hbajhe Privacy
Policy

1. Information We Collect

hbajhe collects personal data in several ways: directly from you when you register an account or interact with the platform, automatically as you use our services, and occasionally from third-party sources such as payment providers and identity verification partners. The categories of data we collect are described below.

Registration and Account Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used for mandatory age verification — players must be 18 or older)
• Residential address in Bangladesh (street, city, division, postcode)
• Mobile phone number associated with your bKash, Nagad, or Rocket account
• Email address for account communications
• Username and hashed password (we do not store your password in plain text)
• Preferred language and currency settings

Identity Verification (KYC) Data

• Scanned or photographed copy of your National Identity Card (NID), passport, or driving licence
• Proof of address document (utility bill, bank statement, or mobile financial statement dated within three months)
• Selfie or liveness check image where required by our KYC provider
• Source of funds declaration for high-value accounts

Transaction and Payment Data

• Deposit amounts, timestamps, and payment method references (e.g., bKash transaction ID)
• Withdrawal requests, amounts, and processing status
• Bonus claims, wagering history, and balance adjustments
• Currency: all amounts recorded in Bangladeshi Taka (BDT / ৳)

Gaming and Behavioural Data

• Games played, bet amounts, session duration, win/loss outcomes
• Sports betting selections including cricket (BPL, IPL, T20 World Cup), football, and kabaddi markets
• Bonus usage patterns and promotional participation
• Responsible gaming settings such as deposit limits and self-exclusion requests

Technical and Device Data

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Session start and end times (recorded in Bangladesh Standard Time, BST UTC+6)
• Referring URL and on-site navigation path
• Cookie identifiers and similar tracking technologies (see the Cookies section below)

Communications Data

• Content of support tickets, live chat transcripts, and email correspondence with hbajhe
• Survey responses and feedback submissions
• Promotional opt-in and opt-out preferences

2. How We Use Your Data

hbajhe uses the personal data it collects for the following specific, documented purposes. We do not process your data in ways that are incompatible with these purposes without prior notice or consent where required.

hbajhe does not use automated decision-making in a way that produces significant legal effects on individual players without human review. Where automated systems flag an account for investigation (for example, due to suspected bonus abuse or AML triggers), a trained compliance team member reviews the flag before any account action is taken.

3. Legal Basis for Processing

• Contractual necessity: Processing required to fulfil our agreement with you as a registered player — including account management, game delivery, payment processing, and support. Without this processing, hbajhe cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML regulations, age verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for hbajhe's legitimate business interests, such as fraud prevention, platform security, product improvement, and responsible gaming monitoring — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes such as sending you personalised promotional offers, marketing emails about seasonal events (Eid, Pohela Boishakh, BPL season), and non-essential analytics cookies. You may withdraw consent at any time by contacting [email protected].

4. Data Sharing & Disclosure

hbajhe shares personal data only in the circumstances described below. We do not sell your data. All third parties who receive personal data from hbajhe are contractually required to protect it to standards consistent with this Privacy Policy.

Service Providers and Data Processors

hbajhe works with carefully selected service providers who process personal data on our behalf under strict data processing agreements. These include:

• KYC and identity verification providers: to verify your age and identity as required by our responsible gaming and AML obligations
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to facilitate deposits and withdrawals in BDT
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and PG Soft — who may receive pseudonymised player session data to power their games
• Cloud hosting and IT infrastructure providers: who store and process data on secure servers under our instruction
• Customer support platform providers: who process support ticket content and communications history
• Analytics providers: who process aggregated, anonymised usage data to help us improve platform performance

Legal and Regulatory Disclosures

hbajhe may disclose personal data to competent government authorities, law enforcement agencies, or courts when required to do so by applicable law, a valid legal process, or to protect the rights, property, or safety of hbajhe, its players, or the public. We will always seek to notify affected players of such disclosures where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of hbajhe's business, personal data held by hbajhe may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance and ensure the acquiring party commits to this Privacy Policy or an equivalent standard of protection.

What We Will Never Do

• Sell your personal data to marketing companies or data brokers
• Share your data with unaffiliated third-party gambling operators without your explicit consent
• Provide your data to employers, family members, or other individuals without a valid legal basis
• Transfer your data outside of Bangladesh or to international servers without ensuring adequate protection is in place

5. Cookies & Tracking Technologies

hbajhe uses cookies and similar technologies (such as local storage and session tokens) to operate the platform securely, remember your preferences, and understand how players use our services. The following table summarises the categories of cookies we use.

