Privacy Policy — hbaji app

Section 1

Information We Collect

hbaji app collects personal information from players at various points during the registration process, throughout account use, and when players interact with our customer support team. We collect only the data that is necessary for the purposes described in this policy. The categories of information we collect are outlined below.

Registration and Identity Data

• Full legal name — as it appears on your government-issued identity document
• Date of birth — for age verification (18+ requirement)
• Residential address — including city, district, and postal code within Bangladesh
• Email address — used for account notifications, security alerts, and support communications
• Mobile number — used for account verification and mobile banking linkage (bKash, Nagad, Rocket)
• National ID (NID) number — collected during KYC verification as required by our anti-money laundering procedures
• Photographic identity documents — scanned copies of NID, passport, or driving licence submitted during verification

Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Mobile banking account identifiers (bKash/Nagad/Rocket account numbers) used for transactions
• Bank account details for bank transfer transactions (Dutch-Bangla Bank, BRAC Bank, City Bank)
• Transaction history associated with your hbaji app account

Technical and Usage Data

• IP address and approximate geolocation at login and during active sessions
• Device type, operating system, and browser version
• Session timestamps and duration of platform use
• Pages visited, games played, and betting activity logs
• Cookie identifiers and similar tracking data (see the Cookies section for full details)

hbaji app processes your personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose beyond those listed below without your explicit consent. The legal basis for each processing activity is identified alongside the purpose.

Purpose	Legal Basis
Account registration and identity verification	Contractual necessity
Processing deposits, withdrawals, and BDT transactions	Contractual necessity
Age verification and 18+ compliance checks	Legal obligation
Anti-money laundering (AML) monitoring	Legal obligation
Fraud detection and platform security	Legitimate interest
Customer support and dispute resolution	Contractual necessity
Sending account-related notifications and security alerts	Contractual necessity
Sending promotional communications (with opt-in consent)	Consent
Personalising game recommendations and offers	Legitimate interest / Consent
Responsible gaming monitoring and intervention	Legal obligation / Legitimate interest
Platform analytics and service improvement	Legitimate interest

hbaji app does not sell your personal data. We share your information only with the categories of third parties listed below, and only to the extent necessary for the specific purpose described. All third-party service providers who access player data are required to maintain confidentiality and process data only on hbaji app's instructions.

1. Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank receive transaction-specific data (such as account identifiers and transaction amounts) necessary to process your deposits and withdrawals. These partners are subject to their own privacy and data security policies.
2. Identity Verification Services: Third-party KYC and identity verification providers may process copies of your identity documents and personal details for the purpose of confirming your identity and age in compliance with our verification requirements.
3. Game Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt receive session and gameplay data necessary to deliver their games within the hbaji app platform. These providers operate under strict data processing agreements.
4. Fraud Detection and Security Providers: Specialised security and fraud prevention vendors may process IP addresses, device fingerprints, and behavioural data to identify and prevent fraudulent activity on the platform.
5. Customer Support Platforms: Our live chat and email support tools are operated with the assistance of third-party helpdesk software providers. Support conversation data is stored securely and used solely for resolving your queries.
6. Regulatory and Law Enforcement Authorities: hbaji app may be required to disclose your personal information to competent authorities — including financial regulators, law enforcement agencies, or courts — when legally obligated to do so. We will comply with all valid legal requests and will, where permitted, notify you of such disclosure.
7. Analytics Providers: Aggregated, anonymised usage data may be shared with analytics service providers to help us understand platform performance and improve user experience. This data does not identify individual players.

hbaji app uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, keep your session secure, and understand how players use the site. A cookie is a small text file placed on your device when you visit hbaji app. The following categories of cookies are used on hbaji app:

Cookie Type	Purpose	Required?
Strictly Necessary	Session management, login state, security tokens, fraud prevention	Yes
Functional	Remembering language, game preferences, and display settings	Optional
Performance / Analytics	Page load times, error tracking, usage patterns (anonymised)	Optional
Marketing / Targeting	Delivering relevant promotional messages and tracking campaign effectiveness	Optional (consent required)

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is being set. Please note that disabling strictly necessary cookies will prevent hbaji app from functioning correctly — you will not be able to log in or maintain a session without them.

hbaji app may also use web beacons, pixel tags, and similar technologies in emails and on certain pages of the platform. These technologies work in conjunction with cookies to track engagement with communications and to measure the effectiveness of promotional campaigns.

hbaji app retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of player data:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal / AML compliance
KYC / identity documents	Duration of account + 5 years post-closure	Regulatory obligation
Financial transaction records	7 years from transaction date	Financial record-keeping law
Betting and gaming history	5 years from date of activity	Dispute resolution / AML
Customer support communications	3 years from last interaction	Dispute resolution
Marketing consent records	Until consent withdrawn + 2 years	Compliance evidence
Technical / session logs	12 months from creation	Security monitoring
Anonymised analytics data	Indefinite (no personal identifiers)	Service improvement

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically possible within a standard timeframe (for example, data held in backup archives), hbaji app isolates the data from active processing until it can be deleted in accordance with standard backup rotation schedules.

hbaji app implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, hbaji app maintains security standards in line with accepted industry practice for online gaming platforms serving the Bangladesh market.

Key security measures in place include:

• SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using SSL/TLS protocols. Look for the padlock indicator in your browser's address bar when using hbaji app.
• Encrypted Data Storage: Sensitive personal data — including identity documents and payment references — is stored using encryption at rest on access-controlled servers.
• Access Controls: Strict role-based access controls limit internal access to player data to only those personnel whose job function requires it. All access to personal data is logged and audited.
• Two-Factor Authentication: hbaji app supports two-factor authentication (2FA) for player accounts to add an additional layer of protection to the hbaji app Login process.
• Penetration Testing: Our platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Breach Response: hbaji app maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights, affected players will be notified promptly with guidance on protective steps to take.

As a player on hbaji app, you hold a number of rights in relation to the personal data we hold about you. hbaji app is committed to honouring these rights and will respond to all valid requests within a reasonable timeframe, and in any case no later than 30 days from receipt of a valid, verified request.

1. Right of Access: You have the right to request a copy of the personal data hbaji app holds about you. We will provide this in a structured, readable format. We may ask you to verify your identity before fulfilling an access request.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly in your account profile; for others, contact our support team.
3. Right to Erasure: You may request that hbaji app delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. We will comply unless we are required to retain the data by law (for example, for AML compliance).
4. Right to Restriction: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a dispute about the accuracy of the data is being resolved.
5. Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a machine-readable format and to have it transferred to another data controller where technically feasible.
6. Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case hbaji app will review whether its interests override your rights.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

hbaji app reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes to this policy, we will notify registered players through one or more of the following channels:

• An in-platform notification displayed upon your next hbaji app Login
• An email sent to your registered email address
• A prominent notice displayed on this Privacy Policy page for a minimum of 30 days

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. Minor changes — such as corrections of typographical errors, clarifications that do not alter the substance of our practices, or updates to contact details — may be made without advance notice, though the "Last Updated" date will always be revised to reflect the change.

Your continued use of the hbaji app platform following notification of material changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you must stop using the platform and may request account closure by contacting our support team at [email protected]. We will process your closure request in accordance with our account closure procedures, retaining data only as required by applicable law.

We encourage all hbaji app players in Bangladesh to review this Privacy Policy regularly so that you remain informed about how your personal data is being handled. The most current version of this policy will always be available at hbaji-app.com/privacy-policy.