 believes you have full ownership of your personal data. You may exercise the following rights at any time:

• Right to Know: You can find out what information we hold about you and how it is being used.
• Right to Rectification: You may request that any incorrect or outdated information be updated or corrected.
• Right to Erasure: You may request deletion of your data under certain circumstances.
• Right to Restrict Processing: In some cases, you may request that the use of your information be restricted.
• Right to Object: You may object to the use of your data for marketing purposes.
• Data Portability: You may request a copy of your personal information.

To exercise any of these rights, please contact our support team. We will respond to your request within 30 business days. Please note that some data may not be deletable due to legal obligations.

Xx67 retains your information only for as long as necessary. As a general rule, data is kept while your account is active and, after account closure, retained for a specified period as required by law.

Once the specified retention period ends, your data is securely and permanently deleted or fully anonymized so that you can no longer be identified in any way.

All xx67 services are intended for users aged 18 and above. We do not knowingly collect or store information from minors.

• Age verification is mandatory at registration.
• Age is verified as part of the KYC process.
• If a user is identified as a minor, their account will be closed immediately.
• Collected data is deleted immediately.

Xx67 may update this Privacy Policy from time to time. If any significant changes are made, we will notify you in advance by email or app notification.

• You will be notified at least 14 days before any changes take effect.
• The "Last Updated" date at the top of the page will be revised with each update.
• Previous versions will be kept in the archive.
• Continued use of the service after changes take effect will be considered acceptance of the updated policy.

For any questions, complaints, or requests regarding our Privacy Policy, please contact our Data Privacy Team. We typically respond within 24–48 hours.

Your privacy matters to us. Reach out directly with any concerns — we're always here to help.