You can manage your cookie preferences through your browser settings. Blocking strictly necessary cookies may prevent certain features of hbajhe from functioning correctly. To withdraw consent for analytics or marketing cookies, contact [email protected] with the subject line "Cookie Consent Withdrawal". Your withdrawal will be processed within 5 business days.

6. Data Retention

hbajhe retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active life plus 5 years after account closure, to comply with AML record-keeping obligations.
• KYC documents: Retained for 5 years from the date of account closure or the date the document was last used for verification, whichever is later.
• Transaction records: Retained for 7 years from the date of each transaction, in compliance with standard financial record-keeping requirements.
• Support and communications records: Retained for 3 years from the date of last interaction, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever occurs first.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.

Upon expiry of the applicable retention period, hbajhe will securely delete or anonymise your personal data. If you request account closure, hbajhe will initiate the deletion process within 30 days, subject to any outstanding legal hold requirements such as active AML investigations or unresolved disputes.

7. Data Security

hbajhe implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption at rest and in transit: Sensitive data fields (including KYC documents and payment references) are encrypted both when stored in our databases and when transmitted across networks.
• Access controls: Personal data is accessible only to hbajhe staff members who have a documented need for access in order to perform their job functions. Access is governed by role-based permissions and reviewed quarterly.
• Password hashing: Player passwords are stored using strong, one-way cryptographic hashing algorithms. hbajhe staff cannot view your plain-text password under any circumstances.
• Two-factor authentication (2FA): hbajhe supports 2FA for player accounts. We strongly encourage all players to enable this additional layer of account protection in their account security settings.
• Penetration testing and vulnerability management: hbajhe conducts regular security assessments of its platform infrastructure. Identified vulnerabilities are triaged and remediated according to their risk severity.
• Incident response: In the event of a personal data breach that poses a risk to players, hbajhe will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in line with applicable data protection obligations.

While hbajhe takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying hbajhe immediately at [email protected] if you suspect any unauthorised access to your account.

8. Your Privacy Rights

As a player on hbajhe, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days of receiving your request.

• Right of Access: You may request a copy of all personal data hbajhe holds about you, including a description of the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You can update most profile information directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that certain data must be retained to comply with legal obligations (see Data Retention above) and cannot be deleted on request.
• Right to Restriction of Processing: You may request that hbajhe restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or a contract with you and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format (such as JSON or CSV).
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though hbajhe may demonstrate compelling legitimate grounds that override your objection in specific cases.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

hbajhe will not discriminate against you or restrict your access to core platform services as a result of your exercising any of the rights listed above.

9. Third-Party Services

The hbajhe platform integrates with a number of third-party services to deliver a complete gambling experience. These include game content providers, payment gateways, and analytics tools. While hbajhe carefully vets all third-party integrations, each third party operates under its own privacy policy and data practices.

Game providers whose software is embedded in the hbajhe platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and PG Soft — may collect certain pseudonymised gameplay data directly for the purposes of game operation, fairness auditing, and technical support. hbajhe does not control the data practices of these providers beyond the terms of our supplier agreements.

Payment service providers such as bKash, Nagad, Rocket, and Upay process transaction data according to their own published privacy policies and are regulated by Bangladesh Bank. hbajhe does not have access to your full mobile wallet credentials or banking login details — we receive only the transaction reference and confirmation status required to credit your hbajhe account.

hbajhe's website may contain links to third-party pages for informational purposes (for example, links to responsible gaming support organisations). hbajhe is not responsible for the content or privacy practices of external sites. We encourage you to read the privacy policy of any third-party site you visit.

10. Changes to This Policy

hbajhe reviews and, where necessary, updates this Privacy Policy on a periodic basis to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will:

• Display a prominent notice on the hbajhe platform at least 7 days before the change takes effect
• Send an email notification to the address registered on your account summarising the key changes
• Update the "Last Updated" date at the top of this page

Your continued use of hbajhe after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you may request account closure by contacting [email protected] before the effective date. hbajhe will not apply changes retrospectively to data already collected under a previous version of this policy in a way that materially reduces your privacy protections.

Previous versions of this Privacy Policy are available upon request by contacting our privacy team. All version history is maintained securely and can be provided to players or regulatory bodies as required.

11. Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hbajhe handles your personal data, please contact us using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Rights Request" or "Privacy Policy Enquiry"
• Response time: Within 30 calendar days of receiving your request; urgent account security matters are handled within 24 hours
• Operating hours: 24/7 support available; privacy team operates during Bangladesh Standard Time (BST, UTC+6) business hours
• Language: English

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions published on this page. By continuing to use hbajhe after this date, you acknowledge that you have read and understood the terms set out in this policy. 18+ only.