xx87 Privacy Policy
At xx87, we treat your personal data with the same seriousness that we treat your security and fairness on the platform. This Privacy Policy explains exactly what information we collect when you use xx87.club, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own data. Please read this document carefully before using the platform.
End-to-End Encryption
All data transmitted between your device and xx87.club is protected by SSL/TLS encryption. Personal and financial information is stored in encrypted form and is never transmitted in plain text.
No Data Selling
xx87 does not sell, rent, or trade your personal data to any third-party advertiser, data broker, or marketing network. Your information is used solely to operate and improve the xx87 platform and to fulfil legal obligations.
Purpose Limitation
We collect only the minimum data necessary to provide our services. Each category of data collected has a specific, documented purpose. We do not collect data speculatively or in excess of what the platform genuinely requires to function.
Your Data Rights
You have the right to access, correct, and request deletion of your personal data held by xx87. Submit a request at any time by contacting the support team, and we will respond within 10 business days of receipt.
Secure Payment Data
Payment transaction details processed through bKash, Nagad, Rocket, and Upay are handled directly by those providers under their own security standards. xx87 stores only the transaction reference and amount — never your full payment credentials.
Transparent Cookie Use
xx87 uses cookies strictly for session management, fraud detection, and platform performance. We do not use third-party advertising cookies or behavioural tracking pixels that profile you across other websites.
1 Information We Collect
When you use xx87, we collect personal information in order to provide you with a secure, personalised, and fully functional gaming experience. The categories of information we collect are described below:
1.1 Registration Data
When you create an xx87 account, we collect the following information that you provide directly:
- Full legal name
- Date of birth (for age verification purposes)
- Email address
- Mobile phone number
- Preferred username and encrypted password
- Residential city or district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
1.2 Identity Verification Data
To comply with anti-money-laundering (AML) requirements and to verify that players meet the 18+ age eligibility threshold, xx87 may request and collect copies of identity documents, including:
- National Identity Card (NID)
- Passport (biographical data page)
- Birth certificate (for age-verification purposes only)
- Proof of residential address (utility bill, bank statement)
1.3 Transaction Data
We record financial transaction information associated with deposits and withdrawals, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction reference numbers, transaction timestamps, and amounts in Bangladeshi Taka (৳). We do not store full payment account credentials such as bKash PINs, card CVV numbers, or bank account passwords.
1.4 Usage and Activity Data
We automatically collect technical and behavioural data when you use the xx87 platform, including:
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Pages visited, games played, bets placed, and session duration
- Login timestamps and frequency of platform access
- Referral source (e.g., the URL from which you arrived at xx87.club)
1.5 Support Communications
If you contact the xx87 support team via live chat or email, we retain records of those communications, including the content of messages, the date and time of contact, and the resolution outcome. These records are used to improve service quality and to maintain a history of account-related issues.
2 How We Use Your Data
xx87 processes personal data only for specific, legitimate purposes. The table below outlines the principal purposes for which your data is used and the legal basis for each:
| Purpose | Data Category Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contractual necessity |
| Age and identity verification | Identity documents, date of birth | Legal obligation |
| Processing deposits and withdrawals | Transaction data, payment method details | Contractual necessity |
| Fraud detection and prevention | Usage data, IP address, transaction data | Legitimate interest |
| Anti-money-laundering compliance | Identity documents, transaction data | Legal obligation |
| Customer support | Support communications, account data | Contractual necessity |
| Responsible gaming monitoring | Usage data, betting activity, session data | Legitimate interest / legal obligation |
| Platform performance and analytics | Aggregated, anonymised usage data | Legitimate interest |
| Service communications (account notices) | Email address, phone number | Contractual necessity |
| Promotional communications (opt-in only) | Email address, betting preferences | Consent |
xx87 does not use your personal data for automated profiling that produces legal or similarly significant effects without your explicit consent. Responsible gaming alerts generated by our monitoring systems are advisory in nature and are reviewed by a human member of the support team before any account action is taken.
3 Data Sharing & Disclosure
xx87 does not sell, rent, or commercially transfer your personal data to third parties. We share personal data only in the following limited and controlled circumstances:
3.1 Game and Platform Providers
To enable gameplay, xx87 shares a minimal set of session data (such as a player identifier and session token) with the certified game studios and platform providers that supply the games available on xx87.club, including providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers receive only the data technically necessary to initiate and record a game session. They are contractually prohibited from using that data for any independent purpose.
3.2 Payment Processing Partners
Deposits and withdrawals are processed via third-party payment service providers including bKash, Nagad, Rocket, Upay, and card payment gateways. These providers receive the transaction data necessary to complete the payment. Each provider operates under its own privacy policy and is responsible for the security of payment credentials within its own infrastructure.
3.3 Identity Verification Services
Where required for Know Your Customer (KYC) compliance, xx87 may share identity document data with third-party identity verification services. These services are bound by strict data processing agreements and may not retain or use the data for any purpose other than the verification requested by xx87.
3.4 Legal and Regulatory Disclosure
xx87 may disclose personal data to law enforcement agencies, financial intelligence units, or other government authorities where required to do so by a valid court order, legal process, or applicable regulatory requirement. We will notify the affected account holder of any such disclosure where we are legally permitted to do so.
