Introduction
This privacy policy explains how Xhjili collects, uses, discloses, and protects personal data in connection with the Xhjili online gambling platform and related services. By using our Services, you acknowledge and consent to the practices described herein.
Information We Collect
We collect data to operate the Services, verify identity, process payments, and comply with legal obligations. The following categories cover the data we collect:
- Personal identifiers: name, address, email, date of birth, phone number, username, and identity documents as required for age and identity verification.
- Financial information and transaction data: payment method details, card numbers (tokenized or encrypted), bank details, deposits, withdrawals, bet history, wagers, and timestamps.
- Usage and device data: IP address, device type, browser and operating system, unique device identifiers, approximate geolocation, and event logs.
- Communications data: messages with customer support and feedback provided through the Service.
- Marketing preferences and consent records: opt-in status for promotional communications and offers.
How We Use Your Information
We use collected data to operate the Service and meet legal obligations. Specific purposes include:
- To provide and operate the Services: process wagers, settle results, manage accounts, and handle payments.
- Identity verification and security: perform age checks, fraud prevention, monitor for suspicious activity, and enforce terms.
- Customer support and communications: respond to inquiries, notify about account status, updates, and regulatory requirements.
- Analytics and personalization: analyze usage patterns to improve features and tailor experiences.
- Compliance and risk management: comply with legal and regulatory requirements, tax reporting, and anti-money-laundering controls.
- Marketing and promotions: with consent or where permitted by applicable law, provide offers; allow opt-out at any time.
Legal Bases for Processing
- Contractual necessity: processing required to provide the Services you request and to administer your account.
- Legitimate interests: security, fraud prevention, system integrity, and service improvement.
- Consent: processing activities such as marketing communications when you have provided explicit consent.
- Legal obligation: processing to comply with applicable laws and regulatory reporting requirements.
Sharing of Personal Data
We disclose personal data only as described here or as required by law. Categories of recipients include:
- Service providers: entities that perform payments, hosting, customer support, identity verification, analytics, or fraud prevention on our behalf.
- Regulators and law enforcement: when required by applicable law or regulatory requests.
- Affiliates and business partners: for operational purposes or with your consent for promotional activities.
- Corporate transactions: in connection with mergers, acquisitions, or asset sales, subject to confidentiality and data protection obligations.
- Cross-border transfers: personal data may be transferred to jurisdictions outside your residence; safeguards such as contractual clauses are applied where required by law.
Data Security
We maintain technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. Key controls include:
- Encryption and secure transmission: TLS for data in transit; encryption at rest where feasible.
- Access control and authentication: role-based access, least privilege, and multi-factor authentication for staff.
- Monitoring and breach response: continuous monitoring, vulnerability management, and documented incident response procedures.
- Data minimization and retention: limit collection to what is necessary and retain data only as long as required by service needs and law.
Data Retention
Personal data is retained for the period necessary to provide the Services and to satisfy legal, regulatory, and business requirements. Typical retention intervals include:
- Account and wagering data: retained for the duration of the account and for a period after closure to resolve disputes and comply with regulatory obligations (commonly up to seven years).
- Payment and financial records: retained to meet financial and regulatory reporting requirements for the applicable retention period.
- Marketing data: retained until consent is withdrawn or the data is no longer needed for the stated purposes.
Your Rights
You may exercise the following rights concerning your personal data, subject to applicable law:
- Access and obtain a copy of your data.
- Rectify inaccurate or incomplete data.
- Request erasure of data where permitted by law.
- Restrict or object to processing in permitted circumstances.
- Data portability: receive data in a structured, commonly used format and transmit to another controller where feasible.
- Withdraw consent for processing activities based on consent.
To exercise these rights, log in to your account where available or contact our privacy team using the contact details below. Some rights may be limited by legal obligations or the ongoing provision of Services.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Service and analyze usage. Categories include:
- Essential cookies: necessary to provide the Service, enable account access, and ensure security.
- Performance cookies: collect anonymized data to improve features.
- Analytics cookies: measure usage and help optimize the Service.
- Marketing cookies: track engagement for promotions where permitted by law; consent is required for non-essential cookies in some jurisdictions.
Managing cookies: you may adjust cookie settings in the Service, or configure browser settings to reject cookies. Some cookies may be strictly necessary and cannot be disabled. Cookies typically expire within 24 months unless otherwise stated.
Age and Eligibility
The Service is intended for individuals who are at least 18 years old or the minimum age required in your jurisdiction. We perform age verification and may suspend or terminate accounts that fail verification or are used by underage individuals. By using the Service, you agree to comply with applicable age requirements and to prevent access by minors.
Changes to This Policy
We may update this privacy policy from time to time. When material changes occur, we will publish the updated policy on the Service and adjust the last updated date. Continued use after changes constitutes acceptance of the revised policy. If required by law, we will provide additional notice.
Contact Us
Questions, concerns, or requests regarding your personal data may be directed to Xhjili’s privacy team.
Email: privacy@Xhjili