Scope and purpose
Xhjili respects the privacy of users and provides this Privacy Policy to explain how Personal Information is collected, used, stored and disclosed in relation to our online gaming services. It applies to all users who access or use our platforms, including players and site visitors, and governs our processing of Personal Information in connection with the services we offer.
Information We Collect
We collect Personal Information that you provide to us and information generated by your use of our services. The categories include:
- Identity data such as name, date of birth and government-issued identifiers where required by law.
- Contact data such as email address, postal address and telephone number.
- Account data including username, login history and authentication methods.
- Financial and transaction data including payment details, billing address and transaction history.
- Usage and device data such as IP address, device identifiers, browser type and pages you access.
- Marketing preferences and consent status.
How We Collect and Process Personal Information
We collect Personal Information directly from you through account creation and transactions, automatically through your use of our services, and from service providers acting on our behalf. We process Personal Information for the purposes described in this policy and only to the extent permitted by law.
Purposes for Using Personal Information
- To provide, operate and maintain our gaming services and perform account management.
- To process payments and settlements with payment service providers and financial institutions.
- To communicate with you about your account, transactions, security matters and service updates.
- To verify identity, detect and prevent fraud, and safeguard the integrity of our services.
- To comply with legal obligations, resolve disputes and enforce our Terms and Conditions.
- To conduct research and analysis, including anonymized data, to improve products and security.
- To offer information about products and services where you have consented to receive marketing communications.
Disclosures and Sharing of Personal Information
- We may disclose Personal Information to service providers under written agreements that require them to protect your data and process it only on our behalf.
- We may disclose Personal Information to regulators or authorities as required by law or legal process.
- We may share information in cases of suspected fraud, policy violations or to protect our rights, customers, or the public.
- We may anonymize or aggregate Personal Information for research or statistical purposes without identifying any individual.
- With your consent, we may share Personal Information with carefully selected partners for promotional purposes.
Legal Bases for Processing
Where applicable, we rely on contract performance, legitimate interests in providing and improving our services, and consent for processing activities such as marketing. We will inform you of the legal basis for specific processing at or before collection where required by law.
Access, Correction and Deletion of Personal Information
You may request access to your Personal Information, request corrections or seek deletion, subject to applicable legal and contractual obligations. You may also request that we restrict processing, or obtain your Personal Information in a portable format where feasible. To stop marketing communications, you may opt out via your account settings or by contacting us. We may retain data as required by law even after account termination.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate our platforms, remember preferences and analyze usage. We categorize cookies as strictly necessary, performance/analytics and functionality. You may manage cookie preferences through your browser settings; some features may not operate correctly if you disable cookies. We may also employ local storage and similar technologies to maintain sessions and remember preferences.
Electronic Payments and Third-Party Processors
Real-money play requires transferring funds to and from Xhjili through third-party payment processors. Personal Information necessary to process transactions may be shared with these processors and, where required, transferred outside your country. We require processors to protect your information and to process transactions only on our behalf.
Security of Personal Information
We implement industry-standard security measures to protect Personal Information, including encryption of data at rest and in transit, restricted access controls, and ongoing monitoring. Our networks are protected by firewall technologies and security procedures that govern staff and contractor access to Personal Information.
International Transfers
Personal Information may be stored and processed in countries outside your jurisdiction. We require safeguards for cross-border transfers and, where applicable, rely on contractual protections and other legally recognized mechanisms to protect your data. Our service providers are contractually obligated to uphold privacy standards regardless of location.
Data Retention
We retain Personal Information for as long as necessary to fulfill the purposes described in this policy, including maintaining records for the duration of your account and for a period of up to seven (7) years for financial or regulatory purposes. After the retention period or upon account deletion, we will securely delete or anonymize Personal Information unless retention is required by law.
Minors
Our services are not directed at individuals under eighteen (18) years of age. We do not knowingly collect Personal Information from minors. If we become aware that a minor has provided Personal Information, we will remove it promptly and, where applicable, terminate the related account in accordance with applicable law.
Third-Party Links and Services
Our platforms may integrate with or link to services operated by third parties. These third parties have their own privacy policies. We do not control their privacy practices and are not responsible for their handling of Personal Information. Review their policies before providing data to them.
Policy Changes
We may update this Privacy Policy from time to time. We will post the revised policy on our platforms and indicate the effective date. If changes are material, we will provide targeted notice as required by law. Continued use of our services after the effective date constitutes acceptance of the updated policy.
Contact and Data Protection Officer
If you have questions about this Policy or wish to exercise your rights, contact Xhjili’s Data Protection Officer at privacy@Xhjili or use the privacy contact options available on our platforms. We will respond in accordance with applicable data protection laws and time limits.