hbajii Privacy Policy

1. Introduction

hbajii ("hbajii", "we", "us", "our") is committed to protecting the privacy and personal data of every person who accesses or uses the hbajii Platform — including the website, mobile browser interface, live casino, sports betting services, and any associated communication channels (collectively, the "Platform").

This Privacy Policy explains, in plain and formal English, what categories of personal data hbajii collects, the lawful bases on which that data is processed, how it is stored and protected, and the circumstances under which it may be disclosed to third parties. It also sets out the rights available to you as a data subject and explains how to exercise those rights.

By registering an account on hbajii or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not accept this Policy, please discontinue use of the Platform and contact [email protected] to request account closure.

This Policy should be read alongside the hbajii Terms and Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms and Conditions on a privacy matter, this Policy shall prevail.

2. Personal Data We Collect

2.1 Registration Data

When you create an hbajii account, we collect the information you provide directly, including your full legal name, date of birth, residential address, email address, and the mobile number associated with your preferred payment method (bKash, Nagad, or Rocket). This data is necessary to open and maintain your account, verify your identity, and process payments.

2.2 Identity Verification Data

To comply with our obligations to prevent underage gambling, fraud, and money laundering, hbajii may request documentary proof of identity and age at any stage of your account lifecycle. This may include a copy of your National Identity Card (NID), passport, or another government-issued document. Such documents are handled with the highest level of security and are used only for verification purposes.

2.3 Financial Transaction Data

hbajii records details of all financial transactions conducted through your account, including deposits, withdrawals, bonus credits, wagers placed, and winnings received. Transaction records are denominated in Bangladeshi Taka (৳) and retained for the period required by applicable financial compliance regulations.

2.4 Technical and Device Data

When you access the hbajii Platform, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type (mobile or desktop), session duration, pages visited, and referring URL. This data is used for security monitoring, fraud detection, platform optimisation, and service analytics.

2.5 Communications Data

If you contact hbajii support via email, live chat, or any other channel, we retain a record of that communication, including the content of messages and any files or screenshots shared. This enables us to resolve your query, maintain an audit trail, and improve our support services.

2.6 Cookies and Tracking Technologies

hbajii uses cookies and similar tracking technologies to maintain your login session, remember your preferences, and analyse how the Platform is used. Please refer to Section 9 of this Policy for a full explanation of our cookie practices. You may manage cookie preferences through your browser settings at any time.

3. How We Use Your Personal Data

hbajii processes your personal data for the following specific purposes, each supported by a lawful basis under applicable data protection principles:

4. Disclosure of Personal Data to Third Parties

4.1 Payment Processors

To facilitate deposits and withdrawals, hbajii shares the minimum necessary payment-related data with mobile financial service providers including bKash, Nagad, and Rocket. These providers operate under their own privacy policies and security standards. hbajii does not share more data with payment processors than is strictly required to complete the transaction.

4.2 Identity and Age Verification Providers

Where third-party identity verification services are used to confirm a player's age and identity, hbajii may share copies of submitted verification documents with those providers. All such providers are required to handle data in accordance with confidentiality obligations contractually agreed with hbajii.

4.3 Game Studio Providers

Live casino and slot games available on hbajii are operated by licensed third-party game studios including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming. These studios may receive a session token and anonymised game-play data necessary to operate the game. They do not receive your full personal profile unless required by their own regulatory obligations.

4.4 Legal and Regulatory Disclosure

hbajii may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. hbajii will disclose only the minimum data necessary to comply with such requirements and, where legally permissible, will notify you that a disclosure has been made.

4.5 Business Transfers

In the event that hbajii undergoes a corporate restructuring, merger, acquisition, or sale of all or part of its assets, personal data held about players may form part of the transferred assets. In such circumstances, hbajii will take reasonable steps to ensure that your data continues to be treated in accordance with this Privacy Policy.

5. Data Retention

hbajii retains personal data only for as long as it is necessary for the purposes for which it was collected, or for the duration required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account data is retained for the duration of your active account, plus a minimum of five years following account closure to satisfy anti-money-laundering record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history, bonus activity) are retained for a minimum of five years from the date of each transaction.
• Identity verification documents are retained for the period required by applicable financial regulations, typically five years from the end of the business relationship.
• Customer support communications are retained for a minimum of two years from the date of the most recent interaction.
• Technical and device logs are retained for up to 12 months and are then anonymised or deleted.

Where you request deletion of your personal data and no legal retention obligation applies, hbajii will securely delete or anonymise the relevant data within 30 days of receiving and verifying your request.

6. Data Security

hbajii implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data fields including payment information and identity documents.
• Role-based access controls ensuring that only authorised hbajii personnel can access personal data, and only to the extent necessary for their specific duties.
• Regular security audits and vulnerability assessments of Platform infrastructure.
• Incident response procedures to identify, contain, and remediate any data breach in a timely manner.

While hbajii takes data security seriously, no system connected to the internet can be guaranteed to be completely secure. You also play an important role in protecting your data: keep your hbajii login credentials confidential, use a strong and unique password, and notify us immediately if you suspect any unauthorised activity on your account.

7. International Data Transfers

hbajii operates as an internationally accessible platform. Some of the third-party service providers we use — including game studios and technical infrastructure partners — may process data in jurisdictions outside Bangladesh. Where data is transferred internationally, hbajii takes steps to ensure that appropriate safeguards are in place, consistent with recognised data protection standards, to protect your information regardless of where it is processed.

8. Your Rights as a Data Subject

As a user of the hbajii Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact hbajii at [email protected] with your full name and registered account email address.

• Right of Access: You may request a copy of all personal data hbajii holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your data where no legal retention obligation requires us to keep it.
• Right to Restriction: You may request that hbajii restricts processing of your data in certain circumstances, such as while a correction request is being assessed.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing of your data where hbajii relies on legitimate interest as its lawful basis, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

hbajii will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, hbajii may extend this period by a further 30 days and will notify you accordingly.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, remember user preferences, and provide anonymised analytics data to site operators.

9.2 How hbajii Uses Cookies

hbajii uses the following categories of cookies on the Platform:

• Essential Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that help protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Remember your language and display preferences to improve your experience on subsequent visits.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — pages visited, time on page, and click paths — to help hbajii improve the user experience. No personally identifiable information is included in analytics data.
• Security and Fraud-Detection Cookies: Help hbajii identify suspicious login patterns or device behaviour that may indicate fraud or account compromise.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the hbajii Platform, including the ability to stay logged in between pages or to access live casino features that require a persistent session.

10. Children and Minors

The hbajii Platform is strictly restricted to individuals aged 21 years and over. hbajii does not knowingly collect personal data from anyone under the age of 21. If hbajii identifies or is notified that a minor has accessed the Platform or provided personal data, that account will be immediately suspended, all data associated with the minor will be deleted, and any transactions will be reversed where possible.

If you are a parent or guardian and believe a minor under your care has registered on hbajii, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

hbajii reserves the right to update or amend this Privacy Policy at any time. The effective date displayed at the top of this page will be updated whenever a material change is made. Where changes are significant, hbajii will notify registered players via the Platform or by email to their registered address.

Your continued use of the hbajii Platform following notice of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and request account closure.

12. Contact and Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding how hbajii handles your personal data, please contact our support team:

• Email: [email protected]
• Response Time: Within 30 days of receipt for data rights requests; within 5 business days for general privacy enquiries.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

hbajii takes all privacy complaints seriously. If you are not satisfied with our response, you retain the right to raise your concern with the relevant data protection authority in your jurisdiction.