hbaji Privacy Policy —
How We Protect Your Data

This Privacy Policy applies to all users of hbaji.club and the hbaji mobile app. It covers how hbaji collects, processes, stores, and protects personal data provided by players in Bangladesh and other jurisdictions where hbaji operates.

hbaji is committed to handling your personal data responsibly. We collect only what we need, use it only for the purposes described in this policy, and never sell your information to third parties for marketing purposes. When you register on hbaji, deposit funds, or play any game on our platform, you are trusting us with your data — and we take that seriously.

This Privacy Policy should be read alongside hbaji's Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement between you and hbaji.

1What Data hbaji Collects

hbaji collects personal data in several categories depending on how you interact with the platform. Below is a full breakdown of the types of data we may hold about you:

Registration and Identity Data

This is the information you provide when you create your hbaji account. It is used to verify your identity, manage your account, and communicate with you.

Financial and Payment Data

Payment data is collected to process deposits and withdrawals. hbaji does not store full mobile wallet credentials — only the registered number and transaction references needed to process payments.

Gameplay and Activity Data

Gameplay data helps hbaji personalise your experience, detect problem gambling patterns, and ensure fair play across the platform.

Technical and Device Data

Technical data is collected automatically when you access hbaji. It is used for security monitoring, fraud detection, and improving platform performance.

2How hbaji Collects Your Data

hbaji collects personal data through the following channels:

• Direct registration: When you create an hbaji account, you provide your name, phone number, and other registration details directly.
• Deposits and withdrawals: When you make a payment via bKash, Nagad, or Rocket, transaction data is passed to hbaji by the payment provider.
• Gameplay activity: hbaji's platform automatically records your bets, game sessions, and account activity as you play.
• Cookies and tracking: When you visit hbaji.club, cookies and similar technologies collect technical data about your device and browsing behaviour. See the Cookies section below for full details.
• Customer support: If you contact hbaji via live chat or email, the content of those conversations is stored and linked to your account.
• Identity verification: If hbaji requests KYC documents (such as a national ID or passport), the information in those documents is collected and stored securely.

3How hbaji Uses Your Personal Data

hbaji uses your personal data only for legitimate purposes directly related to operating the platform and serving you as a player. The table below summarises the main purposes and the legal basis for each:

hbaji will never use your personal data for purposes that are incompatible with those listed above. If we need to use your data for a new purpose, we will update this Privacy Policy and notify you before doing so.

4Who hbaji Shares Your Data With

hbaji does not sell, rent, or trade your personal data to any third party. We share data only in the following limited circumstances:

• Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle your data.
• Identity verification services: When KYC checks are required, your identity documents may be shared with a third-party verification provider. These providers are contractually bound to handle your data securely and only for verification purposes.
• Game providers: Some games on hbaji are provided by third-party game studios. These providers may receive anonymised gameplay data for technical and audit purposes, but not your personal identity information.
• Legal and regulatory authorities: hbaji may be required to share data with law enforcement, financial regulators, or other government bodies if required by law or in response to a valid legal request.
• Fraud prevention services: hbaji uses industry-standard fraud detection tools that may process technical data such as IP addresses and device fingerprints to identify suspicious activity.

5Cookies and Tracking Technologies

hbaji uses cookies and similar tracking technologies on hbaji.club and in the hbaji mobile app. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how players use the site.

hbaji uses the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
• Analytics cookies: Used to understand how players navigate hbaji.club — which pages are visited most, how long sessions last, and where players drop off. This data is aggregated and anonymised.
• Preference cookies: Store your platform preferences such as language settings and display options so you do not have to reset them each visit.
• Security cookies: Help hbaji detect and prevent fraudulent login attempts, account takeovers, and suspicious activity patterns.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to play on hbaji, but may limit some personalisation features. hbaji does not use third-party advertising cookies or cross-site tracking cookies.

6How hbaji Secures Your Data

hbaji takes data security seriously. We implement multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse.

• Encryption in transit: All data transmitted between your device and hbaji.club is encrypted using TLS (Transport Layer Security). Look for the padlock icon in your browser address bar.
• Encrypted storage: Sensitive data including passwords and payment details are stored using industry-standard encryption algorithms. Passwords are hashed and salted — even hbaji staff cannot see your password.
• Access controls: Only authorised hbaji staff with a legitimate need can access player data. Access is logged and audited regularly.
• Two-factor authentication: hbaji supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to add an extra layer of protection to your account.
• Regular security audits: hbaji's platform and infrastructure undergo regular security reviews and penetration testing to identify and address vulnerabilities.

7How Long hbaji Keeps Your Data

hbaji retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The general retention periods are as follows:

• Active account data: Retained for the lifetime of your hbaji account plus a minimum of 5 years after account closure, as required for financial record-keeping and regulatory compliance.
• Transaction records: Deposit and withdrawal records are retained for a minimum of 7 years in line with standard financial regulations.
• KYC documents: Identity verification documents are retained for 5 years after account closure or the last transaction, whichever is later.
• Support communications: Live chat and email records are retained for 3 years from the date of the conversation.
• Technical and log data: Server logs and security data are retained for up to 12 months and then deleted or anonymised.

When data is no longer required, hbaji deletes it securely or anonymises it so it can no longer be linked to you as an individual. You may request early deletion of your data subject to the conditions described in the Your Rights section below.

8Your Data Rights

As an hbaji player, you have the following rights over your personal data. To exercise any of these rights, contact hbaji support at [email protected] or via live chat. We will respond to all valid requests within 30 days.

9Minors and Age Verification

hbaji is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. During registration, players are required to confirm that they are at least 18 years old. hbaji may request proof of age at any time, and accounts found to belong to minors will be immediately closed.

If you believe a minor has registered on hbaji using false information, please contact us immediately at [email protected]. We will investigate and take appropriate action, including closing the account and returning any deposits made.

10Changes to This Privacy Policy

hbaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.

The most current version of this Privacy Policy will always be available at hbaji.club/privacy-policy. The "Last Updated" date at the top of this page shows when the policy was most recently revised. Continued use of hbaji after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

11How to Contact hbaji About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how hbaji handles your personal information, please get in touch using any of the following methods:

• Live chat: Available 24/7 directly on hbaji.club — the fastest way to reach us.
• Email: [email protected] — we aim to respond to all privacy-related emails within 3 business days.