hbajee Privacy Policy

1. Who We Are and How to Contact Us

hbajee ("we", "us", "our") operates the online betting and casino platform accessible at hbajee.bar. This platform is designed for players based in Bangladesh who are aged 21 and above. hbajee is the data controller responsible for the personal information collected through this platform. If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our support team at [email protected]. This is a plain text address and is not a clickable link. Our team operates during Bangladesh Standard Time (BST, UTC+6) business hours and aims to respond within 24 hours.

2. Legal Basis for Processing Personal Data

hbajee processes your personal data on the following legal bases:

• Contractual necessity: Processing is required to create and manage your hbajee account, execute deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: We are required to verify the identity and age of players, retain transaction records, and cooperate with lawful investigations. These obligations require us to collect and retain certain categories of personal data.
• Legitimate interests: hbajee processes technical and behavioural data to detect fraud, prevent money laundering, maintain platform security, and improve service quality — provided these interests are not overridden by your rights.
• Consent: Where we rely on your consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting [email protected].

3. How We Use Your Personal Data

hbajee uses the personal data we collect for the following specific purposes:

• Creating, verifying, and managing your hbajee player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard.
• Detecting, preventing, and investigating fraud, money laundering, collusion, and other prohibited activities.
• Complying with age verification obligations — confirming that all active players are aged 21 or above.
• Providing customer support and resolving account disputes or technical issues.
• Sending transactional and account-related communications such as deposit confirmations, withdrawal notifications, and security alerts.
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour.
• Improving the performance, usability, and content of the hbajee platform based on anonymised usage analytics.
• Sending promotional communications about hbajee offers and bonuses, where you have provided consent to receive such communications.

4. Cookies and Tracking Technologies

hbajee uses cookies and similar tracking technologies on hbajee.bar to provide a functional and secure browsing experience. Cookies are small text files stored on your device by your browser when you visit our platform. We use the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session management cookies that keep you logged in to your hbajee account during a browsing session.
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and suspicious activity patterns.
• Analytics cookies: Anonymised data about how players navigate hbajee helps us identify performance issues and improve the user experience. No personally identifiable information is included in analytics reports.
• Preference cookies: Store your platform settings such as language and display preferences across sessions.

You may control cookie behaviour through your browser settings. Disabling essential cookies may impair your ability to log in to or use hbajee. Disabling analytics cookies has no impact on platform functionality.

5. Sharing Personal Data with Third Parties

hbajee does not sell, rent, or trade your personal data with any third party for marketing or commercial purposes. We share personal data with third parties only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals, we share necessary transaction data with your chosen payment provider (e.g., bKash, Nagad, Rocket). Each provider processes your data in accordance with their own privacy policy and security standards.
• Identity verification services: Third-party KYC (Know Your Customer) providers may process identity documents on hbajee's behalf to verify your age and identity. These providers are bound by strict confidentiality obligations.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to facilitate game delivery. They do not receive personally identifiable player data beyond what is strictly necessary for game operation.
• Legal and regulatory authorities: hbajee will disclose personal data to law enforcement, courts, or regulatory bodies when required to do so by applicable law, court order, or lawful regulatory request.
• Fraud prevention agencies: In cases of suspected fraud, match-fixing, or money laundering, hbajee may share relevant data with specialist fraud prevention organisations to protect the platform and other players.

All third-party service providers engaged by hbajee are required to process personal data only for the purposes specified by hbajee and to maintain appropriate technical and organisational security measures.

6. Data Retention

hbajee retains personal data for as long as necessary to fulfil the purposes described in this Policy. Specific retention periods are as follows:

• Active account data: Retained for the duration of your hbajee account's active lifetime and for a minimum period of five (5) years after account closure, to comply with anti-money laundering and record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of account activity plus five (5) years after closure.
• Support correspondence: Retained for three (3) years from the date of the last communication.
• Analytics data: Anonymised analytics data may be retained indefinitely as it contains no personally identifiable information.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

7. Data Security

hbajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hbajee's servers.
• Encryption of sensitive data fields (including identity document references and payment identifiers) at rest in our databases.
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the hbajee platform infrastructure.
• Multi-factor authentication requirements for internal staff accessing data systems.
• Automated monitoring for anomalous access patterns and data exfiltration attempts.

While hbajee takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your hbajee login credentials. If you suspect a security incident affecting your account, contact [email protected] immediately.

8. Your Rights as a Data Subject

As a player whose personal data is processed by hbajee, you hold the following rights with respect to your information:

• Right of access: You may request a copy of the personal data hbajee holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your hbajee account profile.
• Right to erasure: You may request deletion of your personal data, subject to hbajee's legal obligations to retain certain data for the periods described in Section 6.
• Right to restrict processing: You may request that hbajee limits the processing of your personal data in certain circumstances, such as while a dispute is being resolved.
• Right to data portability: You may request a copy of your personal data in a commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing of your personal data carried out on the basis of hbajee's legitimate interests.

To exercise any of the above rights, please submit a written request to [email protected]. hbajee will respond to all rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly. There is no charge for submitting a rights request unless the request is manifestly unfounded or excessive.

9. Children and Minors

hbajee is strictly an adult platform. The minimum age to register and play is 21 years. hbajee does not knowingly collect personal data from individuals under the age of 21. If hbajee becomes aware that a minor has registered an account or provided personal data, that account will be immediately suspended, all associated balances will be voided, and the data will be securely deleted. Parents or guardians who believe a minor has registered with hbajee are encouraged to contact [email protected] immediately.

10. International Data Transfers

hbajee's primary operations target players based in Bangladesh. In some circumstances, personal data may be transferred to or processed by service providers located outside Bangladesh (for example, international game software providers or cloud infrastructure partners). Where such transfers occur, hbajee ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure your data receives an equivalent level of protection regardless of where it is processed.

11. Changes to This Privacy Policy

hbajee reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When we make material changes, the updated Policy will be published on this page with a revised effective date. We encourage you to review this page periodically. Continued use of hbajee following the publication of a revised Policy constitutes your acceptance of the updated terms. If you disagree with any material change, you should stop using hbajee and may request account closure by contacting [email protected].

12. Contact and Complaints

For any privacy-related questions, data subject rights requests, or complaints regarding hbajee's data practices, please contact us at [email protected]. This is a plain text address — please do not attempt to click it as it is not a link. We take all privacy concerns seriously and will acknowledge your message within one (1) business day.