hbajee Privacy Policy

hbajee ("we", "us", "our") operates the online gaming platform accessible at hbajee.vu. We are committed to protecting the personal data of all individuals who interact with our platform, including registered players, visitors, and prospective users ("you", "your"). This Privacy Policy sets out in clear and formal terms the manner in which hbajee collects, processes, stores, and shares your personal information.

This policy has been drafted in accordance with internationally recognised data protection principles. We believe that transparency is fundamental to the trust you place in hbajee, and we therefore endeavour to explain our data practices in a manner that is clear, comprehensive, and accessible to all users.

This Privacy Policy should be read alongside hbajee's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and hbajee. If you have any questions about this policy that are not addressed here, please contact us at [email protected].

hbajee collects personal data that is necessary for the provision of our gaming services, for compliance with our legal obligations, and for the improvement of user experience on the platform. The categories of personal data we may collect include, but are not limited to:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data) unless specifically required by applicable law or by an identity verification process necessary for age or source-of-funds verification.

hbajee collects personal data through a variety of channels, including:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or responding to surveys and promotions.
• Automated technologies: As you interact with our platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies. For full details, see Section 9 (Cookies) below.
• Third-party sources: We may receive data about you from identity verification providers, payment processors (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank), fraud detection agencies, and publicly available sources where permitted by law.
• Game providers: Our licensed game suppliers (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi) may share anonymised or aggregated gameplay data with us for the purposes of platform improvement and compliance.

hbajee uses the personal data we collect for the following purposes:

• Account management: To create, verify, and administer your hbajee player account, including processing your registration, managing login sessions, and communicating account-related notifications.
• Service delivery: To provide you with access to games, sports betting, live casino services, crash games, and all other features of the hbajee platform.
• Payment processing: To process deposits and withdrawals via your chosen payment method, to verify the ownership of payment accounts, and to maintain accurate financial records.
• Identity and age verification: To comply with our strict 18+ policy and to prevent fraudulent use of the platform by verifying the identity of registered players.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and data protection laws and regulations.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling, to administer self-exclusion requests and deposit limits, and to provide players with responsible gaming tools and resources.
• Platform improvement: To analyse usage data, identify technical issues, conduct A/B testing, and continuously improve the functionality, security, and performance of the hbajee platform.
• Marketing and promotions: With your consent where required, to send you information about hbajee promotions, bonuses, new games, and special offers tailored to your preferences and gameplay history. You may withdraw consent at any time by contacting [email protected].
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, cheating, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your enquiries, process complaints, and provide assistance via live chat and email.

hbajee processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary for the performance of the contract between you and hbajee (i.e., the Terms & Conditions you accept upon registration). This covers account management, payment processing, and service delivery.
• Legal obligation: Processing is required to comply with applicable laws, including AML/CTF obligations, age verification requirements, and tax reporting duties.
• Legitimate interests: Processing is necessary for the legitimate interests of hbajee, including fraud prevention, platform security, and business analytics, provided those interests are not overridden by your data protection rights.
• Consent: For certain processing activities — including direct marketing communications and the placement of non-essential cookies — we will seek your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

hbajee does not sell your personal data to third parties. We may share your data with selected third parties only in the circumstances described below:

• Payment service providers: We share necessary financial and identity data with our payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) solely for the purposes of processing your transactions.
• Identity verification providers: We engage third-party KYC and AML service providers who process your identity documents to verify your age and identity on our behalf. These providers operate under strict data processing agreements and are not permitted to use your data for any other purpose.
• Game technology providers: Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive data relating to your gameplay sessions as necessary for the delivery of their games on our platform.
• IT and infrastructure providers: Third-party providers who supply hosting, cloud storage, cybersecurity, and other technical services may have access to personal data as part of their service provision. All such providers are bound by data processing agreements.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by law or in connection with legal proceedings.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of hbajee's business, personal data held by hbajee may be transferred to the acquiring entity. Affected users will be notified in accordance with applicable law.

hbajee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The retention periods we apply are as follows:

