This page clearly explains how every piece of your information is collected, stored, and used at xpat. We believe your data is your asset — and our responsibility.
See a summary of our data collection practices before reading the full details
| Data Type | Purpose of Collection | Retention Period | Third-Party Sharing |
|---|---|---|---|
| Name & Contact | Account Verification & Support | 5 years after account closure | No |
| Identity Documents (KYC) | Legal Obligations & Fraud Prevention | 7 years (legal requirement) | For legal reasons only |
| Payment Information | Transaction Processing | 5 years | Payment Provider |
| Gaming History | Dispute Resolution & Responsible Gaming | 3 years | No |
| IP & Device Information | Security & Fraud Prevention | 1 year | No |
| Cookies & Browsing | Platform Improvement & Analytics | Session or 30 days | Analytics tools |
Xpat (https://xpat.win) places the highest importance on the privacy of its members. This Privacy Policy explains how xpat collects your personal information, the purposes for which it is used, and how it is kept secure.
This Policy applies to xpat's website, mobile app, and all associated services. By using the xpat platform, you are considered to have accepted this Privacy Policy.
Our Privacy Policy is framed in accordance with the General Data Protection Regulation (GDPR) and applicable international data protection laws. If you have any questions or are unsure about anything, our support team is always ready to help.
This Privacy Policy is xpat's Terms & Conditions and Responsible Gaming PolicyRead together with.
When you register with xpat or use our services, you voluntarily provide certain information. This includes:
Some information is collected automatically while you use xpat:
Xpat never stores your full bank card number or password. Payment information is processed exclusively through PCI-DSS certified providers.
Your information is used solely for the purposes listed below. xpat never misuses your data.
To opt out of marketing emails, click "Unsubscribe" at the bottom of any email or contact customer support.
Xpat employs the highest level of technical and organizational measures to protect your data. Our security framework meets world-class standards.
Xpat does not sell your personal information. Sharing with third parties is strictly limited and controlled:
All third parties providing services on behalf of xpat are contractually bound to comply with xpat's privacy policy.
Xpat uses cookies to enhance your platform experience. Cookies are small data files stored in your browser.
You can manage cookies through your browser settings. However, disabling essential cookies may affect the platform's functionality.
As an xpat member, you have the following rights regarding your personal information. To exercise any of these rights, please contact customer support.
You may request to know what information xpat holds about you.
You may request corrections to any inaccurate or outdated information.
You may request deletion of your data where there is no legal obligation to retain it.
You can request that we restrict the processing of your data in certain circumstances.
You may request a copy of your information in a readable format.
You can opt out of marketing communications at any time.
Xpat strictly does not provide services to anyone under the age of 18. We do not knowingly collect any information from minors.
If we become aware that a minor has provided their information, the account will be closed and all data deleted immediately. If you believe your child has registered with xpat, please contact our support team as soon as possible.
Whenever xpat updates this Privacy Policy, the new date will be shown at the top of the page and registered members will be notified by email. For significant changes, a direct notification will also be sent.
Continued use of the platform after an update constitutes acceptance of the new policy. If you do not agree with the changes, you have the full right to close your account.
For any privacy questions, concerns, or requests to exercise your rights, please reach out to xpat's Data Protection team.
Six Core Pillars of Our Privacy Protection
Every piece of your data and every transaction is protected by 256-bit SSL encryption — the same technology used by the world's leading banks. No one can intercept or read your data in transit.
Many platforms sell your data to advertising agencies. xpat never does. Your data exists solely to serve you — that is our promise.
Every year, independent security experts review xpat's systems. Any vulnerabilities identified are resolved immediately.
You can update your marketing preferences, cookie settings, and data sharing options at any time through your account settings — hassle-free.
Xpat complies with Europe's most stringent data protection law, the GDPR — meaning users in Bangladesh benefit from internationally recognized privacy protections.
Upon account closure, all data beyond legal obligations will be permanently deleted within 30 days. Your information will no longer be retained by us.
Frequently Asked Questions by Members
Your privacy is our top priority. Register with xpat under world-class security and enjoy gaming with complete peace of mind.