Introduction
Xhjili operates online gaming services and a website that collects personal data from visitors and players. This Privacy Policy explains how we collect, store, use, disclose, and protect that information and the choices you have regarding it. We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where those laws apply to you.
Data Controller and Scope
Xhjili is the data controller responsible for your personal data collected through our website and services. This policy applies to individuals who interact with Xhjili online services, regardless of location, where applicable data protection laws provide a basis for processing.
Categories of Personal Data We Collect
- Identity and contact information: full name, postal address, email address, and phone number.
- Account information: username, date of birth, gender (where provided).
- Identity verification data: government-issued identification documents or copies, and related verification responses.
- Payment and transaction data: payment method details, deposit and withdrawal history, and related account activity.
- Device and usage data: IP address, device type, browser, operating system, and pages visited on the site.
- Communications data: correspondence with our support team or other service channels.
- Consent and preference data: choices regarding marketing communications and notification preferences.
How We Use Personal Data (Legal Bases)
- To provide and administer our services: identity verification, account management, and service delivery. Legal basis: performance of a contract.
- To process payments and manage transactions: processing deposits, withdrawals, and settlements. Legal basis: performance of a contract; legitimate interest in secure financial operations.
- To communicate with you: respond to inquiries, notify about changes to services, and provide support. Legal basis: legitimate interest and, where required, contractual necessity.
- To maintain security and combat fraud: identity checks, fraud prevention, and risk assessment. Legal basis: legitimate interest in protecting the platform and users.
- To improve, audit, and develop our services: analytics, performance monitoring, and service enhancements. Legal basis: legitimate interest.
- For marketing communications: with your consent or where lawful, based on legitimate interest; you may opt out at any time. Legal basis: consent or legitimate interest.
- For compliance with legal obligations: recordkeeping, anti-money laundering, and financial reporting. Legal basis: legal obligation.
Disclosure of Personal Data
We may disclose personal data to service providers who perform services on our behalf, including hosting, IT, security, customer support, payment processing, and data analytics. We may also share data with affiliated entities, financial institutions, regulatory authorities, and as required by law or to protect our rights. All disclosures are governed by data processing agreements and applicable law.
International Data Transfers
Personal data may be stored and processed in jurisdictions outside your residence. When data leaves the European Economic Area, we rely on safeguards such as standard contractual clauses or other legally recognized transfer mechanisms, and we implement appropriate technical safeguards to protect your data.
Data Retention and Security
We retain personal data for the duration of your relationship with Xhjili and for a period thereafter as necessary to fulfill legal obligations, resolve disputes, or enforce our agreements. In practice, records related to accounts and transactions may be retained for up to six years after termination of the relationship, unless a longer period is required by law. We employ measures including encryption in transit and at rest, access controls, regular security assessments, and contractual duties for processors to protect data from unauthorized access or disclosure.
Your Rights
You have the following rights regarding your personal data, subject to applicable law: access to your data; rectification of inaccuracies; erasure where permissible; restriction of processing; data portability in a structured, machine-readable format; objection to processing; withdrawal of consent where consent is the basis for processing; and the right to lodge a complaint with a supervisory authority. To exercise these rights, contact our privacy team at [email protected]. We will respond within one month, with possible extensions where required by complexity or volume.
Marketing Communications
We may use your data to send promotional communications about our services. You may opt out at any time by contacting [email protected] or using the unsubscribe mechanism provided in the communications. Opting out will not affect transactional communications or the provision of our services, but it may limit access to marketing offers or bonuses.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate the website, analyze usage, and tailor experiences. We categorize cookies as necessary for site operation, functional cookies for personalization, and performance or advertising cookies for analytics and marketing. You may adjust your browser settings to block or delete cookies, but some features may no longer function properly. We may also deploy tracking pixels to measure engagement and ad performance; data collected by pixels may include device information, IP address, pages visited, and timestamps. We do not use these tools to identify you personally without your consent.
Children’s Privacy
The services are not directed at and must not be used by individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that data of a minor has been collected, we will take steps to delete such data promptly.
Data Breach Notification
We maintain a formal incident response program. In the event of a personal data breach, we will assess the risk to individuals and, where required by law, notify the relevant supervisory authority within 72 hours of becoming aware of the breach and communicate with affected individuals if there is a high risk to their rights and freedoms.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on our site with an updated effective date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Policy or wish to exercise your rights, please contact [email protected]. You may also reach out to us for general privacy inquiries or to request a copy of the data we hold about you.