• Active account data: Retained for the duration of your account's active status on the hbajee platform.
• Post-closure data: Following account closure, we retain core identity and transaction records for a minimum of five (5) years in order to comply with AML/CTF regulatory requirements and to handle any retrospective legal claims.
• KYC verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Customer support records: Support chat transcripts and email correspondence are retained for three (3) years from the date of the last interaction.
• Marketing consent records: Records of your marketing consent or opt-out are retained for five (5) years to demonstrate compliance.
• Technical logs: Server logs and session data are retained for up to twelve (12) months for security and fraud investigation purposes.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

hbajee respects your rights in relation to your personal data. Depending on your circumstances and applicable law, you may have the following rights:

• Right of access: You have the right to request a copy of the personal data that hbajee holds about you, along with information about how it is used.
• Right to rectification: You have the right to request that hbajee corrects any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request that hbajee deletes your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that hbajee restricts the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on hbajee's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the rights listed above, please contact our support team by email at [email protected]. We will respond to all data rights requests within 30 calendar days. We may ask you to verify your identity before processing any request.

hbajee uses cookies and similar tracking technologies to improve your experience on the platform, to remember your preferences, and to analyse how the platform is used. A cookie is a small text file that is stored on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the operation of the hbajee platform. They enable core functionality such as secure login sessions, page navigation, and access to restricted areas. These cookies cannot be disabled.
• Performance cookies: These cookies collect anonymous information about how users interact with the platform, such as which pages are visited most frequently and whether error messages are received. This data is used solely to improve platform performance.
• Functionality cookies: These cookies allow the platform to remember your preferences, such as language settings and your preferred payment method, to provide a more personalised experience.
• Targeting and analytics cookies: These cookies track your browsing activity across the hbajee platform to build a profile of your preferences, enabling us to display more relevant content. These cookies are only placed with your prior consent.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the hbajee platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

hbajee employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• SSL 256-bit encryption: All data transmitted between your device and the hbajee platform is encrypted using industry-standard 256-bit SSL technology, ensuring that your personal and financial data is protected in transit.
• Access controls: Access to personal data within hbajee is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate business reason may access player data, and all such access is logged and audited.
• Secure data storage: Personal data is stored on secure servers with appropriate physical and logical access controls. We employ firewalls, intrusion detection systems, and regular security audits to maintain the integrity of our data environment.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their hbajee accounts to add an additional layer of security against unauthorised access.
• Staff training: All hbajee staff who handle personal data receive regular training on data protection obligations and information security best practices.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. You are responsible for maintaining the security of your own account credentials. If you suspect that your account has been compromised, contact us immediately at [email protected].

The hbajee platform is strictly intended for adults aged 18 years and above. hbajee does not knowingly collect, process, or retain personal data from individuals under the age of 18. Our registration process includes age verification steps designed to prevent underage individuals from creating accounts.

If we become aware that personal data has been collected from a person under the age of 18, we will take immediate steps to suspend the relevant account, delete the data in question, and return any deposited funds net of any winnings, which will be voided, in accordance with our Terms & Conditions.

Parents and guardians who are concerned about a minor's potential access to online gambling platforms are strongly encouraged to install internet filtering software on shared devices and to use parental control features provided by their internet service provider.

The hbajee platform may contain references to third-party services, including payment providers and game content suppliers. This Privacy Policy applies solely to data collected and processed by hbajee directly. Third-party services operate under their own privacy policies, for which hbajee accepts no responsibility.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the hbajee platform. hbajee does not endorse, control, or have any responsibility for the privacy practices of third-party organisations.

hbajee reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in applicable law, evolving data protection standards, or changes to our data processing practices. All amendments will be published on this page with an updated effective date.

Where changes to this policy are material — meaning they significantly affect your rights or the way we use your personal data — we will take reasonable steps to notify you directly, which may include displaying a prominent notice on the hbajee platform or sending an email to your registered address.

We encourage you to review this Privacy Policy periodically. Your continued use of the hbajee platform following the publication of any amendments constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or hbajee's data protection practices, please contact our support team using the details below. We take all privacy enquiries seriously and will respond promptly and professionally.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the hbajee platform
• Response time: We aim to respond to all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6)
• Data rights requests: Requests will be completed within 30 calendar days of receipt and identity verification

hbajee serves players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our team is available to address data protection queries from players throughout Bangladesh.