Reference

Check How xstar Handles Your Privacy

We collect only what we need to run your account and process payments through bKash, Nagad and Rocket. This policy explains exactly what data we hold, why we hold it, and how you can request changes or deletion.

Data Collection TransparencybKash & Nagad Payment RecordsAccount Deletion RightsCookie PreferencesWallet Verification Data
xstar Check How xstar Handles Your Privacy
DATA HANDLING PRACTICES

Explore How We Protect What You Share

We built xstar around mobile-wallet payments, which means your financial data passes through familiar channels like bKash, Nagad and Rocket. Below is a breakdown of how we handle the different categories of information we collect, store and eventually remove from our systems.

Encrypted Storage

All personal and payment data sits on servers protected by SSL encryption. Whether you deposit via bKash or withdraw to Rocket, the transaction details are encrypted in transit and at rest.

Cookie Management

We use session cookies to keep you logged in and preference cookies to remember your lobby layout. You can clear these from your browser settings or block non-essential cookies entirely.

Account Security

Your login is protected by a PIN or OTP sent to the mobile number you registered. If you notice unfamiliar activity, change your password from the account settings page immediately.

Data Retention

We keep transaction records and account details only as long as required by applicable local obligations or for the operation of your account. Once closed, data is queued for secure deletion.

Third-Party Sharing

Game providers like PG Soft or Evolution receive only session tokens needed to load their tables or slots. We do not pass your name, wallet number or contact details to any game studio.

Requesting Changes

You can ask us to correct inaccurate data, export a copy of everything we hold, or delete your account entirely. Submit the request via live chat or email and we will verify ownership first.

PRIVACY CONTACT PATHS

Open a Privacy Request With Our Team

If you want to review, correct or delete the data we hold about your account, reach us through one of these channels. Our team handles privacy queries with the same speed we process your bKash or Nagad deposits. We aim to acknowledge every request within a reasonable timeframe and keep you updated until it is resolved.

Team online

Live Chat

Tap the chat icon on any page to connect directly with a support agent who can locate your data records and walk you through the steps for a privacy request or account data export.

Email Support

Send your privacy query to our support email address. Include your registered account name so we can verify ownership before disclosing or modifying any stored information tied to your profile.

Account Settings

Log in and head to your account settings panel where you can update personal details, change your linked bKash or Nagad wallet, or submit a formal data deletion request yourself.

Switch to Answers About Your Data Rights

These are the questions we hear most from account holders in Bangladesh about how xstar collects, uses and protects personal information. If your question is not covered here, open a live chat session for a direct answer.

We collect your name, date of birth, mobile number and the wallet details you use for bKash, Nagad or Rocket deposits. This is the minimum needed to verify your identity and process payments back to the correct wallet.

Only session-level tokens. Providers like Pragmatic Play or Evolution receive what they need to load a game round. Your name, wallet number and contact details are never passed to any studio or third party.

Open a live chat or email our support team with your registered account name. After verifying ownership through an OTP or security question, we will prepare a data export and send it to your registered email.

Yes. Submit a deletion request via account settings or through support. Once verified, we close the account and queue all personal and transaction data for permanent removal after any required retention period.

Transaction records are encrypted both in transit and at rest using SSL. We store only the reference ID, amount and timestamp. Your full wallet PIN or bKash credentials are never stored on our servers.

We use session cookies for login persistence and preference cookies for lobby layout. You can block non-essential cookies through your browser settings at any time without losing basic site access.

Retention depends on local regulatory requirements applicable to your region. Once any mandatory retention window ends, your data is securely deleted. We do not keep closed-account data indefinitely.

We send promotional messages only if you opted in during registration. You can revoke this from account settings or by contacting support. Revoking marketing consent does not affect your ability to use the platform.

We notify affected account holders through their registered email and mobile number as soon as we confirm any unauthorised access. We also outline what data was involved and what steps you should take.

Yes. Data handling and retention practices vary depending on your local jurisdiction and eligible regions. We comply with applicable requirements and clearly note where regional rules override our standard policy.