3.5 Business Continuity
In the event of a corporate restructuring, merger, or acquisition, player data may be transferred to a successor entity as part of the business assets, subject to equivalent privacy protections being maintained by the successor.
4 Cookies & Tracking Technologies
xx87.club uses cookies and similar browser-based storage mechanisms to ensure the platform operates correctly, to protect your session security, and to gather aggregate performance data. The following types of cookies are in use:
- Essential session cookies: These are strictly necessary to maintain your login state across pages and to prevent your session from expiring during active gameplay. Without these cookies, the platform cannot function. They are deleted automatically when you close your browser.
- Security cookies: Used to detect and prevent fraudulent access attempts, including CSRF (cross-site request forgery) protection tokens and rate-limiting identifiers. These cookies do not contain personally identifiable information.
- Preference cookies: Store non-sensitive account preferences such as display language and notification settings so that your choices persist between sessions.
- Analytics cookies: xx87 uses first-party analytics to understand aggregate platform usage patterns — for example, which game categories are most popular or which pages have the highest exit rates. This data is anonymised and is never linked back to individual player accounts.
xx87 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You will not be tracked across websites outside of xx87.club as a result of visiting our platform.
Most web browsers allow you to control cookie behaviour through the browser settings menu. Blocking essential cookies will prevent you from logging in to xx87 and using the platform. Blocking non-essential cookies (analytics, preference) will not affect core platform functionality.
5 Data Security
xx87 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:
- SSL/TLS encryption: All data in transit between your browser and our servers is encrypted using industry-standard TLS 1.2 or higher. The xx87.club domain operates exclusively over HTTPS.
- Encrypted data storage: Sensitive personal data, including identity document records and transaction histories, is stored in encrypted databases. Encryption keys are managed separately from the encrypted data.
- Password security: Account passwords are stored as salted cryptographic hashes. xx87 never stores passwords in plain text and cannot retrieve your password — only reset it.
- Access controls: Access to personal data within xx87's internal systems is restricted to staff members who have a documented operational need to view that data. All internal access is logged and subject to periodic audit.
- Intrusion detection: Automated monitoring systems are in place to detect and alert on unusual access patterns, brute-force login attempts, and other indicators of potential security incidents.
- Vulnerability management: The xx87 platform and infrastructure are subject to periodic security assessments. Identified vulnerabilities are prioritised and remediated in accordance with their severity rating.
Despite the robust measures described above, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a risk to your rights, xx87 will notify affected players and relevant authorities in a timely manner, consistent with applicable data protection obligations.
6 Data Retention
xx87 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:
- Active account data: Retained for the duration of your account relationship with xx87, plus a period of up to 5 years following permanent account closure, to comply with AML record-keeping requirements.
- Identity verification documents: Retained for a minimum of 5 years from the date of last account activity, in compliance with financial crime prevention regulations applicable in the jurisdiction in which xx87 operates.
- Transaction records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction.
- Support communication records: Retained for up to 3 years from the date of the most recent interaction, after which they are permanently deleted unless the communication relates to an unresolved dispute or legal proceeding.
- Session and usage logs: Anonymised aggregate analytics data may be retained indefinitely for platform improvement purposes. Individually identifiable session logs are deleted after 12 months.
- Marketing consent records: Records of your marketing opt-in or opt-out preference are retained for as long as your account is active and for 12 months following account closure, to demonstrate compliance with consent obligations.
When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Requests for early deletion are handled under the Your Privacy Rights section below.
7 Your Privacy Rights
As a player on the xx87 platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the xx87 support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and aim to complete it within 10 business days.
| Right | What It Means |
|---|---|
| Right of Access | You may request a copy of all personal data that xx87 holds about you, along with information about how it is used and with whom it has been shared. |
| Right to Rectification | If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. |
| Right to Erasure | You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations under AML and financial regulations. |
| Right to Restriction | You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data while we verify it. |
| Right to Data Portability | You may request a copy of your personal data in a structured, commonly used, machine-readable format to transfer to another service provider, where technically feasible. |
| Right to Object | You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interest, subject to our ability to demonstrate compelling grounds. |
| Right to Withdraw Consent | Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. |
Please note that certain rights may be limited where xx87 is required to retain or process data to comply with legal obligations — particularly AML and financial crime prevention requirements. In such cases, we will inform you of the limitation and its basis when responding to your request.
8 Policy Updates & Contact
xx87 reviews this Privacy Policy regularly and reserves the right to update it to reflect changes in our data practices, applicable legal requirements, or platform functionality. The effective date at the top of this document will be updated whenever a revision is published.
Where a proposed change materially affects how we use your personal data or reduces your rights under this policy, we will provide advance notice via email to your registered address at least 14 days before the change takes effect. Your continued use of the xx87 platform after the effective date of any revision constitutes your acceptance of the updated policy.
We recommend bookmarking this page and reviewing it periodically, particularly following any email notification of a policy update.
Questions and data requests: If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how your personal data is being handled, please contact the xx87 privacy team by email:
xx87 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you retain the right to escalate the matter to the appropriate data protection authority in your jurisdiction.
Your Privacy Is Our Priority
Now that you understand how xx87 handles your data, you can explore the platform with confidence. Browse our games, check the FAQ for common questions, or visit the xx87 Casino for a full overview of what we offer. 18+ only. Please play responsibly.