hbaij Privacy Policy

hbaij collects personal information that is strictly necessary to provide a safe, compliant and personalised gaming experience. The categories of data we may collect include:

• Identity data: full legal name, date of birth, and a copy of a government-issued photo ID document collected as part of the KYC verification process.
• Contact data: mobile phone number, email address and residential address, used for account communications, one-time verification codes and fraud prevention.
• Financial data: mobile wallet identifiers (bKash, Nagad, Rocket or Upay numbers), deposit and withdrawal history, and transaction amounts in BDT. hbaij does not store full card numbers.
• Usage data: IP address, device type, operating system, browser type, pages visited, session duration, bet history and game activity logs, used for platform optimisation, responsible gaming monitoring and fraud detection.
• Communications data: records of messages exchanged with our support team via email or live chat, retained for quality assurance and dispute resolution.

hbaij uses the personal data it collects strictly for the following purposes. We do not process your data for any purpose incompatible with those listed below:

• Account creation and management: to register your account, verify your identity, process login requests and maintain your player profile.
• Payment processing: to facilitate deposits and withdrawals via bKash, Nagad, Rocket and Upay in BDT, and to maintain accurate financial records for your account.
• Legal and regulatory compliance: to fulfil KYC obligations, anti-money-laundering (AML) checks, responsible gaming requirements and any other applicable legal obligations.
• Platform security and improvement: to monitor performance, detect and prevent fraud, investigate suspicious activity and continuously improve the player experience.
• Customer support: to respond to your queries, complaints and support requests, and to keep records of communications for quality assurance purposes.

hbaij processes personal data on one or more of the following legal bases, depending on the specific type of data and the purpose for which it is processed:

• Contractual necessity: processing required to fulfil the contract between you and hbaij — specifically to provide the gaming and betting services you have registered to use.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC, AML and responsible gaming obligations.
• Legitimate interests: processing necessary for fraud detection, platform security and service improvement, where such interests are not overridden by your own rights and interests.

All payment transactions on hbaij are conducted in BDT via bKash, Nagad, Rocket and Upay. When you initiate a deposit or withdrawal, your mobile wallet identifier and transaction reference are recorded for reconciliation, fraud prevention and regulatory compliance purposes. hbaij does not store complete payment credentials; payment processing is handled via the respective mobile money providers' secure APIs.

As part of our KYC process, hbaij may request copies of identity documents such as a National ID card, passport or driving licence, together with proof of address. This information is stored securely, used only for verification and compliance purposes, and is never shared with third parties for commercial use. KYC documents are retained for the minimum period required by applicable regulations.

hbaij does not sell, rent or trade personal data. We share data with third parties only in the following limited and defined circumstances:

• Service providers and processors: technology vendors, payment processors (bKash, Nagad, Rocket, Upay) and infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: where disclosure is required by applicable law, court order or regulatory body — for example to satisfy AML reporting obligations or to respond to a lawful investigation.
• Business transfers: in the event of a merger, acquisition or sale of substantially all of hbaij's assets, your personal data may be transferred to the successor entity subject to equivalent privacy protections.

In every case where we share data with a third party, we require contractual guarantees that the recipient will process data only for the specified purpose and to an equivalent security standard.

hbaij uses cookies and similar tracking technologies to ensure the platform operates correctly and to gather analytical insights that help us improve the player experience. We use the following types of cookies:

• Essential cookies: required for the platform to function — including session authentication tokens, security identifiers and user preference settings. These cannot be disabled without impairing core platform functionality.
• Analytical cookies: used to understand how players interact with the platform — including page visit frequency, feature usage patterns and error reporting. Data is aggregated and anonymised wherever possible.
• Responsible gaming cookies: used to track session duration and betting patterns for the purpose of enforcing the deposit limits, session timers and self-exclusion settings you have activated on your account.

hbaij does not use advertising or retargeting cookies and does not permit third-party advertising networks to place cookies on the platform. You can manage cookie preferences through your device's browser settings, though disabling essential cookies may affect your ability to use certain features.

hbaij retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your active account and for up to five years after account closure to comply with financial record-keeping and AML obligations. KYC documents are retained for the minimum period required by applicable regulations. Support communications are kept for up to two years. Anonymised analytical data may be retained indefinitely. When data is no longer required, hbaij securely deletes or anonymises it.

hbaij implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or unauthorised disclosure. Security measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, regular security assessments and penetration testing, and monitoring systems to detect and respond to potential breaches.

While hbaij takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, hbaij will notify affected players and the relevant authorities within the timeframe required by applicable law.

Subject to applicable law, you have the following rights in relation to the personal data hbaij holds about you. To exercise any of these rights, please contact our support team at [email protected]:

• Right of access: you may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right of rectification: if any personal data we hold is inaccurate or incomplete, you may request that we correct or update it without undue delay.
• Right to erasure: in certain circumstances you may request the deletion of your personal data. Note that we may be required to retain some data to fulfil legal obligations even after account closure.
• Right to restriction: you may request that we restrict processing of your personal data in certain circumstances, for example while a rectification request is under investigation.
• Right to object: you may object to processing carried out on the basis of legitimate interests. Where your objection is upheld, we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

hbaij will respond to all privacy rights requests within 30 days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 30 days and will notify you of the extension and the reason for it.

hbaij is strictly an adult platform. The minimum age to register and use hbaij is 21 years. hbaij does not knowingly collect personal data from individuals under the age of 21. If we become aware that a player has provided personal data and is below the minimum age, we will delete all such data immediately and close the account. If you believe an underage individual has registered on hbaij, please contact us immediately at [email protected].

hbaij reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered players via their registered contact details. Your continued use of the platform following the posting of a revised policy constitutes your acceptance of that revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns or requests relating to this Privacy Policy or the way hbaij handles your personal data, please contact our dedicated privacy support team. All queries are responded to within 24 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

Email: [email protected]