Privacy Policy
Last updated: 2026-09-14.
Xhjili is the data controller for Personal Information collected in connection with its online gambling services. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you have to control your data. It applies to all users of Xhjili platforms and related services unless otherwise stated.
Scope and Controller
This Policy covers Personal Information that identifies or can reasonably be used to identify an individual who interacts with Xhjili, including customers, applicants, and event participants. Xhjili is responsible for the processing of your Personal Information as described herein. Questions about this Policy may be directed to the Privacy Team via the support channels within your Xhjili account.
Information We Collect
- Identity and authentication data: name, date of birth, government-issued identification where required for verification, username, and password security data.
- Contact information: email address, postal address, telephone number.
- Account and financial data: payment method, card or wallet details (tokenized where applicable), transaction history, deposits and withdrawals, and related security information.
- Usage and device data: IP address, device identifiers, browser type and language, login times, and activity logs within the platform.
- KYC and compliance data: documents and information collected to verify identity, age, and source of funds as required by law and regulation.
- Marketing preferences: selections or submissions indicating consent or opting out of marketing communications.
How We Collect Information
We collect Personal Information directly from you when you register, fund your account, place bets, or communicate with us. We collect data automatically through your use of our platforms, including cookies and similar technologies, and we obtain data from service providers who perform identity verification, payment processing, fraud prevention, and analytics on our behalf. We may also receive information from regulators or other authorities as required by law.
Purposes and Legal Bases for Processing
We process Personal Information for the purposes described below and rely on the corresponding legal bases where applicable.
- Provide and administer services: to create and manage your account, process bets and transactions, and deliver customer support. Legal basis: Performance of a contract with you.
- Identity verification and anti‑fraud: to verify your identity, assess risk, and prevent money laundering or other unlawful activity. Legal basis: Legitimate interests and compliance with legal obligations.
- Safety and compliance: to monitor for suspicious activity, enforce terms and conditions, and comply with gambling, financial, and regulatory requirements. Legal basis: Legal obligation and legitimate interests.
- Communication and service improvements: to respond to inquiries, provide updates, and tailor the user experience. Legal basis: Legitimate interests and, where required, consent.
- Marketing (where permitted): to offer products, promotions, and events that may be of interest. Legal basis: Consent or legitimate interests, as applicable; provide opt‑out mechanisms.
- Analytics and research: to analyze usage trends, improve products, and develop new services. Legal basis: Legitimate interests and anonymization where feasible.
- Legal and dispute resolution: to establish, exercise, or defend legal claims and to resolve disputes. Legal basis: Legal obligation and legitimate interests.
Disclosure of Personal Information
We may disclose Personal Information to:
- Service providers: processors that perform payment processing, identity verification, hosting, customer support, marketing assistance, and analytics on our behalf, under written contractual safeguards.
- Affiliates and business partners: when necessary to provide services or conduct joint programs, subject to appropriate safeguards.
- Regulators and law enforcement: when required by applicable law, regulation, or legal process.
- Protection of rights or safety: to enforce our terms, protect users, or prevent fraud or other illegal activity.
Where data is disclosed to third parties, we require those recipients to protect the information and process it only for the purposes we specify. We may transfer data across borders; when this occurs, we apply safeguards to protect your information in accordance with this Policy and applicable law.
Direct Marketing and Your Choices
From time to time we may use Personal Information to inform you about products, services, or events that may be of interest. You may opt out of marketing communications at any time through your account privacy settings or by contacting our support team. Opting out will not affect transactional communications essential to your use of the service.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our services, remember preferences, and tailor communications. We categorize cookies as:
- Strictly necessary cookies: essential for site operation and secure transactions; expire at the end of your session or after a defined period.
- Performance and analytics cookies: help us understand site usage; typically persist for up to 12 months unless you delete them.
- Functional cookies: remember settings to enhance your experience; may persist for a defined period.
- Targeting cookies: deliver more relevant advertising; persist until you opt out or delete them.
You may disable cookies through your browser settings. Some features may not function without cookies. We also use local storage in the browser and equivalent technologies for similar purposes. If you disable cookies, you may still access the site, but certain features may be unavailable.
Data Retention
We retain Personal Information for as long as necessary to provide the services, fulfill the purposes described in this Policy, and comply with legal obligations. When data is no longer required, we securely delete or anonymize it, unless retention is required for legal, regulatory, or dispute resolution purposes. Account data may be retained for a period after account closure to address ongoing financial, regulatory, or investigative needs.
Security of Your Information
We implement appropriate technical and organizational measures to protect Personal Information, including encryption for data in transit (TLS/SSL), encryption at rest where feasible, access controls, monitoring, and incident response plans. Our personnel are bound by confidentiality obligations. While no security system is immune from breach, we apply commercially reasonable safeguards to reduce risk.
Your Rights and Access
You have rights regarding your Personal Information, including:
- Access to your data and information on how it is processed.
- Rectification of inaccurate or incomplete data.
- Deletion of data where permissible.
- Restriction of processing in certain circumstances.
- Data portability in a structured, commonly used format where applicable.
- Objection to processing based on legitimate interests or direct marketing.
- Withdraw consent where the processing is based on consent.
To exercise these rights, use the privacy controls in your Xhjili account or contact our Privacy Team through the support channels provided on the website. If you are in the European Economic Area, you may also lodge a complaint with a supervisory authority.
Age Verification and Minors
Our services are not directed to individuals under the age of eighteen. We perform age and identity verification as required by law. If we become aware that a minor has provided Personal Information, we will remove or anonymize that data and may suspend or terminate the related account.
International Transfers
Personal Information may be transferred to, stored, and processed in countries outside your jurisdiction where data protection laws may differ. We implement safeguards to protect data transferred abroad, including contractual measures designed to ensure an adequate level of protection.
Third-Party Processing and Vendors
We engage third-party processors for services such as payment processing, hosting, data analytics, and customer support. These processors act on our behalf and are contractually obligated to protect Personal Information and to process it only for the purposes described in this Policy. Transfers to these third parties may involve cross-border data flows.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on the Xhjili platform and indicate the effective date of changes. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.
Contact Us
If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact our Privacy Team via the support channels available in your Xhjili account. We will respond within a reasonable timeframe.